Splunk Search

Community Activity

How to map an matching result from 1 query to another Please help me in this query. --I have a query which produces result like uid user ip 1001 xyz 1.1.1.1 1002 abc ... by saimack New Member in Splunk Search 03-25-2016 0 3	0	3
Splunk ES - "Status Transitions" under "Edit Notable Event Status" is not getting updated Status transition is not working from "New" to other statuses other than "Resolved". When we try to edit the transiti... by sandeep_splunk Engager in Splunk Search 03-24-2016 0 1	0	1
Calculating hourly percentage rates for multiple sources I am trying to calculate hourly decline percentage rates for several different payment gateways. The percentage is ... by mhamano Explorer in Splunk Search 03-24-2016 0 2	0	2
How do I edit 'allSites' variable in the nexpose_reports.py to select specific sites for data retrieval. By default, data on all sites will be collected. If only data on specific sites is required please edit the 'allSites... by windbishn Explorer in Splunk Search 03-24-2016 0 2	0	2
regex on inputlookup (via python script ?) I tried to use regex on inputlookup csv file, but seems that although Splunk regex works fine on search but it doesnt... by smhsplunk Communicator in Splunk Search 03-24-2016 0 3	0	3
Transaction startswith argument with named fields ? How can I provide field values to the startswith argument of the transaction command? Like I would do in a search: ... by szabados Communicator in Splunk Search 03-24-2016 0 1	0	1
How do i list all splunk jobs which are running on hosts? need to identify high cpu usage searchs and stop them. need to identify high cpu usage searches and stop them. by splunkgk Path Finder in Splunk Search 03-24-2016 0 2	0	2
Help with extracting specific data Given bunch of results in a format like: 6d2112effbe814f41ef6a6b984221c2490ef5112b70d394c074bb1427561556c some.site.... by Reosoul New Member in Splunk Search 03-24-2016 0 3	0	3
Combine fields created by spath I have a log file multiple service requests/responses that I am logging in JSON. I am able to take the those requests... by SPETZD11 New Member in Splunk Search 03-24-2016 0 4	0	4
Compare Search Result Against Lookup File and Output Multiple Fields Hello, I am not sure what I am doing wrong but logically I feel this search string should work however it isn't work... by Makinde New Member in Splunk Search 03-24-2016 0 5	0	5
Why does splunk add junk to the front of a search when a field search is defined before the first pipe? With the simplest search: index=checkpoint action=accept \| head 1 The normalizedSearch (under Job Inspect, 8.34s) ... by landen99 Motivator in Splunk Search 03-24-2016 1 10	1	10
How to compare columns in a row Hi I have a query that produces some output like this: ID server_a.1 server_a.2 server_b.1 server... by ewanbrown Path Finder in Splunk Search 03-24-2016 0 5	0	5
Indexer not searchable by Search head I'm having a problem where I have 5 indexers and 1 search head. All 5 show up in the search peers under distributed ... by wweiland Contributor in Splunk Search 03-24-2016 0 5	0	5
Dashed line in timechart without advanced xml I want to use a dashed line in my timechart. I know that this is possible with advenced XML. But is this also possibl... by tgdvopab Path Finder in Splunk Search 03-24-2016 0 2	0	2
Different Results From Similar Queries Hi, I wonder whether someone may be able to help me please with something that I just don't understand. I'm using th... by IRHM73 Motivator in Splunk Search 03-24-2016 0 4	0	4
Conditional Transaction Hi I'm looking to extract a specific subset of events in my Splunk data. _time=3:01 type=update user=user2 _time=3:... by zeophlite New Member in Splunk Search 03-23-2016 0 5	0	5
How to remove additional results from search. I have a search that is showing the data I want, but I want to isolate it to a specific team and not show all results... by ericdelacruz Engager in Splunk Search 03-23-2016 0 1	0	1
Finding total number for OOID Hi all, I currently have a search that I need a little tweaking to get something else that I want. So the current s... by splunkman341 Communicator in Splunk Search 03-23-2016 0 4	0	4
BEWARE: srchFilter usage may negate each other in certain situation. If you are using deny (NOT) in your srchFilter be aware that inheritance of multiple roles with negative filters will... by the_wolverine Champion in Splunk Search 03-23-2016 1 1	1	1
help in calcuating the difference between two time stamps? Hello Experts, I have the below two fields EML_REQUEST_TIME: 2016-01-19 15:44:00.749 +00:00 EML_RESPONSE_TIME: 2... by vrmandadi Builder in Splunk Search 03-23-2016 0 13	0	13
How to find where logs are coming from and where they are being monitored? I am seeing logs in an instance of splunk, but i am unsure where the monitoring is set up. I checked my serverclass.... by JoeSco27 Communicator in Splunk Search 03-23-2016 0 4	0	4
Print rex result on search First, i'm sorry for my bad english. Let me explain my problem. I have to do a search on splunk, and in the result,... by arizoide New Member in Splunk Search 03-23-2016 0 1	0	1
regex global modifiers Hi, I trying to execute regex in search command with g (global) m (multi-line) s (single-line). the regular way (?gm... by alon7786 New Member in Splunk Search 03-23-2016 0 1	0	1
Global Environment Vars Shared Between Scripts? Hello. Is there a way to set a global environment variable in Splunk so that it can be shared and used multiple time... by _dave_b Communicator in Splunk Search 03-23-2016 0 4	0	4
Regexing multiple values Hello everyone, I've been banging my head on this one. I'm sure it involves 'rex' which I'm not so familiar with. I... by WestlyB New Member in Splunk Search 03-23-2016 0 5	0	5