Splunk Search

Community Activity

How to search all fieldA values where fieldB is a certain value? We have a single source with data (in table form) looking something like this: NamePositionDepartment John Whatev... by pm771 Communicator in Splunk Search 10-11-2016 0 4	0	4
How to edit my search to join results with a lookup table? I have a lookup table and have one search working good. I have another search I want to join to the lookup table, but... by chadman Path Finder in Splunk Search 10-11-2016 0 2	0	2
How to query for a Week over Week count of hosts reporting to Splunk Is there a better way to report the count of hosts reporting to Splunk week over week other than running the query us... by mohankesireddy Path Finder in Splunk Search 10-11-2016 0 4	0	4
How to show Value and Count in a subsearch? My goal is to look at firewall data and pull the top 10 Blocked IPs along with the incoming ports they were hitting. ... by deathbyearthwor Explorer in Splunk Search 10-11-2016 0 6	0	6
How to get a field from a unique transaction and group another transaction by the unique field? I have an event that will generate a login string for a user. Once that login string is generated, the connection str... by jegreene New Member in Splunk Search 10-11-2016 0 4	0	4
How to edit my search to view all occurrences of an event grouped by a field? Every time a user logs in, there is a log statement generated. I am currently running a search for a specific set of ... by emamedov Explorer in Splunk Search 10-11-2016 0 4	0	4
How to edit my search to get the last software inventory for each computer? Hello, I am collecting into Splunk computer software inventory periodically sent by all my computers. Each inventor... by sylbaea Communicator in Splunk Search 10-11-2016 0 5	0	5
How to edit my search to count the number of hosts per keyword? Each host has a particular keyword (they are extracted by field extractor), some hosts share the same keywords. I am ... by smhsplunk Communicator in Splunk Search 10-11-2016 0 1	0	1
How to overlay an average as a line over a timeseries I've looked around for an answer. Indeed, I modeled my answer after the following question: https://answers.splunk.co... by Splunkster45 Communicator in Splunk Search 10-11-2016 1 2	1	2
Can I use the result of an eval command as a token further down the line in my search? Hey y'all, I have a chart that takes transaction data from processes that run at different intervals. Most processe... by efferth Path Finder in Splunk Search 10-11-2016 0 4	0	4
How to Combine Two Regex to Form One Variable Hi all, I have events similar to these: [10-10-16 18:29:20:057]::TrxThread(A2571700)::DTRACE: Lock acquired for 100... by jepoyyyy Explorer in Splunk Search 10-10-2016 0 2	0	2
Why is the regular expression to match URI patterns in my Splunk search not working as expected? I want to match the line 1 and line 5 pattern kind of URI in my search /services/contracts/D7C3D8AD7B616D7ABA7B /ser... by uday88 New Member in Splunk Search 10-10-2016 0 4	0	4
I want to know whether Bob had se Please tell me the way of the binding of data. I want to combine the two data. These data How can you join? by kawashita_t Explorer in Splunk Search 10-10-2016 0 10	0	10
How to get a stats count for the same field values that are extracted from different unique sample data? Our logs have errors which we want to extract in a field and get a stats count of those errors. But sample data is di... by sjangampeta New Member in Splunk Search 10-10-2016 0 7	0	7
Why is the x-axis time range reversed in my timechart? I am seeing this odd behavior in my timechart, for some reason the X axis is reversed with the newest events showing ... by kchongo New Member in Splunk Search 10-10-2016 0 10	0	10
Need to get stats count by day I need a daily count of events of a particular type per day for an entire month June1 - 20 events June2 - 55 event... by shellnight Explorer in Splunk Search 10-10-2016 0 5	0	5
How to edit my timechart search with the predict command to predict a particular value? index=stocks\|timechart span=1d stock_price as price \|predict price I'm using a search like this I need to predict ... by kranthimutyala Path Finder in Splunk Search 10-10-2016 0 2	0	2
Why do these two searches return different results for page views? I've downloaded an application for web analytics, however on two separate dashboards it shows two difference values f... by pladamsplunk Explorer in Splunk Search 10-10-2016 0 1	0	1
Different median results: fast-mode vs verbose-mode Hi, I'm calculating a median. The result is not the same when I change from fast to verbose mode... Is this expected... by HeinzWaescher Motivator in Splunk Search 10-10-2016 1 4	1	4
More than one timerange in query I use the following query to find the process mstsc.exe in a subsearch. After that i want use the results from this s... by schoep Engager in Splunk Search 10-10-2016 1 1	1	1
Associating fields across events Hi All, I was hoping someone could answer my query: I have the following: index=ateme status=* \| eval progress=if(... by 999chris New Member in Splunk Search 10-10-2016 0 1	0	1
Sorting graphs by UK date format (dd/mm/yy) I'm running a summary index tracking event counts from a number of servers for each day. I'm trying to put up a dash... by capilarity Path Finder in Splunk Search 10-10-2016 1 6	1	6
no results under events but actually has 22 events which i can see under statistics Hi, I am calling an api to read the data and show in splunk. Under events its showing 22 but "No results" Under stat... by surekhasplunk Communicator in Splunk Search 10-10-2016 0 1	0	1
Chart with time grouping and multiple fields Hi, Iam trying to build the chart as below: Here I am having two fields as X-Axis (one is Parameter and other is ti... by harshal_chakran Builder in Splunk Search 10-09-2016 0 2	0	2
How to append multiple searches in one search? Hi, I tried using the following command to append few searches in one: index=network host=sg624* "fatal" NOT (Non-f... by anujs New Member in Splunk Search 10-09-2016 0 3	0	3