Splunk Search

Community Activity

How to find the most matching result? Dear all Splunkers I'm a newbie for splunk and quite frustrated any method can do somekind of compare/find the most ... by CcCcCcCcCc1 New Member in Splunk Search 09-03-2016 0 2	0	2
Change TableElement option in Javascript Hi, I would like to create a "results per page" dropdown in a table I display in a dashboard. First I create a dropd... by MaryvonneMB Path Finder in Splunk Search 09-03-2016 0 1	0	1
Average Count doesn't show? Hi, I have this query earliest=-4d index=wls OR index=main "ServletRequestImpl.java:2768" OR "rest path:/rest spe... by dbcase Motivator in Splunk Search 09-02-2016 0 5	0	5
How to create a time chart on response times for multiple services? I want to display the response time of 2 different transactions (or 2 events). Let's say, first transaction/event is ... by abc_ New Member in Splunk Search 09-02-2016 0 4	0	4
How do I run a search dynamically when specific inputs are received by splunk? Hello fellow splunkers, A few static files are generated within my environment, and when they do they are collected ... by JWBailey Communicator in Splunk Search 09-02-2016 1 2	1	2
Where are the tsidx files generated by tscollect command written to? I can't seem to find information in the documentation as to where I can locate the generated tsidx files from my tsco... by the_wolverine Champion in Splunk Search 09-02-2016 0 7	0	7
Why does searching "index=cisco_ios sourcetype=cisco:ios" return results, but "sourcetype=cisco:ios" does not? Hi I'm not able to search only with sourcetype=cisco:ios, When I do index=cisco_ios sourcetype=cisco:ios, it's worki... by kiran331 Builder in Splunk Search 09-02-2016 0 1	0	1
Simple math and string concatenation Hi I have this dashboard: <form> <label>Prova_selettore_dinamico Clona v1</label> <fieldset submitButton="false"... by andreafebbo Communicator in Splunk Search 09-02-2016 1 12	1	12
fetch between 2000 to 3000 events in query Hi, In splunk query 'head' command is used to get the first 'particular' number of events. I want to get the events ... by pasokkum Path Finder in Splunk Search 09-02-2016 1 4	1	4
Splunk query to list the events without date ? Also it would be great if anyone can lgive a search query to list out the top 10 hosts with those events? Thanks in ... by pavanae Builder in Splunk Search 09-02-2016 0 2	0	2
Some splunk events indexing without any date in them which makes manually insert the date in search query to search? Some splunk events indexing without any date in them which makes manually insert the date in search query to search..... by pavanae Builder in Splunk Search 09-02-2016 0 1	0	1
How do I get separate count for one field and then show total count in the other column Hi : I want a table something like : API Code Count Total API1 404 2 11 500 3 ... by mehwishw New Member in Splunk Search 09-01-2016 0 5	0	5
How to create a text input box in a dashboard that populates to all panels? Is this possible? Just an input box at the top of the dashboard where I can pass on a search item to all panels? Lo... by clintla Contributor in Splunk Search 09-01-2016 0 4	0	4
How do I search for the Errored Transaction_IDs ONLY, then take those Errored TIDs and search for each entry related to them? index=my_server sourcetype=server1_log NOT "status=SUCCESS" "client_id=my_client" returns TID=0101010101 client_id... by shariefc New Member in Splunk Search 09-01-2016 0 6	0	6
Map command returning limited results I am running a query that uses the map command to take the values of one search for use in another (in my case Policy... by ahogbin Communicator in Splunk Search 09-01-2016 0 8	0	8
I have a folder with 301 .log files, but why are 303 files shown when I add it, and searching the index only shows 27 files as events? I have a folder with 301 .log files. 1) When I add this folder, the number of files shown is 303. Why? 2) When I se... by ybiyani New Member in Splunk Search 09-01-2016 0 16	0	16
How to write a regular expression to extract this 3 digit number from my sample events? I have these statements I am trying to extract the "200" from, but this number could be any three digit number though... by JoshuaJohn Contributor in Splunk Search 09-01-2016 0 3	0	3
Why is the map command in my search no longer returning results? Hi, I would like to get the values of an event that matches a median value of that event. My search is something li... by kallisrayar1986 Path Finder in Splunk Search 09-01-2016 0 2	0	2
How to use the "Pattern" tab in Splunk? Hi All, I want to do text analytics in my data and I am thinking of using the "Pattern" tab for that. Actually, I ha... by pgadhari Builder in Splunk Search 09-01-2016 0 2	0	2
Why is my search producing error "The eval expression has no fields: 'round(on/total*100)'"? Hey people, I have a simple search I can't get to work. I've tried to look up solutions, but couldn't find anything ... by singhh4 Path Finder in Splunk Search 09-01-2016 0 2	0	2
How to create a drilldown on a timechart that, when clicked, opens another tab in the browser to view event details? Hi, I have a table that displays various data. If I click on a field in that table, it displays a panel that has a ... by dbcase Motivator in Splunk Search 09-01-2016 0 4	0	4
How to edit my search to reformat columns to rows and rows to columns for my resulting table? Hi, I have this search below, which produces results, but need to format these in a report. index=imdc_w sourcetyp... by splunker9999 Path Finder in Splunk Search 09-01-2016 0 4	0	4
How to edit my search to sort by date, time, and user? Hi Splunk Answers! I'm new to Splunk. I am trying to create a statistics table that shows our VPN users, their faile... by HCadmins Communicator in Splunk Search 09-01-2016 0 9	0	9
Replaceing NULL string for null() Hi, I'm trying to reuse an old app for a new environment and, of course, data and fields similar but different, so a... by jdanij Path Finder in Splunk Search 09-01-2016 0 11	0	11
How to extract a URL from a text string and assign it to a variable in Splunk? I cannot find a working example of this anywhere. I can find examples a mile long on google, but am having trouble a... by Cuyose Builder in Splunk Search 09-01-2016 0 4	0	4

Get Updates on the Splunk Community!

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform

Tech Talk Recap From Chaos to Control: Scaling Splunk Cloud with Infrastructure as Code Managing apps in ...

Splunk Search

How to find the most matching result?

Change TableElement option in Javascript

Average Count doesn't show?

How to create a time chart on response times for multiple services?

How do I run a search dynamically when specific inputs are received by splunk?

Where are the tsidx files generated by tscollect command written to?

Why does searching "index=cisco_ios sourcetype=cisco:ios" return results, but "sourcetype=cisco:ios" does not?

Simple math and string concatenation

fetch between 2000 to 3000 events in query

Splunk query to list the events without date ?

Some splunk events indexing without any date in them which makes manually insert the date in search query to search?

How do I get separate count for one field and then show total count in the other column

How to create a text input box in a dashboard that populates to all panels?

How do I search for the Errored Transaction_IDs ONLY, then take those Errored TIDs and search for each entry related to them?

Map command returning limited results

I have a folder with 301 .log files, but why are 303 files shown when I add it, and searching the index only shows 27 files as events?

How to write a regular expression to extract this 3 digit number from my sample events?

Why is the map command in my search no longer returning results?

How to use the "Pattern" tab in Splunk?

Why is my search producing error "The eval expression has no fields: 'round(on/total*100)'"?

How to create a drilldown on a timechart that, when clicked, opens another tab in the browser to view event details?

How to edit my search to reformat columns to rows and rows to columns for my resulting table?

How to edit my search to sort by date, time, and user?

Replaceing NULL string for null()

How to extract a URL from a text string and assign it to a variable in Splunk?

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation