Splunk Search

Community Activity

Where do I put the "useother" argument in my search? Hi, I have a search (Below) that I want to run to show me license details by date, sourcetype, and host. Unfortunat... by a212830 Champion in Splunk Search 04-27-2016 0 3	0	3
How to ensure a role will have a minimum search jobs number allocated to it? Even though Splunk allows us to set a role level concurrent search jobs limit, it really does not allow us to ensure ... by splunk_zen Builder in Splunk Search 04-27-2016 0 1	0	1
How to count the number of times a certain value appears per field? I'm new to Splunk - be kind... I can produce a table where I can get: Field1 Field2 Field3 Field4.... Comput... by acaruso Explorer in Splunk Search 04-27-2016 0 2	0	2
How to add 1 month to a current date field in a search? I have a table with an ID in it and a date. I've converted the date to be YYYYMMDD. Based on that date field, I would... by kmcaloon Explorer in Splunk Search 04-27-2016 0 2	0	2
How to group and calculate the program execute time in group? Hi expert, currently I am study Splunk and have some question, could you help me to resolve them? Thank you in advanc... by blueyuan New Member in Splunk Search 04-27-2016 0 6	0	6
How do I extract these two fields from a string in my sample data? Hello, I have this logs : Apr 26 12:49:09 10.30.245.203 Apr 26 14:49:12 MachineOne info tmm1[11869]: Rule /User_Age... by fbertoletti New Member in Splunk Search 04-27-2016 0 2	0	2
Splunk with MQ Series Hi, As said in Splunk's Application Management Solutions page, IBM MQ Series belongs to typical data sources. But I ... by vherilier Engager in Splunk Search 04-26-2016 1 4	1	4
iOS Transaction & Events Not Working I can initialize my Mint instanced and it shows in the dashboard. I have a nice sample log like so. [[Mint sharedIns... by cvDev New Member in Splunk Search 04-26-2016 0 1	0	1
Acceleration not working... Struggling with this query in Splunk ES. The results come back fine but take a long time to generate. Tried to acce... by dcasey Engager in Splunk Search 04-26-2016 1 2	1	2
How do I combine my two searches into one timechart? Hello, I have two searches I'd like to combine into one timechart. Each of these has its own set of _time values. T... by cwilcox13 Explorer in Splunk Search 04-26-2016 1 8	1	8
How to combine data from two CSV files using a common field where this field has a different name in each file? Hi, I have 2 CSV files that have a unique key of sorts.... The of sorts is, in one CSV file the unique key is named... by dbcase Motivator in Splunk Search 04-26-2016 0 7	0	7
Ticket analytics: How to chart open tickets over time like a "Burndown chart"? I would like to show an Open Ticket Count over time. A kind of “burndown chart”. I’ve read around on the KB, but th... by charliehack Engager in Splunk Search 04-26-2016 0 4	0	4
How to edit my regex for props and transforms.conf to extract all values for two fields? Hello, I have logs coming from one of my applications were the events are structured differently. I want to extract ... by splunk_kk Path Finder in Splunk Search 04-26-2016 0 2	0	2
How do I filter the results of my stats search with a where condition? The pipeline logic of this discrete math is kicking me hard today. I need to be able to find a list of laptops that ... by TobiasBoone Communicator in Splunk Search 04-26-2016 0 1	0	1
How to sum values in a table with a condition that compares columns? Hi, I've got a table like this ts1 \| ts2 \| count \| id 1461347440 \| 1461347448 \| 5 \| 1234 1461347459 \| 1461347452 \|... by HeinzWaescher Motivator in Splunk Search 04-26-2016 1 1	1	1
How many maximum rows and maximum columns can the KV store hold? I am trying to create a data repository which will store columns and rows. The number of records (or rows) I would b... by sandeep06splunk New Member in Splunk Search 04-26-2016 0 1	0	1
How to plot data on the Splunk Map from lookup data using Country Name, Country Code, City Name but not IP? I have a system that requires authentication so each user has a unique identifier. I have a lookup to enrich users t... by DanielFordWA Contributor in Splunk Search 04-26-2016 1 3	1	3
How to overlay a line of the overall average on a chart? I have a line chart. The chart is the consumption of the week for 3 printers. I wanted to put a line (which will prob... by renanprado96 Path Finder in Splunk Search 04-26-2016 0 7	0	7
How to create an app with only a "Search" tab and another tab with a specific dashboard? I would like to create an app with just a tab "search" and another tab with a specific dashboard (that I created). H... by monteirolopes Communicator in Splunk Search 04-26-2016 0 1	0	1
How to search the average and median of the number of events per second for each unique username? Hello! I need help with a search. Let's imagine we have Windows logs. These logs contain the field Username. I want ... by ibondarets Explorer in Splunk Search 04-26-2016 0 1	0	1
How to configure a timechart alert to not trigger between a certain time frame (1:00am - 5:00am)? I am trying to set up an alert based on time chart. My objective is to check user logins, and if no user logged in fo... by raindrop18 Communicator in Splunk Search 04-26-2016 0 2	0	2
Is there a way to optimize my join search? Hi, I did a report that lists users who have not logged on for more than 60 days and the status of users aren't disa... by monteirolopes Communicator in Splunk Search 04-26-2016 0 4	0	4
How to use NOT in an IF condition? I have 2 files: Account and Account.TXT. I have to get only the "Account" file details. I tried: if( (like(filename... by prakashbhanu407 New Member in Splunk Search 04-26-2016 0 4	0	4
Convert this time format to epoch and simple date format I have a time in the format of: Dec 23, 2015 11:45:26 BRST I'm trying to convert this to epoch time and later to a ... by bruno_eduardo Path Finder in Splunk Search 04-26-2016 0 4	0	4
How to run 10 unrelated searches as one scheduled search? I have several searches, about 10, each of which produces a CSV file as an output. I would like to run this as schedu... by ashabc Contributor in Splunk Search 04-26-2016 0 10	0	10