Splunk Search

Community Activity

	How to strip out trailing 0's I have a field in my output that contains the following values: DAT_Version = 6556.0000 What would the REGEX look li... by efelder0 Communicator in Splunk Search 09-21-2023 0 5	0	5
	How to transpose or untable one column from table with 3 columns? HelloI have a table with 3 columns : DomainEnvironemnt%of deploymentshelloqa12hello1dr13hello2prod13hello3dev15 And ... by sarit_s Communicator in Splunk Search 09-21-2023 0 1	0	1
	Count users' successful logins over time I would like to get the number of people connected (one successful login session per user per day will suffice) to ou... by DanAlexander Communicator in Splunk Search 09-21-2023 0 2	0	2
	KV Store status is currently unknown- How to resolve this error? We're intermittently getting this error (so far twice in 2 weeks) when trying to use the lookup command on a kvstore.... by jpvalenc Path Finder in Splunk Search 09-21-2023 0 3	0	3
	How to replace string using rex with partial matched string? How to replace string using rex with partial matched string?Thank you for your help.For example:I tried to replace ":... by LearningGuy Motivator in Splunk Search 09-21-2023 0 2	0	2
	Why is stats count query not working as expected? Hi All I have a csv file in splunk that i am searching on i am looking to get the total monthly figure spend on each... by PaulaCom Path Finder in Splunk Search 09-21-2023 0 1	0	1
	savedsearch will not run via cron schedule but can be ran manually I am fighting with what I think is a knowledge object permission at the moment, but not 100% sure of this. ContextI h... by GregSmith Explorer in Splunk Search 09-21-2023 0 2	0	2
	Get filename from path with rex HelloI am trying to get filename (name.exe) from a full path (dir + filename) from windows folders, ex:C:\dir1\dir2\f... by altink Builder in Splunk Search 09-21-2023 0 4	0	4
	Inputlookup Multiple Tables from REST I have a number of Lookups that I create with similar naming convention (and plan to create more in the future).I wan... by jamin358 Explorer in Splunk Search 09-21-2023 0 1	0	1
	How to use fields from 2 lookups for pie chart? Hello Team, I have 2 look up data and I want to join them through a common field MonthYear. I need to calculate tra... by gemrose Explorer in Splunk Search 09-21-2023 0 2	0	2
	How to convert date to epoch? I have this date string example: Mon, 01 May 2023 00:00:00 GMT how can I convert it to epoch? thanks! by Shakira1 Explorer in Splunk Search 09-21-2023 0 2	0	2
	Splunk Dashboard Hi Splunkers,I have a huge report with 15 to 20 pages worth of information which I need to show in a dashboard panel.... by revanthammineni Path Finder in Splunk Search 09-21-2023 0 1	0	1
	Can you list every field an index contains? Greetings,I have a search that list every index and what sourcetypes are contained within it.\|tstats values(sourcetyp... by learnyboi1 Observer in Splunk Search 09-20-2023 0 2	0	2
	How to count or match fields? I have a CSV of URLs I need to search against my proxy index (the url field), I want to be able to do a count or matc... by David_Arnold Explorer in Splunk Search 09-20-2023 0 8	0	8
	How to find events that were sent to HEC? Hi, I’m using splunk docker image with HEC to send log. I got Success message as the guideline. How could I query the... by ningziwen New Member in Splunk Search 09-20-2023 0 0	0	0
	How to evaluate to Field Value SPL? Hello Splunkers, I need some help with writing a SPL, I have a field called "DcPolicyAction" where the value could b... by mohsplunking Path Finder in Splunk Search 09-20-2023 0 2	0	2
	How to use the specified time query in join search A dashboard has a time range selector.has a query search like below, the first search will apply the time range selec... by mia Explorer in Splunk Search 09-20-2023 0 2	0	2
	Why does Splunk search result count diminishes during search? Hey,When running a query the results found are diminishing over time. Pagination is not of incluence ( tried 10, 50, ... by JLTsx Loves-to-Learn Lots in Splunk Search 09-20-2023 0 6	0	6
	How to rename a conditional field? Hi guys, I need some help trying to rename a specific field on condition that the renamed field is associated with on... by JohnEGones Communicator in Splunk Search 09-20-2023 0 7	0	7
	How can I extract all fields from my DB Connect results in Splunk? I have configured a Database Input in DB Connect to pull in data from an Oracle view. A sample string from one of the... by jroeser1404 Loves-to-Learn Everything in Splunk Search 09-20-2023 0 3	0	3
	How to create pairs of events based on non-unique id I have hundreds of thousands of events of this form.id event_type11 ack11 req11 ack12 req11 req12 ack11 ack13 req12 r... by jerrynandak New Member in Splunk Search 09-20-2023 0 3	0	3
	How do you set up the search so that it will search for the last 24 hours using the current date? Splunk newby here. I have a search that works if I change it every day but would like to add it to a dashboard for m... by flynegal Explorer in Splunk Search 09-20-2023 0 3	0	3
	Is it possible to change the table fields being sent with the sendemail command? Hello, I'm trying to find a way to use search result fields to address an e-mail, but remove those fields in the inl... by andrewtrobec Motivator in Splunk Search 09-20-2023 0 7	0	7
	Splunk Test Automation using TOSCA We have Splunk message validation scenarios in our test scenarios and need to know whether any Open API's are availab... by jijomathai New Member in Splunk Search 09-20-2023 0 0	0	0
	How to fill the gaps from days with no data in tstats + timechart query? Hello,How to fill the gaps from days with no data in tstats + timechart query?Query: \| tstats count as Total where in... by Neel881 Path Finder in Splunk Search 09-20-2023 0 7	0	7