Splunk Search

Community Activity

How do I edit my search to return a certain field value in my table of results? Hi, I'm trying to return some results with the AppID that is being searched. My current search does everything I wa... by phspec Explorer in Splunk Search 03-29-2016 0 10	0	10
Is there a way to eval 'job.resultCount' in a postprocess search? We recently upgraded to 6.3 and I have been toying with using eval and search event handlers. In one of my dashboards... by tasqn New Member in Splunk Search 03-29-2016 0 2	0	2
Compare monthly group average against user daily results We have dashboards that show the average of user work for the last month this could be for any of the various departm... by mikev Path Finder in Splunk Search 03-29-2016 0 3	0	3
DB Connect 1.1.7 download location The DB Connect 1 page only has v1.2.2 available for download (indicates to use 1.1.7 for Java 6 but no link); I have ... by sfellin Engager in Splunk Search 03-29-2016 0 1	0	1
Alert for events over a certain amount and over a certain percentage change I am trying to create an alert which will notify me when the percentage change in the delta/difference of events exce... by jwalzerpitt Influencer in Splunk Search 03-29-2016 0 3	0	3
Tranpose Column and Row Headings Hi, I wonder whether someone may be able to help me please. I'm trying to compare the apps set up in my four environ... by IRHM73 Motivator in Splunk Search 03-29-2016 0 6	0	6
how do the stats p* commands work in summary rollups? Hello, I have some data for which I calculate hourly avg/max/stdev into a summary index, then calculate daily summar... by cphair Builder in Splunk Search 03-29-2016 0 2	0	2
totals for a transaction I have a system with customers interacting with a catalogue, stepping through the menus, searching etc. I can chunk ... by David_Hodgson Engager in Splunk Search 03-29-2016 0 6	0	6
splunk search for users logging onto servers Hi, I have deployed splunk to log data of users who are logging onto servers (unix and windows). I want to create a... by chetanchauhan New Member in Splunk Search 03-29-2016 0 5	0	5
Subsearch not returning any results though matches exists. Hi, I am trying to run below query and the scenario is here. This is not returning any results though match exists. C... by sk_subhani New Member in Splunk Search 03-29-2016 0 2	0	2
Subsearch using loadjob not working I try the following search: \| loadjob savedsearch="admin:app1:app1_view1" \| fields hostname This returns "hostname... by jamesvz84 Communicator in Splunk Search 03-29-2016 0 2	0	2
Easy way to convert bits into bytes and kb one of the values in my log is sent and received I believe it's bytes. I would like to display those as Kb and Mb. Us... by jalfrey Communicator in Splunk Search 03-28-2016 1 6	1	6
How to do calculate log time between search result and next row ? Hi All, I am studying splunk recently and need help about some question, thanks. When I want to search one key word a... by blueyuan New Member in Splunk Search 03-28-2016 0 2	0	2
How to use the mvindex command to remove all characters after the second period (.) for a field's values? Hello, I am finding difficulty to use the mvindex command to remove all the characters after the second period (.). ... by vrmandadi Builder in Splunk Search 03-28-2016 0 4	0	4
How do I constrain a timechart's x-axis range, but still predict on more values than are displayed? Hello, Using Splunk Enterprise 6.2 I am running a prediction using 30+ historical days of data to predict the next ... by j_williams Explorer in Splunk Search 03-28-2016 0 3	0	3
Is this a scheduled real-time search? Hi, Are processes that contain "rt_scheduler" real-time scheduled searches? Example: splunk 15005 75443 0 10... by a212830 Champion in Splunk Search 03-28-2016 0 3	0	3
A way to improve subsearch performance without changing configuration? I am trying to search for data that is in a .csv lookup file and NOT in Splunk. My issue is that my subsearch stops (... by burzynskih Engager in Splunk Search 03-28-2016 0 5	0	5
How to get a random sample of iis events each day for the last X days to build control charts? On iis logs, suppose I have 60000 transactions per 24 hours. How can I get a random sample of say 5000 events? I need... by reachskhm New Member in Splunk Search 03-28-2016 0 4	0	4
How to query only large difference in timestamps? I have a dashboard query that returns fields of a log file, and I'm only interested if the difference in time between... by eandrus Engager in Splunk Search 03-28-2016 0 2	0	2
Proxy log regex: search for attachments We are trying to extract from the field "url" all files transferred as part of a session. The ultimate goal is to ke... by tlmayes Contributor in Splunk Search 03-28-2016 0 1	0	1
Timestamp/regex help Hi, I'm having a hard time getting a regex/timestamp to work properly. Here are some sample events: [5892][9008]... by a212830 Champion in Splunk Search 03-27-2016 0 6	0	6
removal of special character < question Hello Everyone, I am trying to format some syslog data for a dashboard output. I have no idea how to remove the < ch... by hermeslxxv Engager in Splunk Search 03-26-2016 0 2	0	2
Best way to overlay two searches on a graph that share similar X-axis intervals? I would like to have a panel that shows total logs per hour over 24 hours in a column graph, and show the average log... by cmeyers Explorer in Splunk Search 03-26-2016 0 6	0	6
Formating question and regex Hi All, I'm trying to search for start up and shutdown message of AWS instances and build a nice table. On my test i... by CYBR_AH Explorer in Splunk Search 03-26-2016 0 3	0	3
Trendmicro Regex Help Hi Community, I'm trying to figure out how to get the signature and signature id to their own fields. This has been ... by CYBR_AH Explorer in Splunk Search 03-25-2016 0 6	0	6