Splunk Search

Community Activity

What's best way to count calls from main search excluding sub search results? Greetings. I'm trying to count all calls in this:index="my_data" resourceId="sip*" "CONNECTED"Where not in this:index... by loganramirez Path Finder in Splunk Search 09-27-2023 0 3	0	3
run different filter in an index search based on a condition in dropdown Is it possible to run different filter in an index search based on a condition in dropdown below?The second filter wo... by LearningGuy Motivator in Splunk Search 09-27-2023 0 10	0	10
Need help with python script to log into Splunk Cloud I have the following script, but it keeps erroring out.def connect_to_splunk(username,password,host='http://xxxxxxxx.... by NanSplk01 Communicator in Splunk Search 09-27-2023 0 4	0	4
Using comparison function within mstats Hello fellow Splunkthiasts!I need some insights to understand how comparison functions in mstats could be used. Consi... by eregon Path Finder in Splunk Search 09-27-2023 0 0	0	0
Capture multiple values of same pattern in an event How do we capture multiple URLs in a single event?Log1:type=EXECVE msg=audit(1695798790.101:25214323): argc=17 a1="ht... by nihvk Explorer in Splunk Search 09-27-2023 0 4	0	4
Getting a count of the number of fields associated with a sourcetype I've done a little looking and poking around but haven't seen an answer to this - hopefully I haven't overlooked some... by Runals Motivator in Splunk Search 09-26-2023 0 12	0	12
what is the use of below query? index=botsv1 sourcetype="stream:http" \| timechart max(date_year) by itsahmedshaikh1 Observer in Splunk Search 09-26-2023 0 1	0	1
How to combine two csv? Hi All,I have two csv files. File1.csv -> id, operation_name, session_idFile2.csv -> id, error, operation_nameI want ... by siva_1 New Member in Splunk Search 09-26-2023 0 3	0	3
Blocked auditqueue causing random skipped searches and scheduler slowness on SH/SHC. Slow UI. Blocked auditqueue can cause random skipped searches, scheduler slowness on SH/SHC and slow UI. by hrawat Splunk Employee in Splunk Search 09-26-2023 0 1	0	1
How to parse grepable Nmap output? I have several events with similar to this raw data field that I would like to break down into a new event for each I... by rfiscus Path Finder in Splunk Search 09-26-2023 0 13	0	13
ingesting nmap xml output I have been trying to get nmap output into Splunk. I thought the xml output would be nice and straightforward!Whilst ... by jnames10 Explorer in Splunk Search 09-26-2023 1 11	1	11
How to create a search for matching two fields value to one new field? Hello Splunker, I'm trying to join two fields values in stats command using Eval , looks like I'm doing it wrong, Pl... by mohsplunking Path Finder in Splunk Search 09-26-2023 0 8	0	8
Missing settlement notification Event and Report extract rulesUse the payment business events to identify Transactions which have ACCP clearing statu... by Sekhar Explorer in Splunk Search 09-26-2023 0 1	0	1
How to filter results based on timeframe? In my search results, I am getting IP and user details. I want to filter my search results if the same IP has been us... by alexspunkshell Contributor in Splunk Search 09-25-2023 0 8	0	8
how do i clean a lookup csv table over 90 days I have a query below that looked for an index and output to a csv file however. the size of the csv keep growing and ... by bluewizard Explorer in Splunk Search 09-25-2023 0 2	0	2
How to Create Multiple Tables in One Dashboard? I am trying to create a Dashboard that hold multiple table of WebSphere App Server configuration data. The data I ha... by gsmith93 Engager in Splunk Search 09-25-2023 0 8	0	8
How do I calculate the percentage of one row against another in a stats? I'm working with a table of conversation data, all conversations start out as a bot chat and can be escalated to a hu... by arist0telis Explorer in Splunk Search 09-25-2023 0 2	0	2
Has anyone onboarded Oracle Cloud Add-on for Splunk recently? Hello Splunkers, Has anyone on-boarded Oracle cloud recently, Please share your experience and help with the right Ad... by mohsplunking Path Finder in Splunk Search 09-25-2023 0 1	0	1
How to union two time ranges I'm trying to UNION two different tables containing info on foreign traffic - the first table is a log with time rang... by marshalll3302 Explorer in Splunk Search 09-25-2023 0 5	0	5
How to flag users whose search engine queries contain certain words stored in a lookup table? Hi everyone, I've seen a few posts on here and elsewhere that seem to detail the same issue I'm having, but none o... by shawngunnison Engager in Splunk Search 09-25-2023 0 1	0	1
How can i create new fields with data from two different multi value fields? I need to break out log data from two separate multi-value fields into single value fields. Here is what data looks l... by mauricio_sandov Explorer in Splunk Search 09-25-2023 0 3	0	3
Dynamic time creation based on time picker Hi,I have a dashboard that shows service tickets count based on different parameters. Now I need to show a trend for ... by ethanhunt Explorer in Splunk Search 09-25-2023 0 4	0	4
splunk search statement using keyword from input box text string the large size logs like as belowit's not a regular json data, therefore need to using rex to get fieldsA logs have n... by mia Explorer in Splunk Search 09-25-2023 0 0	0	0
How to create a search query that finds a field value (eg A) that have mismatched field value(B) and field value (C)? Hi All, Below is my search query - index="idx-network-firewall" (sourcetype="fgt_traffic" OR sourcetype="fortigate_tr... by man03359 Communicator in Splunk Search 09-25-2023 0 5	0	5
How to Split hostname, IP and exclude IP from result Hi, i want to list out all the hostname in my tipwire log.but my hostname field are as below:Hostname10.10.10.10 : Ho... by Akmal57 Path Finder in Splunk Search 09-25-2023 0 4	0	4