Splunk Search

Community Activity

Is there a way to dynamically assign chart labels using a search? Is there a way to dynamically assign chart labels using a search? My search ends with a timechart values(foo) as bar,... by mszebenyi_splun Splunk Employee in Splunk Search 04-11-2016 2 3	2	3
How to edit my search to combine results to make multiple rows? Hello Everyone, With my current search I am able to display results in three rows, however, I need two of the rows t... by RogueMrSmith Engager in Splunk Search 04-11-2016 0 2	0	2
How do I update the extracted part of the source field in props.conf and transforms.conf? For example: source = D:\Users\ABC\Desktop\splunk\abc.log I have extracted the part of string I wanted using (?\w+... by apurva1707 New Member in Splunk Search 04-11-2016 0 1	0	1
To run a search only on click of a button in the page. I have a submit button module containing search module and I want to execute the search only when user clicks on the ... by asingla Communicator in Splunk Search 04-10-2016 0 6	0	6
How to write a search to only show the latest contents of a lookup file on a dashboard? Hi there, My external program is retrieving the data and creating lookup table every night. The files are stored lik... by kuga_mbsd New Member in Splunk Search 04-10-2016 0 7	0	7
Why does my query blow-up in size with a join? Why does my query blow-up in size with a join? I have a query which without a join (for further analysis) runs in 2M... by NickJLange Explorer in Splunk Search 04-10-2016 0 4	0	4
Help understanding search command : "Where" Hello dear splunkers, Can anyone tell me why these two commands give different results ? sourcetype=shopping date="... by DavidHourani Super Champion in Splunk Search 04-09-2016 0 12	0	12
show in a graph a numbers with two numbers after comma hi, I would like to build a graph with these values: a 100 b 97,56 c 99,34 my issue is when i try to see a graph.. ... by tissparkle Explorer in Splunk Search 04-09-2016 0 4	0	4
regex to extract date from the file name Hi we are using fs_notification and monitoring a specific path. I have a field called path which has the following v... by athorat Communicator in Splunk Search 04-09-2016 0 3	0	3
How to edit my regex to extract this value from my data? This should be an easy thing to do but obviously, I am missing it. I need to extract "cannot be located" c.f.a.k.m.... by ibekacyril Explorer in Splunk Search 04-09-2016 0 7	0	7
How to edit my search to only display users that have logged on to more than 5 workstations and sort the list in descending order? Hello, Like the title says, I have the search criteria pretty nailed down, however, I would like to do a count so on... by Makinde New Member in Splunk Search 04-09-2016 0 6	0	6
Optimize query by referring latest source data Hi, Here are the three sources that I have for the below query that I need to optimize : a) tech_detail.gz b) group_... by amoldesai Explorer in Splunk Search 04-08-2016 0 2	0	2
Splunk is only reading some records from a lookup and leaving others out. Any suggestions why? I have a CSV file uploaded as a lookup. I am using the userID from my search with the lookup, but for some reason, th... by Aaron_Fogarty Path Finder in Splunk Search 04-08-2016 0 6	0	6
How can I chart 24hr difference between Fields at exactly 7am over the last 7 days I am capturing events every minute. Within the events, there is a continuously compounding field: "FlowTotal_Running... by waldez Engager in Splunk Search 04-08-2016 0 3	0	3
SEDCMD search inline question I am trying to test a sedcmd command, inline, that Im going to add. I am finding a string and replacing it with a fie... by tkwaller Builder in Splunk Search 04-08-2016 0 7	0	7
What is the basic difference between the lookup, inputlook and outputlookup commands Good afternoon All, I am having a hard time trying to understand the difference between "lookup", "inputlookup", and... by janiceb Path Finder in Splunk Search 04-08-2016 6 3	6	3
Why is my search with transaction and concurrency commands skipping over certain events? I'm not sure if I can get any help here, but I am going to try cause I've been wrestling with this search/data for a ... by EricLloyd79 Builder in Splunk Search 04-08-2016 0 6	0	6
How to create a timechart in Splunk that shows how many accounts are in processing at different intervals? Hello Splunkers Hope you are doing good, appreciate beforehand all the time you take helping us out here. So I'm in... by benjillaz Explorer in Splunk Search 04-08-2016 1 2	1	2
How to extract fields from my _raw data into events and sort them in a table? I will try and explain my problem to the best of my ability. I am attempting to create a saved search from which I ho... by helpmejesus Explorer in Splunk Search 04-08-2016 0 3	0	3
How to edit my search to compute host up times with a lookup table and importance value? I have to take a logfile and extract certain fields to present as a percentage of availability ("UP" host_names). I ... by mikebarry New Member in Splunk Search 04-08-2016 0 4	0	4
Replace string I want to replace (" ") in my xml file to single (").Since there is some misplace of double codes in my whole file.So... by john Communicator in Splunk Search 04-08-2016 1 7	1	7
I need to fill missing values in a search as NULL I need to fill missing values from search items as NULL (not the string, but actual NULL values) I see options to ch... by abhijitp Path Finder in Splunk Search 04-08-2016 1 10	1	10
convert time field i have the last sync time for my activesync clients going to splunk via powershell input. ex: LastSyncAttemptTime = ... by gdavid Path Finder in Splunk Search 04-08-2016 0 5	0	5
Use of color field in treemap visualization Is there a working example of the use of color_field in the new Treemap visualization? I have tried the form that t... by raoul Path Finder in Splunk Search 04-08-2016 1 1	1	1
stats count help I am pulling syslogs and attempting to count IPs that are blocked for abuse. My counts are coming up 0. the IP used... by hermeslxxv Engager in Splunk Search 04-08-2016 0 5	0	5

Get Updates on the Splunk Community!

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Deep insights, no barriers: Splunk Observability Cloud Free Edition

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...

Monitoring AI Agents with Splunk Observability Cloud

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...

Splunk Search

Is there a way to dynamically assign chart labels using a search?

How to edit my search to combine results to make multiple rows?

How do I update the extracted part of the source field in props.conf and transforms.conf?

To run a search only on click of a button in the page.

How to write a search to only show the latest contents of a lookup file on a dashboard?

Why does my query blow-up in size with a join?

Help understanding search command : "Where"

show in a graph a numbers with two numbers after comma

regex to extract date from the file name

How to edit my regex to extract this value from my data?

How to edit my search to only display users that have logged on to more than 5 workstations and sort the list in descending order?

Optimize query by referring latest source data

Splunk is only reading some records from a lookup and leaving others out. Any suggestions why?

How can I chart 24hr difference between Fields at exactly 7am over the last 7 days

SEDCMD search inline question

What is the basic difference between the lookup, inputlook and outputlookup commands

Why is my search with transaction and concurrency commands skipping over certain events?

How to create a timechart in Splunk that shows how many accounts are in processing at different intervals?

How to extract fields from my _raw data into events and sort them in a table?

How to edit my search to compute host up times with a lookup table and importance value?

Replace string

I need to fill missing values in a search as NULL

convert time field

Use of color field in treemap visualization

stats count help

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Deep insights, no barriers: Splunk Observability Cloud Free Edition

Monitoring AI Agents with Splunk Observability Cloud

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation