Splunk Search

Community Activity

Anybody knows about {@fieldname} in a join Hi. I have been given a search, that I need some help decifering.index=atp-aes-prod sourcetype=atp_aes_json SourceCon... by las Builder in Splunk Search 10-17-2023 0 2	0	2
How to have an Alert Generate A Secondary Event with Different Field Names? We currently have an alert set up that generates a ticket in our ticketing platform. We are currently moving to a new... by tr_newman Explorer in Splunk Search 10-17-2023 0 6	0	6
Display a users time in portal by day Splunkers, I'm attempting to display how long a user as spent in our training portal over the last 30 days. Search ... by matthew_foos Path Finder in Splunk Search 10-17-2023 0 8	0	8
Passing multiselect token to the macros Hi Splunkers, I'm having the multiselect value that results need pass to a macros, Can you please help for that? ... by smanojkumar Contributor in Splunk Search 10-17-2023 0 6	0	6
How to Map fields to sourcetype Hi All, I need help building a SPL that would return all available fields mapped to their sourcetypes/source Looking... by DanAlexander Communicator in Splunk Search 10-17-2023 0 1	0	1
Blacklisting the hypen processname using REGEX Hi, As I was wondering can we blacklist the processname like "-" in the inputs.conf of DS ?? to save the splunk lice... by Raj Builder in Splunk Search 10-17-2023 0 1	0	1
Passing multiselect values to macros Hi There! I would like to pass multiselect values to macros, earlier it was dropdown. The values in multiselect its... by smanojkumar Contributor in Splunk Search 10-17-2023 0 1	0	1
How to extract using rex { [-] logger: org.mule.runtime.core.internal.processor.LoggerMessageProcessor message: Received update request IL... by avi7326 Path Finder in Splunk Search 10-17-2023 0 2	0	2
Loading notification on Dashboard Hi All In my current dashboard i have several text input that colleagues can use to find varies information. Sometime... by PaulaCom Path Finder in Splunk Search 10-17-2023 0 3	0	3
timeseries using an OR text search So I have the following search and I want to create a dashboard with separate columns for "Hits" and "Misses". Seems ... by chadwell Explorer in Splunk Search 10-17-2023 0 1	0	1
Autochoose dropdown (dropdown2) Item from another dropdown (dropdown1) Hello,How can I implement this one. to autochoose category dropdown from ingredient dropdown. FOr example, If I choos... by cdr01 Loves-to-Learn Lots in Splunk Search 10-17-2023 0 2	0	2
Extract a specific value and make a visualization with time I have regular traffic passing through my server. The server has the IP 10.41.6.222My goal is to extract the Rate /se... by john_snow00 Observer in Splunk Search 10-17-2023 0 4	0	4
To find the day for include/exclude weekends in search Hi There! I would like to include/exclude weekend in the search, So i had created the dropdown for that, I'm gettin... by smanojkumar Contributor in Splunk Search 10-17-2023 0 2	0	2
Update lookup file values dynamically I have a lookup file. Lookup has "host", "count", "first_event" and "last_event" fields. I want to run a search hou... by bt149 Path Finder in Splunk Search 10-17-2023 0 1	0	1
How to read a field value which field name is in another field? We have this table: And we want to have a field (for example, named "value") that gets the value of the field which ... by mseijos Engager in Splunk Search 10-17-2023 3 8	3	8
Record Numbers I'm going crazy with this, would appreciate some help.I'm pretty sure the record numbers were not being shown to me. ... by vikas1 Engager in Splunk Search 10-16-2023 0 3	0	3
Syntax Error while using "distance" command Hi peeps,I receive below error while running a query.below is my query;eventtype=sfdc-login-history \| iplocation allf... by syazwani Path Finder in Splunk Search 10-16-2023 0 4	0	4
I want create table view I have SPLindex=main state=open \| stats count(state) as open by risk_rating \| rename risk_rating as state \| addtotals... by abi2023 Path Finder in Splunk Search 10-16-2023 0 1	0	1
AWS User last login Hi.I want to create a search that checks for last user login date in AWS.I can see them in AWS IAM and there are bunc... by msilins Engager in Splunk Search 10-16-2023 0 1	0	1
Filtering 2 fields with multiple values Hello , i am new in Splunk and need help i get every week a vulnerability scan log with 2 main fields: "extracted_Ho... by LionSplunk Explorer in Splunk Search 10-16-2023 0 5	0	5
rex from the multivalue fields and get one particular value I have this multivalue fields where i am tring to rex and get particular field value like "value":"ESC1000", but ins... by mikeyty07 Communicator in Splunk Search 10-16-2023 0 6	0	6
How do I search for Filed Values in a Different Multi-Value Field I have two fields: DNS and DNS_Matched. The latter is a multi-value field. How can I see if a field value in DNS is i... by atebysandwich Path Finder in Splunk Search 10-16-2023 0 10	0	10
Find days with no events hello, i would like to find days in which a particular sourcetype is missing. With this, i'll drive an alert. for no... by johnnymc Path Finder in Splunk Search 10-16-2023 1 12	1	12
Splunk Condition Search Let's say im running a search where I want to look at domains traveled to.index=web_traffic sourcetype=domains domain... by MM0071 Path Finder in Splunk Search 10-16-2023 0 9	0	9
non-compliant naming convention for workstations Hello,I want to detect workstations authenticated to the active directory that are not compliant with our naming conv... by karimoss Loves-to-Learn in Splunk Search 10-16-2023 0 4	0	4