Splunk Search

Community Activity

Why are jobs showing as Dispatched at 12/31/69 and keep running? How to search for and alert on this condition? 1969 ... wow, what a year! We have noticed a problem where we find users complaining that they can't search, and in ... by wsnyder2 Path Finder in Splunk Search 08-29-2016 3 12	3	12
How to edit my geostats search for a simple map visualization? Getting "no match found" Hi, I'm trying to do a simple MAP visualization with the search below, but it is throwing me error no match found. I... by seetharamanss Explorer in Splunk Search 08-29-2016 0 3	0	3
How do I extract the time from this sample timestamp and convert it into seconds to find the different from the current time? Hi, This is the timestamp format that I get in the logs: 2016-08-22 14:49:01 I want to separate the date and time fr... by ppanchal Path Finder in Splunk Search 08-29-2016 0 10	0	10
Add a summary row to a statistics table Hi, I have this search: index=mso_statistics sourcetype=ic_connectivity_5min-too_small stat_name = "cell" \|eval m... by dbcase Motivator in Splunk Search 08-29-2016 0 5	0	5
I need some searching help for windows event logs. Can anyone tell me the specific search commands? Hey I'm new to splunk and I'm having problems finding specific events for a local server, I need help to search for t... by dyllonj Engager in Splunk Search 08-29-2016 0 3	0	3
How to extract specific lines in a multiline event based on regex match? I am trying to analyze exception logging that is written across multiple lines, and extract only certain lines of the... by popdeluxe New Member in Splunk Search 08-29-2016 0 2	0	2
Application Icon did not appear Hi everyone. I am in the midst of creating an app and I have been wanting to upload an App Icon (logo) so that it co... by nlfatin New Member in Splunk Search 08-29-2016 0 13	0	13
AddColTotals & Percentage Column To Listed values Hey guys! So i have this search: index="servers" \| stats count by Delivery, VDC, Manageable \| eval temp=Delivery."#"... by singhh4 Path Finder in Splunk Search 08-29-2016 0 2	0	2
Dnslookup to output multiple event list in one query Hello Team, Can someone pls help me to built a query using dnslookup to output multiple evnt from the event list in ... by neelu123 Explorer in Splunk Search 08-29-2016 0 3	0	3
What is the difference between the metasearch and tstats commands? I've been using tstats for most of the use cases that metasearch covers, and so I'm interested in what metasearch can... by muebel SplunkTrust in Splunk Search 08-29-2016 1 4	1	4
Creating a Tabular report I have following output in the logfile - The service /app/service/upload succeeded in 1.264000 seconds, Request: {us... by runiyal Path Finder in Splunk Search 08-29-2016 0 2	0	2
Renaming column at runtime without knowing at coding time their names. Hi. I have the following query BASE QUERY earliest=-7d latest=now \| bucket _time span=7d \| stats count as events by... by andreafebbo Communicator in Splunk Search 08-29-2016 1 4	1	4
Where condition based on date / time for imported data Hi, I've a CSV imported data (hostname = AVGMAILCOUNT) and want to use its data based on present time values. What... by ozirus Path Finder in Splunk Search 08-29-2016 0 1	0	1
Regex to extract numbers from non unique string Hello, I am hoping that someone with far more knowledge than myself can help with a bit of a puzzling problem I have... by ahogbin Communicator in Splunk Search 08-28-2016 0 8	0	8
Finding devices that are "off" at a date, and then counting how many of them turn "on" on each subsequent day Hi, I'm a first time splunk user trying to figure out how to do the following: I have data describing devices, the d... by ALevin123 New Member in Splunk Search 08-28-2016 0 9	0	9
Subsearch NOT with dbxquery Hello Team, I do have dbquery from mysql: \|dbxquery query="SELECT mac FROM pc.pc" connection=MYSQL shortnames=true \|... by teknet9 Path Finder in Splunk Search 08-28-2016 0 3	0	3
Possible to get information about user executing a custom command in Splunk from within the Python script? I have a custom script that I've defined as a command in commands.conf. I've tried adding passauth and enableheader, ... by rharrisssi Path Finder in Splunk Search 08-28-2016 0 1	0	1
Compare responseTime field toady to last week without using append Hello, I have a problem comparing responseTime field last minute with last week (monday - sunday). Below query give t... by appache Path Finder in Splunk Search 08-28-2016 0 13	0	13
Map search did not find value for required atribute Hello Team, map command is working for me but only with some fields. For example: host="10.62.140.64" CISE_Profiler ... by teknet9 Path Finder in Splunk Search 08-27-2016 0 3	0	3
Timechart aggregation with 2 fields for a count over time I have events of this form: fooKey="abc", fooLoc="5", fooCount="1" fooKey="def", fooLoc="10", fooCount="1" fooKey="a... by seanawilliams New Member in Splunk Search 08-27-2016 0 3	0	3
Automatic lookup failing I have a lookup working when I use "lookup" manually in my search. I cannot seem to get this working as an automatic ... by ipops Path Finder in Splunk Search 08-27-2016 0 1	0	1
Log file rotation with date in file name Hi, I have to get all (and ONLY) tomcat std out files in D:/Program Files/Apache Software Foundation/Tomcat 6.0/logs.... by 1234testtest Path Finder in Splunk Search 08-27-2016 0 5	0	5
Searching against an mvappend generated field We created in props.confthe following - EVAL-mod_code = mvappend(modifier_code, modifier_code2, modifier_code3, modi... by ddrillic Ultra Champion in Splunk Search 08-26-2016 0 1	0	1
Make splunk return latest results first Hi, I have a dashboard with search queries which take tens of seconds to run. The results are displayed as charts, ... by godouet New Member in Splunk Search 08-26-2016 0 6	0	6
How to include a distinct count in an eval statement? I am currenlty trying to make a search a little more dynamic based off scanned devices rather than a static number i... by trevorr2004 Engager in Splunk Search 08-26-2016 0 4	0	4