Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Splunk Search
Splunk Search
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Community
- :
- Splunk Answers
- :
- Using Splunk
- :
- Splunk Search
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Invite a Friend
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
I'm trying to extract some Oracle audit log fields on the fly. I can't seem to get my regex to match.
Source:
A...
by
nocostk
Communicator
in
Splunk Search
03-16-2011
|
2
|
4
| ||
|
|
I have tried this
source=/var/log/testlog "EXP" OR "Q up" OR "X listing" | rex "(?<myword>EXP|Q up|X listing)" | ...
by
chappe4
New Member
in
Splunk Search
10-20-2011
|
0
|
4
| ||
|
|
Hi,
I have looked at the docs and tried to remove a line from nginx access log regarding our LB :
192.168.27.16...
by
scalp42
New Member
in
Splunk Search
10-30-2012
|
0
|
4
| ||
|
|
Is it possible to have a subsearch looking for a log entry in realtime, then take that field and look back the past 5...
by
BP9906
Builder
in
Splunk Search
10-31-2012
|
0
|
4
| ||
|
|
Hello I am trying to extract some digits from a string and I can't seem to get the regex to work. Here is an example ...
by
naydenk
Path Finder
in
Splunk Search
10-31-2012
|
1
|
4
| ||
|
|
Hi,
I have a Splunk query which lets me view the frequency of visits to pages in my app.
sourcetype="iis" sourc...
by
bnitesh
Explorer
in
Splunk Search
10-31-2012
|
1
|
5
| ||
|
I am using this statement below to run every hour of the day looking for the value that is 1 on multiple hosts named ...
by
hartfoml
Motivator
in
Splunk Search
10-30-2012
|
0
|
1
| ||
|
|
I have some saved searches and I have fields from a data source (csv file) and my fields are defined in props and tra...
by
ngcgoon
Explorer
in
Splunk Search
03-31-2011
|
0
|
3
| ||
|
|
Hi all,
I've been struggling with Splunk for weeks now (and had Developer training!) and I still can't get it to d...
by
jonaubrey
Explorer
in
Splunk Search
10-01-2012
|
1
|
11
| ||
|
I have following log in xml format
<tec><items><item><name>Status</name><value>Online</value></item><item><name>Co...
by
jangid
Builder
in
Splunk Search
10-30-2012
|
1
|
1
| ||
|
|
Hi. I'm new to Splunk. I've got basic import and searching working on the windows install, but I want to get the fiel...
by
nosignal
Explorer
in
Splunk Search
10-29-2012
|
0
|
1
| ||
|
|
I have 2 keywords and I am running query :
index="maa" | table Name Age Location | rex field="Location" (?
...
by
abhayneilam
Contributor
in
Splunk Search
10-27-2012
|
0
|
9
| ||
|
|
I want to create a bar chart with these following search
eventtype="et_system_metrics" Stage=A* | stats count(ev...
by
jangid
Builder
in
Splunk Search
10-29-2012
|
0
|
6
| ||
|
|
What is the wrong in this sub search ? Individually both are working fine.
eventtype="et_system_metrics" Stage=A*...
by
jangid
Builder
in
Splunk Search
10-29-2012
|
0
|
4
| ||
|
|
I am giving the following search :
index="maa" | table Name Age Location | rex field="Location" (?
(?i)"de...
by
abhayneilam
Contributor
in
Splunk Search
10-26-2012
|
0
|
10
| ||
|
|
Hi,
I have a query as follows :
index="maa" |rex field="Location" (?
(?i)"delhi") | eval ONE=lower(ONE)...
by
abhayneilam
Contributor
in
Splunk Search
10-26-2012
|
0
|
3
| ||
|
|
Related to http://splunk-base.splunk.com/answers/7581/best-way-to-search-using-a-lookup-table
I want this inverse ...
by
gohar
Explorer
in
Splunk Search
05-24-2011
|
1
|
2
| ||
|
|
Hi, I am running the below query and want to print 0 for the keyword that is not matched , can this be possible to gi...
by
abhayneilam
Contributor
in
Splunk Search
10-26-2012
|
0
|
2
| ||
|
|
I have a challenge that I'm hoping someone can help with.
There are around 24,000,000 events being indexed per 24 ...
by
hirsts
Explorer
in
Splunk Search
10-02-2012
|
0
|
2
| ||
|
|
Hi,
Just have a look at this code
< module name="HiddenSearch" layoutPanel="panel_row2_col1" autoRun="True">
...
by
madanashok
Path Finder
in
Splunk Search
10-25-2012
|
0
|
2
|
Top Labels
-
chart
109 -
count
128 -
distributed search
1 -
eval
332 -
field extraction
247 -
fields
222 -
index
1 -
introduction
2 -
join
103 -
lookup
182 -
metadata
36 -
other
385 -
python
1 -
regex
154 -
rex
131 -
saved search
1 -
search head
1 -
search job inspector
81 -
search peer
1 -
sourcetype
2 -
stats
434 -
subsearch
184 -
table
211 -
timechart
140 -
transaction
53 -
troubleshooting
2 -
tstats
51 -
universal forwarder
1
- « Previous
- Next »
