Splunk Search

Community Activity

How to edit my alert search to convert Available Memory value from bytes to a percentage? I need to create an alert which is if in a 10 period of time to see if memory percentage of the host is over 90%. Her... by sonila Path Finder in Splunk Search 04-24-2017 0 8	0	8
Saving search results on a network share (Linux SH to Windows network share drive) I'm trying to automate saving search results for use with other programs. I'm not a Splunk admin, but I want to be ab... by tmaltizo Path Finder in Splunk Search 04-24-2017 0 3	0	3
In a field value that contains text, how can I display or extract just the numerical value within that text? We have a "Message" field that always contains the same verbiage except for a numerical value. I only want the numeri... by steveklinck New Member in Splunk Search 04-24-2017 0 5	0	5
Lookup csv file, match codes and add field I have a csv file containing 2 rows: EventCode and Message Summary Have added the CSV as a lookup file and I can also... by erdalcan New Member in Splunk Search 04-24-2017 0 5	0	5
How to create and calculate a response time graph? How do i calculate every 10 seconds, the average response time for the past 5 minutes and plot on a graph. by maniishpawar Path Finder in Splunk Search 04-24-2017 0 15	0	15
Creating Conditional based on date (2 days) I want to create a conditional that is based on date, so for example I have a table that will show you the last time ... by JoshuaJohn Contributor in Splunk Search 04-24-2017 0 1	0	1
IF then problems... struggling with the following IF statement.... I have a table, and want to create a new field called 'finalclosedtim... by jacqu3sy Path Finder in Splunk Search 04-24-2017 0 6	0	6
how to use timechart count to return 0 when value is null, fillnull not working I am working on a search that returns counts by the hour but when the event has not occur, I would still like to fill... by lasonyadj New Member in Splunk Search 04-24-2017 0 11	0	11
How to calculate a funnel (with less effort)? Hi, let's say I want to create a 5 step-funnel for customers depending on their max step. My first approach would b... by HeinzWaescher Motivator in Splunk Search 04-24-2017 0 6	0	6
How to add average to data that are not on the same line I have data in the form like this: 21:00 Pos=A Strength=45 21:00 Pos=B Strength=60 21:00 Pos=C Strength=32 22:00 Pos... by lakromani Builder in Splunk Search 04-24-2017 0 5	0	5
Use string stored in field to assign value using if I am using a search of real-time data and a lookup to check whether certain problems exist based on the data. For e... by ErikaE Communicator in Splunk Search 04-24-2017 0 6	0	6
Why "where" doesn't work with hight values ? Hi guys, I have a problem on my request because when i use a short time like 7 days ou 15 days it is right but when ... by Abarny Path Finder in Splunk Search 04-24-2017 0 5	0	5
Unable to create time series chart in Splunk dashboard Hi All, I need help in creating time chart for the following request: I have a field by name field.status that will ... by santosh_hb Explorer in Splunk Search 04-24-2017 0 9	0	9
Percentile values over time Hi I have a query to look at the number of times a user does an event, and then get different percentiles of these. ... by ewanbrown Path Finder in Splunk Search 04-24-2017 0 6	0	6
How to write a search that shows all saved searches, reports & lookup tables that are shared globally? Hi, Is it possible to write a search that shows all saved searches, reports & lookup tables that are shared globally... by HeinzWaescher Motivator in Splunk Search 04-24-2017 0 3	0	3
Can we create lookup table for specific owner? Hi, Is there any way that we can create lookup table for specific user? As I checked outputlookup command and it doe... by sumangala Path Finder in Splunk Search 04-24-2017 1 9	1	9
How can I find computers that have been infected for three consecutive days? I want to find the host IPs for three consecutive days of antivirus detection. Please help me. ex) - sourcetype: viru... by superhm Explorer in Splunk Search 04-24-2017 0 2	0	2
Received event for unconfigured/disabled/delted...... I am a splunk novice. Https://answers.splunk.com/answers/522405/why-is-there-no-data-in-my-summary-index.html URL o... by xsstest Communicator in Splunk Search 04-23-2017 0 4	0	4
How does 'partial=True' affects 'timechart' results? I am grouping time buckets using 'span' and I'd like to trim partial time buckets at the beginning and end of the sea... by abonuccelli_spl Splunk Employee in Splunk Search 04-22-2017 2 3	2	3
Refining the search through lookup Hi, Below is the search I am running on a set of servers in the lookup file , I don't want to run the search on all ... by macadminrohit Contributor in Splunk Search 04-22-2017 0 7	0	7
Strange relationship between fieldformat command and postprocess The fieldformat command ( http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Fieldformat ) offers a ... by sideview SplunkTrust in Splunk Search 04-22-2017 1 5	1	5
Remove non alphanumeric at the very start in props.conf Is it possible to remove all non alpha-numeric when taking in data in the props.conf? I have tried wiht regex but i ... by robertlynch2020 Influencer in Splunk Search 04-22-2017 0 13	0	13
How to change a name within a field? I have hundreds of .tmp files that begin with evb* and exist within the "File Name" field. All I want to do is change... by happysplunkyay New Member in Splunk Search 04-21-2017 0 8	0	8
VIM syntax highlighting for splunk config files Just wanted to share with the community the plugin and syntax highlighter I've made for VIM. To enable syntax highli... by yoho Contributor in Splunk Search 04-21-2017 14 10	14	10
Help me with transaction command Is there any option other than transaction command to measure the time between events? because i am already using tra... by sravankaripe Communicator in Splunk Search 04-21-2017 0 1	0	1