Splunk Search

Community Activity

How to pull a value from one column based on condition on another column? I am trying to run an equivalent of the below query in splunk search, please help. SELECT CONCAT(run, '.', tag) as f... by infoneo New Member in Splunk Search 07-27-2016 0 1	0	1
How to edit my rex search to extract two different or duplicate IP addresses at the same time? Current search: search "xxx" \| rex field=_raw "api:(?\s\d+.\d+.\d+.\d+)" I'm using the rex command, but it does no... by cyberportnoc Explorer in Splunk Search 07-27-2016 0 2	0	2
how to use search result and search again for each grouped value ("conn=" AND "IP=") \| rex field=_raw "conn=(?\d+)" \| join connum [search "err=49" AND "conn" \| rex field=_raw "conn=(... by cyberportnoc Explorer in Splunk Search 07-27-2016 0 1	0	1
How to show a timeline of concurrent transactions Hi, I'm trying to create a chart showing batch jobs on a timeline, in the manner of an evolutionary or geological ti... by joelbyrnes Engager in Splunk Search 07-27-2016 1 1	1	1
Improve Search Performance Hi, Ive constructed the below 5 searches to populate a dashboard, once they go onto our live systems they are going ... by mwdbhyat Builder in Splunk Search 07-27-2016 0 3	0	3
tstats with timchart Hi, If I use tstats and timechart will the timechart slow down my search drastically(There is a ton of data so tryin... by mansel_scheffel Explorer in Splunk Search 07-27-2016 0 1	0	1
How to resize the width of a single value field Hi, Want to reduce the width size of single value field. I want first 2 fields to be closer and then some space a... by payal23 Path Finder in Splunk Search 07-26-2016 0 1	0	1
Why are the emailed results of my search not formatted the same as results in Splunk Web? I have a real time search that sends an email if there are any results. In Splunk, the search is formatted as I would... by mdufrasne Explorer in Splunk Search 07-26-2016 0 3	0	3
Bar Chart Line, based stats sum Regard's, I have a bar chart is a project cost of summation. In this chart I need to have two vertical lines where ... by markux Path Finder in Splunk Search 07-26-2016 0 7	0	7
How to extract MAC addresses from a log that has all values delimited by a comma, but the order of fields can change? Hi, I am trying to extract MAC addresses from a log that has all the values separated by a comma. I would use the d... by aer9480 Explorer in Splunk Search 07-26-2016 0 8	0	8
whitelist match issues Hi everyone, I am having an issue where a logical AND NOT isn't working properly. Simply put I have an alert for mai... by alaking Explorer in Splunk Search 07-26-2016 0 1	0	1
How to display certain background colors for single value visualizations based on search results? I am trying to make my search have 3 different background colors: Green if healthy, Yellow if warning, Red if critica... by JoshuaJohn Contributor in Splunk Search 07-26-2016 0 1	0	1
Calculate time difference in two different logs Hello - Stumped on this. I have two different log files. One logs the time (and data) in transactions sent, the othe... by cj039165 New Member in Splunk Search 07-26-2016 0 11	0	11
Search event count limited from REST API but not UI search Hi, I'm running a search as follows via the Splunk Web UI ie. search index="xxxx" sourcetype="some_gateway" for a gi... by tabchb Explorer in Splunk Search 07-26-2016 1 7	1	7
How to search for earlier events for a given field? I'm trying to create a report which will find the number of 'new users'. I've extracted the field user. I want to fin... by pladamsplunk Explorer in Splunk Search 07-26-2016 0 7	0	7
Can one graph that can show transactions per minute, and when clicked, it shows transactions per second? I am creating a dashboard that currently exists in a different programming language. The dash that exists already, sh... by amcquarters New Member in Splunk Search 07-26-2016 0 1	0	1
How can I combine stats from multiple servers from 1 site as 1 row to build a stats table for multiple sites? I've got to get a report going that will show us multiple cloud site statistics for XenDesktop in a single report. Wh... by sligerc New Member in Splunk Search 07-26-2016 0 2	0	2
how to plot count of distinct value over time? earliest=-6month sourcetype="mysource" \| timechart span=1week count by product_name I was running this in order to s... by davidoh0905 Engager in Splunk Search 07-26-2016 0 7	0	7
How do I get Splunk to recognize the full Date AND Time in the timestamp of this CSV? Event lines look like this {I5K5-M8HD47HI-6694GOIH},01/02/2010 07:13:39,NLR0174,PC-8272,Connect Everything I've trie... by jimmitch923 New Member in Splunk Search 07-26-2016 0 2	0	2
Search _raw for values in a csv? I've confirmed that the following search works: index=* sourcetype=proxy \| eval domain="google" \| where match(_raw,d... by rbogner Engager in Splunk Search 07-26-2016 0 3	0	3
addcoltotals : do not sum percentages Hello, I'd like to do the following (screenshot at http://hpics.li/49c6c08), do not sum percentages but just followi... by splunkreal Influencer in Splunk Search 07-26-2016 0 5	0	5
samples for the chord chart vis? Has anyone got a sample? There used to be a chord chart vis and i had a few reports using this but the old chord cha... by dominiquevocat SplunkTrust in Splunk Search 07-26-2016 0 2	0	2
How to calculate the total number of words in a sentence ? by anjanikumar Engager in Splunk Search 07-26-2016 0 1	0	1
Mapping Dates Proportionally in Splunk Visualizations/Charts Hi Team, Can any one please provide me any help or clue how to map Dates/time proportionally on X-axis of Splunk Cha... by ashish9433 Communicator in Splunk Search 07-26-2016 0 11	0	11
Finding zero events gives a result of 1 I have the following search : index=cust_prod sourcetype=cust_export Result="Failure" \| stats count as fail This se... by pwesterbeek Engager in Splunk Search 07-26-2016 0 4	0	4