Splunk Search

Community Activity

How do I add extra fields to a "chart count over fieldA by fieldB" search? In the earthquake example at the bottom of the chart help page (http://docs.splunk.com/Documentation/Splunk/6.0.9/Sea... by rjrcooper New Member in Splunk Search 04-15-2016 0 2	0	2
ERROR DispatchCommand : maximum disk usage quota has been reached Hi,In my appname/local/ dir,authorize.conf's configuration information: [default] srchDiskQuota = 20000 srchJobsQu... by ray_cao Engager in Splunk Search 04-15-2016 0 4	0	4
Has anyone implemented a Motion Chart or Small Multiples using D3? I'm looking for a way to to implement a motion chart and small multiples with my Splunk data. I know the D3 library ... by fdarrigo Path Finder in Splunk Search 04-14-2016 0 2	0	2
How can I extract a timestamp from a specific CSV field regardless of format? Hi all, I have a CSV file that could look like this: Ticket-ID,User ID,Site ID,Site City,Site State,Create_date,Mod... by j2bohan New Member in Splunk Search 04-14-2016 0 1	0	1
How to place and sort data in a table for a single event based on the field names? Hello, I'm having trouble breaking apart an event into a chart. I have an event with 15 data points. The field ti... by waldez Engager in Splunk Search 04-14-2016 0 6	0	6
Help understanding the commands - Search vs Where after first pipe Hi , Can you help me understanding "search" vs "where" command after first pipe. Is there any performance impact beca... by Kukkadapu Path Finder in Splunk Search 04-14-2016 0 5	0	5
how to sum all average values within the hour and timechart only the latest? I guess my question is a little hard to explain... so let me start by giving you an example of the data I'm working w... by kamgineer Explorer in Splunk Search 04-14-2016 0 6	0	6
How to extract all occurrences of a field from JSON with a repeating structure? I have the following JSON and am looking to extract all of the occurrences of Lat and Long. I have used a macro defi... by roshannon New Member in Splunk Search 04-14-2016 0 1	0	1
How to sum the count of two fields when they have the same value? I have data where each event has two fields to show the source and destination city of a package.I can get the count ... by lyndac Contributor in Splunk Search 04-14-2016 1 5	1	5
Use different Regex in one search Hello I have a dashboard with a radio-button input. Depending on which value is selected, I want to use a different ... by tgdvopab Path Finder in Splunk Search 04-14-2016 0 1	0	1
How to add two fields together based on a condition? Background Information: I have an index from a tool that is being fed into Splunk. The tool has a score field and a ... by SplvnkGirl New Member in Splunk Search 04-14-2016 0 8	0	8
How do I take the ratio of (sum of 2 categories) / (total categories)? Though this question seems similar to the other discussions, I'm having a hard time relating to them. A network serv... by at999 New Member in Splunk Search 04-14-2016 0 10	0	10
How to get stats average with a where clause in the same search? If I run this search: index=main sourcetype=Metrics MEASUREMENT_POINT_NAME = "Test" \| stats avg(ELAPSED_TIME) I ge... by justinrowan Explorer in Splunk Search 04-14-2016 0 5	0	5
Why am I not getting results running a search on an extracted field? Hi at all, I have a very strange behavior in one of my searches: I extracted a field from a raw as a part of a word... by gcusello SplunkTrust in Splunk Search 04-14-2016 0 2	0	2
How do I convert binary files to human readable format? I'm getting this error in Splunk: 04-13-2016 11:13:58.607 -0500 WARN FileClassifierManager - The file '/opt/wasserv... by prakash007 Builder in Splunk Search 04-14-2016 0 2	0	2
Calculating percentage and placing in a radial gauge I am trying to a radial gauge to report a percentage. I've built my search and the field that I want to report on ha... by ronmurphy New Member in Splunk Search 04-14-2016 0 3	0	3
How to create a search that shows a trending value based on the selected time range picker value? Hello, I need to make a search in a dashboard which creates a trending value comparing the range of time you pick (e... by Iranes Explorer in Splunk Search 04-14-2016 1 6	1	6
Search help to identify when start/finish tasks fail to finish properly. Need some advice on a search. I have a logfile that clearly states starting and finishing tasks for each of the Batc... by zindain24 Path Finder in Splunk Search 04-14-2016 0 2	0	2
Chart the actual value over time and not an average, etc. I know this should be a simple thing but I am trying to just chart out the trend of a value over time. I don't want a... by msmapper Path Finder in Splunk Search 04-13-2016 5 5	5	5
How to edit my search to get the sum of the maximum value per day for the month? So I have my accurite weather sensor pumping its data into Splunk. (If you want to know how I did that just ask  ).... by thefuzz4 Path Finder in Splunk Search 04-13-2016 0 2	0	2
How to write a search to return unique field values for a certain time range that did not exist before that period? Hello, I am trying to make a search that will return the messages from logs from one set, but not from the other. Un... by Bags Explorer in Splunk Search 04-13-2016 0 12	0	12
does snap-to mean snap forward or snap back? For example, if the time is 8:55 and I look for events -h@h, does that mean 7:00 (8:55-1=7:55, then to @h is 7) or 8... by alexl1 Path Finder in Splunk Search 04-13-2016 0 4	0	4
Subsearch limits. Better approach? I'm a Splunk rookie, so i apologize if I'm unclear on my question. I have one index which contains, among other thin... by gbarwis Engager in Splunk Search 04-13-2016 0 3	0	3
How do I edit my search to join multiple search results for user authentication failure counts? Hi All, Am trying to join multiple searches for authentication failures from UserType (i.e, Windows User, Linux User... by kpavan Path Finder in Splunk Search 04-13-2016 0 1	0	1
How do I compare distinct counts of a given field between two different time ranges within the same Splunk search? I have a CSV file that a list of customers and their orders. The format is as follows: OrderDate, OrderNumber, Cust... by niravshahcorero New Member in Splunk Search 04-13-2016 0 1	0	1