Splunk Search

Community Activity

	Want a Dashboard to display all exceptions occured in the last 30 days in a graphical way. Hi Team,I want to have a query which displays me all types of exceptions occured in the last 30 days in a table way o... by Harish429 Loves-to-Learn Lots in Splunk Search 11-03-2023 0 7	0	7
	Find rare Transaction flow HiIs there anyway to find transaction flow like thisi have log file contain 50 million transactions like this16:30:53... by indeed_2000 Motivator in Splunk Search 11-03-2023 0 11	0	11
	How to calculate sum of a field based on other distinct field? Hello,How to calculate sum of a field based on other distinct field?For example: How to find sum for score of distinc... by LearningGuy Motivator in Splunk Search 11-03-2023 0 7	0	7
	Search across nested json to get employee details for different dates I have a response from one of the client application like this:{<!-- --> "employees": {<!-- --> "2023-03-16": {<!-- --> "1": {<!-- --> "id": 1, "name... by raunakp Engager in Splunk Search 11-03-2023 0 3	0	3
	How to change the column name after timechart output I am created below query to get the hourly report of certain tasks. I go the final timechart values for four differen... by ravir_jbp Explorer in Splunk Search 11-02-2023 0 1	0	1
	Work out how much data splunk searches per day / month / on average Hello, we are trying to work out how much data our Splunk instances search through on average.so we've written a sear... by lavster Path Finder in Splunk Search 11-02-2023 0 0	0	0
	Correlation to search multiple ST for matching rexed values Looking to build 1 correlation search to do the following:Bring an extracted field name from 1 ST and search that fie... by Capttech Explorer in Splunk Search 11-02-2023 0 3	0	3
	Extraction of Multiple events (URLS and IP addresses) from text files Hi, We receive daily emails with lists of IOC's for malware and phishing alerts, each email may contain multiple ip a... by capilarity Path Finder in Splunk Search 11-02-2023 0 1	0	1
	How to apply predict command on multiple fields returned by timechart command? Hello @kamlesh_vaghela,This is with regards to your solution posted on the below thread: -https://community.splunk.co... by Taruchit Contributor in Splunk Search 11-02-2023 0 1	0	1
	Search in square brackets I don't understand how this works, what should replace the square brackets in this situation or what does the search ... by vanheer Explorer in Splunk Search 11-02-2023 0 2	0	2
	Passing Multiselect macro input token to search Hi Splunkers! I would like to pass two macros as a token to a base search when multiple values in multiselect is sel... by smanojkumar Contributor in Splunk Search 11-02-2023 0 0	0	0
	Performant way to use "dedup" with group by I basically have the opposite question as can be seen here:https://community.splunk.com/t5/Splunk-Search/How-to-use-t... by duesser Path Finder in Splunk Search 11-02-2023 0 4	0	4
	what is the difference between summary indexing and data models? Hi  i'm new hier and i still don't understand the difference between summary indexing and data modeling.When should ... by Day Engager in Splunk Search 11-02-2023 0 3	0	3
	How extract the lines as failures from logs using splunk index=os source="/var/log/bitbucket" host=servera* Failedand evaluate them as failed packages to install. Failed:pyt... by Hema_Nithya Explorer in Splunk Search 11-02-2023 0 1	0	1
	How to display panels dynamically depends on selection ? Hi All,I am working on analyzing processing time among 10 devices and categorize all the evnets into 3 categories, in... by Jouman Path Finder in Splunk Search 11-02-2023 0 11	0	11
	How to calculate distinct count with condition? Hello,How to calculate distinct count with condition?How to calculate unique vuln that has score >0, group by ip?Befo... by LearningGuy Motivator in Splunk Search 11-02-2023 0 5	0	5
	How to hide a field of a table but keep it for separate search? How to hide a field of a table but keep it for separate search? Thank you for your helpFor example: field "id" exi... by LearningGuy Motivator in Splunk Search 11-02-2023 0 6	0	6
	Extracting sub fields or sub string in multiline log. Good mornign All,I have several logs with fields which have sibfield. I would like to be able to extract the subfield... by BoscoBaracus Engager in Splunk Search 11-01-2023 0 2	0	2
	Need an SPL to find the threshold for the domain Hi,I need an spl to find the threshold for the respective domains.index=ss group="Threat Intelligence"\| stats values... by Raj Builder in Splunk Search 11-01-2023 0 10	0	10
	Count distinct instances of a field which is an arbitrary structure Say I have events of the form:{<!-- --> something: "cool", subfield: {<!-- --> this: "may contain", arbitrary: ["... by ojensen Explorer in Splunk Search 11-01-2023 0 1	0	1
	Frequency analysis on names in splunk Is there a built-in solution in splunk that does the frequency analysis (for ex. on domain names) ?There is a solutio... by hmi79 Loves-to-Learn in Splunk Search 11-01-2023 0 1	0	1
	Need to remove T and Z from output timestamp I am trying to remove T and Z from the output timestamp results. Can you please help me with the query to remove and... by ravir_jbp Explorer in Splunk Search 11-01-2023 0 4	0	4
	Calculate duration sum of consecutive events with other events in between. Haven't been able to find this, but I want to basically calculate up time percentage for a host based on 2 unique eve... by smahoney Path Finder in Splunk Search 11-01-2023 0 7	0	7
	Set up an alert whenever a host stops sending logs to Splunk Hello,I have a lookup where all the hostnames are available under the field called "title" with respect to teams.I wo... by Roy_9 Motivator in Splunk Search 11-01-2023 0 9	0	9
	Remove only fields that do not have suffix Basically I have a search with a lot of fields, similar to this example: \| makeresults \| eval aa1=1, aa2=2, aa1x=3, ... by duesser Path Finder in Splunk Search 11-01-2023 0 3	0	3