Splunk Search

Community Activity

stats count issue, mismatch with search query results Hello, i'm using a query to find all traffic hitting a singe firewall rule. it's something like this: host=fw_host_n... by delalegro Engager in Splunk Search 09-03-2016 0 3	0	3
How to edit my search to chart the count of how many sources were indexed in the last hour? I want to create a scheduled report that would count how many log files we’ve received in last hour. This is what I’v... by shahzadarif Path Finder in Splunk Search 09-03-2016 0 3	0	3
How to find the most matching result? Dear all Splunkers I'm a newbie for splunk and quite frustrated any method can do somekind of compare/find the most ... by CcCcCcCcCc1 New Member in Splunk Search 09-03-2016 0 2	0	2
Change TableElement option in Javascript Hi, I would like to create a "results per page" dropdown in a table I display in a dashboard. First I create a dropd... by MaryvonneMB Path Finder in Splunk Search 09-03-2016 0 1	0	1
Average Count doesn't show? Hi, I have this query earliest=-4d index=wls OR index=main "ServletRequestImpl.java:2768" OR "rest path:/rest spe... by dbcase Motivator in Splunk Search 09-02-2016 0 5	0	5
How to create a time chart on response times for multiple services? I want to display the response time of 2 different transactions (or 2 events). Let's say, first transaction/event is ... by abc_ New Member in Splunk Search 09-02-2016 0 4	0	4
How do I run a search dynamically when specific inputs are received by splunk? Hello fellow splunkers, A few static files are generated within my environment, and when they do they are collected ... by JWBailey Communicator in Splunk Search 09-02-2016 1 2	1	2
Where are the tsidx files generated by tscollect command written to? I can't seem to find information in the documentation as to where I can locate the generated tsidx files from my tsco... by the_wolverine Champion in Splunk Search 09-02-2016 0 7	0	7
Why does searching "index=cisco_ios sourcetype=cisco:ios" return results, but "sourcetype=cisco:ios" does not? Hi I'm not able to search only with sourcetype=cisco:ios, When I do index=cisco_ios sourcetype=cisco:ios, it's worki... by kiran331 Builder in Splunk Search 09-02-2016 0 1	0	1
Simple math and string concatenation Hi I have this dashboard: <form> <label>Prova_selettore_dinamico Clona v1</label> <fieldset submitButton="false"... by andreafebbo Communicator in Splunk Search 09-02-2016 1 12	1	12
fetch between 2000 to 3000 events in query Hi, In splunk query 'head' command is used to get the first 'particular' number of events. I want to get the events ... by pasokkum Path Finder in Splunk Search 09-02-2016 1 4	1	4
Splunk query to list the events without date ? Also it would be great if anyone can lgive a search query to list out the top 10 hosts with those events? Thanks in ... by pavanae Builder in Splunk Search 09-02-2016 0 2	0	2
Some splunk events indexing without any date in them which makes manually insert the date in search query to search? Some splunk events indexing without any date in them which makes manually insert the date in search query to search..... by pavanae Builder in Splunk Search 09-02-2016 0 1	0	1
How do I get separate count for one field and then show total count in the other column Hi : I want a table something like : API Code Count Total API1 404 2 11 500 3 ... by mehwishw New Member in Splunk Search 09-01-2016 0 5	0	5
How to create a text input box in a dashboard that populates to all panels? Is this possible? Just an input box at the top of the dashboard where I can pass on a search item to all panels? Lo... by clintla Contributor in Splunk Search 09-01-2016 0 4	0	4
How do I search for the Errored Transaction_IDs ONLY, then take those Errored TIDs and search for each entry related to them? index=my_server sourcetype=server1_log NOT "status=SUCCESS" "client_id=my_client" returns TID=0101010101 client_id... by shariefc New Member in Splunk Search 09-01-2016 0 6	0	6
Map command returning limited results I am running a query that uses the map command to take the values of one search for use in another (in my case Policy... by ahogbin Communicator in Splunk Search 09-01-2016 0 8	0	8
I have a folder with 301 .log files, but why are 303 files shown when I add it, and searching the index only shows 27 files as events? I have a folder with 301 .log files. 1) When I add this folder, the number of files shown is 303. Why? 2) When I se... by ybiyani New Member in Splunk Search 09-01-2016 0 16	0	16
How to write a regular expression to extract this 3 digit number from my sample events? I have these statements I am trying to extract the "200" from, but this number could be any three digit number though... by JoshuaJohn Contributor in Splunk Search 09-01-2016 0 3	0	3
Why is the map command in my search no longer returning results? Hi, I would like to get the values of an event that matches a median value of that event. My search is something li... by kallisrayar1986 Path Finder in Splunk Search 09-01-2016 0 2	0	2
How to use the "Pattern" tab in Splunk? Hi All, I want to do text analytics in my data and I am thinking of using the "Pattern" tab for that. Actually, I ha... by pgadhari Builder in Splunk Search 09-01-2016 0 2	0	2
Why is my search producing error "The eval expression has no fields: 'round(on/total*100)'"? Hey people, I have a simple search I can't get to work. I've tried to look up solutions, but couldn't find anything ... by singhh4 Path Finder in Splunk Search 09-01-2016 0 2	0	2
How to create a drilldown on a timechart that, when clicked, opens another tab in the browser to view event details? Hi, I have a table that displays various data. If I click on a field in that table, it displays a panel that has a ... by dbcase Motivator in Splunk Search 09-01-2016 0 4	0	4
How to edit my search to reformat columns to rows and rows to columns for my resulting table? Hi, I have this search below, which produces results, but need to format these in a report. index=imdc_w sourcetyp... by splunker9999 Path Finder in Splunk Search 09-01-2016 0 4	0	4
How to edit my search to sort by date, time, and user? Hi Splunk Answers! I'm new to Splunk. I am trying to create a statistics table that shows our VPN users, their faile... by HCadmins Communicator in Splunk Search 09-01-2016 0 9	0	9

Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

Splunk Search

stats count issue, mismatch with search query results

How to edit my search to chart the count of how many sources were indexed in the last hour?

How to find the most matching result?

Change TableElement option in Javascript

Average Count doesn't show?

How to create a time chart on response times for multiple services?

How do I run a search dynamically when specific inputs are received by splunk?

Where are the tsidx files generated by tscollect command written to?

Why does searching "index=cisco_ios sourcetype=cisco:ios" return results, but "sourcetype=cisco:ios" does not?

Simple math and string concatenation

fetch between 2000 to 3000 events in query

Splunk query to list the events without date ?

Some splunk events indexing without any date in them which makes manually insert the date in search query to search?

How do I get separate count for one field and then show total count in the other column

How to create a text input box in a dashboard that populates to all panels?

How do I search for the Errored Transaction_IDs ONLY, then take those Errored TIDs and search for each entry related to them?

Map command returning limited results

I have a folder with 301 .log files, but why are 303 files shown when I add it, and searching the index only shows 27 files as events?

How to write a regular expression to extract this 3 digit number from my sample events?

Why is the map command in my search no longer returning results?

How to use the "Pattern" tab in Splunk?

Why is my search producing error "The eval expression has no fields: 'round(on/total*100)'"?

How to create a drilldown on a timechart that, when clicked, opens another tab in the browser to view event details?

How to edit my search to reformat columns to rows and rows to columns for my resulting table?

How to edit my search to sort by date, time, and user?

Unlock Database Monitoring with Splunk Observability Cloud

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Answers Content Calendar May 2025!

MLTKC how should i check jupyter notebook func in ...

Splunk Search

Join the Conversation