Splunk Search

Community Activity

Summary Indexing for dashboard Hi, I want to use summary indexing for my dashboard and was wondering what the best approach would be? The following... by mwdbhyat Builder in Splunk Search 08-08-2016 1 6	1	6
Why is the regular expression for rex in my search not extracting the field from my sample data? Hi, I have this data fn.util.SingleDeviceDebugger - RCVD REST request from premise 101: GET /rest/icontrol/login HT... by dbcase Motivator in Splunk Search 08-08-2016 0 8	0	8
Invalid value Drilldown error I have a table on my dashboard which contains values that link to the actual data log on splunk. I am trying to open ... by ssingh313 Path Finder in Splunk Search 08-08-2016 0 23	0	23
How do I get Unique users per day and per month in one query and then divide them Hi, I have a field called "UserID" and a DateActive field. I'm looking to make a bar chart where each bar has a valu... by pzhou07920 Explorer in Splunk Search 08-08-2016 0 23	0	23
calculate sum of multiple fields in different lines identified using regex I want to calculate sum of multiple fields which occur in different lines in logs I have logs like bmwcar=10 bmwtr... by karthik2146 Engager in Splunk Search 08-08-2016 0 9	0	9
Field Extraction Problem Hey, Splunkers I'm having issues attempting a field extraction. The field extraction with appending data is a comple... by asarran Path Finder in Splunk Search 08-08-2016 1 12	1	12
What are best practices for creating summary indexes to populate a dashboard? Hi, I need to create some summary indexes and am wondering what the best approach would be? So far there are various... by mansel_scheffel Explorer in Splunk Search 08-08-2016 0 1	0	1
How do I merge columns from a CSV with an existing input lookup file? Hi Team, I have an input lookup file called windows.CSV and have another .CSV file which contains host, sourcetype, ... by syedsalam New Member in Splunk Search 08-07-2016 0 10	0	10
Is there a permanent solution for handling too many search jobs found in the dispatch directory? Hello. I am getting this error: Too many search jobs found in the dispatch directory (found=7079, warning level = ... by sunhoo Engager in Splunk Search 08-07-2016 0 1	0	1
How to search within a timestamp that isn't _time? Hi guys, I'm trying to search within events on a specific day using a timestamp that is not _time and I also want to... by kendrickt Path Finder in Splunk Search 08-07-2016 0 3	0	3
How is the maximum offset used in my time-based lookup search? Hi, I've created time-based lookup definition which I want to use in my search. The example.csv has a time field "ti... by HeinzWaescher Motivator in Splunk Search 08-07-2016 0 2	0	2
How to search the count of failed logs per month for the past six months? Hi, I want to generate the monthly report for the past six months and need the count of failed logs for each month. ... by syed_star357 New Member in Splunk Search 08-07-2016 0 4	0	4
An index is shown under default search for a role, but why is a search on this index producing "No result" on the search head? Hello Team, xyz_prd_index created, running forwarder fine on the host. It displays all indexers too when we do list... by u192612 New Member in Splunk Search 08-07-2016 0 2	0	2
Retrieve information from a URL Is there a way I can call a URL (https://who.is/whois-ip/ip-address/) and pass it a parameter (54.174.106.18) so the... by dbcase Motivator in Splunk Search 08-06-2016 1 6	1	6
How to alert when a certain field changes from a value to another random value? Hi everyone, I want to create an alert by email when one of the fields of my index changes. I have a file with diffe... by clairebesson Explorer in Splunk Search 08-06-2016 0 3	0	3
How to configure Optiv Threat Intel to use a proxy I recently upgraded Optiv Threat Intel app and all of my proxy information disappeared. I have been searching around... by john_glasscock Path Finder in Splunk Search 08-06-2016 0 1	0	1
How do I write a regular expression in a Splunk search to extract data from comma separated text into a table format? I am trying to write a search/extract on a below sample type of log file: Sample data is as below (it will repeat acr... by vinodagl New Member in Splunk Search 08-06-2016 0 1	0	1
How to compare 2 table with a same field value? Hi, Please help me construct this query. I have 2 search tables Table1 from Sourcetype=A FieldA1 FieldB1 Table2 fr... by Jayee3010 New Member in Splunk Search 08-05-2016 0 8	0	8
How do you place icons on a map I would like to plot radio towers on a map. How could I place a jpg instead of a dot on a lat/long on a location on ... by ccsfdave Builder in Splunk Search 08-05-2016 0 1	0	1
How to edit my search to only display policy numbers with a failed transaction status? index="np_dpa" PROXYNAME="ProcessUBIDeviceFulfillmentCommunication" Application="Datapower" TransactionStatus="FAIL" ... by athorat Communicator in Splunk Search 08-05-2016 0 1	0	1
How to display the time of one search in the final result when we have another subsearch inside of it? Below is my search. What I need is to have the time related to that error also saved(Timen) and then shown in the fi... by Vignesh5r New Member in Splunk Search 08-05-2016 0 8	0	8
Unable to run a search through REST API I am trying to run a saved search through the REST API. To test, I was trying to pull up a list. https://pbdc-splk-0... by tmontney Builder in Splunk Search 08-05-2016 0 4	0	4
How to add and subtract time in earliest and latest using parameters in my panel search? Hi Splunkers, Requirement: I have a line graph in PANEL1. If I click at a point on a line graph it will display ano... by sridharreddy New Member in Splunk Search 08-05-2016 0 7	0	7
How can I get the content of a latest event's field and use it in aggregation without data loss? I have following events: TicketId SplunkTimeStamp Version 6.1608E+14 8/5/2016 8:32 16 6.1608E+14 8/4/20... by qinglinms Explorer in Splunk Search 08-05-2016 0 5	0	5
REX IP Address extraction Hi, I have this search in attempting to extract the IP address, but no luck. blah....\|rex "beta.icontrol.com\s(?\d{... by dbcase Motivator in Splunk Search 08-05-2016 0 3	0	3

Get Updates on the Splunk Community!

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Splunk Search

Summary Indexing for dashboard

Why is the regular expression for rex in my search not extracting the field from my sample data?

Invalid value Drilldown error

How do I get Unique users per day and per month in one query and then divide them

calculate sum of multiple fields in different lines identified using regex

Field Extraction Problem

What are best practices for creating summary indexes to populate a dashboard?

How do I merge columns from a CSV with an existing input lookup file?

Is there a permanent solution for handling too many search jobs found in the dispatch directory?

How to search within a timestamp that isn't _time?

How is the maximum offset used in my time-based lookup search?

How to search the count of failed logs per month for the past six months?

An index is shown under default search for a role, but why is a search on this index producing "No result" on the search head?

Retrieve information from a URL

How to alert when a certain field changes from a value to another random value?

How to configure Optiv Threat Intel to use a proxy

How do I write a regular expression in a Splunk search to extract data from comma separated text into a table format?

How to compare 2 table with a same field value?

How do you place icons on a map

How to edit my search to only display policy numbers with a failed transaction status?

How to display the time of one search in the final result when we have another subsearch inside of it?

Unable to run a search through REST API

How to add and subtract time in earliest and latest using parameters in my panel search?

How can I get the content of a latest event's field and use it in aggregation without data loss?

REX IP Address extraction

Quick connection discovery mode for forwarders

Build and Launch AI Agents from Your Splunk Workflows

Splunk Cloud Application Management in Terraform

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation