Splunk Search

Community Activity

How do I edit my "rex mode=sed" search to extract this field? Just playing with rex sed a bit here. I had load balancer log which pops out the data center name. Just thought I wou... by daniel333 Builder in Splunk Search 02-16-2016 0 3	0	3
マップ(map) で、OpenStreetMap はインターネット接続なしでも使えるのでしょうか？ OpenStreetMapとSplunkタイルは、インターネット接続なしでも使用できると考えておりますが、正しいでしょうか？プロキシが必要な環境で、プロキシの設定を行わずにOpenStreetMapを使用した結果、地図が正常に表示... by tkomatsubara_sp Splunk Employee in Splunk Search 02-16-2016 0 4	0	4
How to extract fields from a log that is comma delimited? Ok, complex extraction. I have a log that is comma delimited, but they have key,value,key,value,key,value, etc. It's ... by rhaarmann Engager in Splunk Search 02-15-2016 0 2	0	2
Why is Splunk Cloud not SOC2 compliant for indexing under 50GB/day? Hi Splunkers  We're looking at Splunk Cloud as a possible solution in our environment, but compliance across variou... by Beaker77 Explorer in Splunk Search 02-15-2016 0 2	0	2
Using linemerge to merge events Here's the scenario. I have a log file in Windows that looks like this: c:\Program Files\server-program>server-comma... by cwwirth Explorer in Splunk Search 02-15-2016 0 1	0	1
How To Change Fix Field Value We are pulling in mysql_query events from a freeradius server however one of the field values has an or "\|" in it, so... by dbray_sd Path Finder in Splunk Search 02-15-2016 0 3	0	3
After connecting to a windows domain, Splunk displays wrong username I've looked around but haven't found the exact same issue I am having. I need to figure out how to fix the following... by crhodes Explorer in Splunk Search 02-15-2016 1 9	1	9
where field 1 or field 2 equals False I have two fields in a query where they either equal True or False and I want to find all the results where these two... by hastrike New Member in Splunk Search 02-15-2016 0 6	0	6
Average number of fields in an event We use splunk to index beacons our application sends in, many of these fields are optional, and we'd like to calculat... by ewanbrown Path Finder in Splunk Search 02-15-2016 0 4	0	4
regex help I have following as raw events Message=Total db time 272 seconds Message=Total db time 2,272 seconds Message=Total ... by saurabhkunte Path Finder in Splunk Search 02-15-2016 0 2	0	2
How do I extract fields from my CSV file to graph response times? I'm trying to transform the current CSV file output we are getting from an APM into Splunk to graph response times. ... by fisuser1 Contributor in Splunk Search 02-15-2016 0 10	0	10
How do I make my standard deviation search an alert, and will standard deviation be affected by how far back I search? I don't want information about Prelert Anomaly Detection...I've already asked about purchasing that app, but I still ... by dnsGuy314 New Member in Splunk Search 02-15-2016 0 1	0	1
Stats per hour? So, I was looking at this: https://answers.splunk.com/answers/205556/how-to-set-up-an-alert-if-the-same-error-occurs-... by reedmohn Communicator in Splunk Search 02-15-2016 0 2	0	2
Renaming column names(field value) in a search result We have a test index which captures all the response times of different transactions by version I wrote a search to ... by nitin_gurram New Member in Splunk Search 02-14-2016 0 2	0	2
Need help on rex Hi Team, Need help to extract fields for the following. Please help rex for the below. 'ConnID' '007202761fd... by rishiaggarwal Explorer in Splunk Search 02-14-2016 0 3	0	3
Calculation multiple events for actual duration for each event and average duration for all users Hi All, I am working on WIFI data, within the dataset, there are the following values 1. MAC_address 2. Associatio... by roy_tsangdd New Member in Splunk Search 02-14-2016 0 8	0	8
Why is my license usage search by app not showing information for all apps in my environment? Hi, I have a search mentioned below to see license usage per app, but the issue I am facing is, if I run the search ... by sunnyparmar Communicator in Splunk Search 02-14-2016 0 25	0	25
How to display the results of my transaction search in a table? Hi Everyone, I'm having an issue displaying transaction data in Table. The end result should look like this: No \| D... by Imjusttesting Explorer in Splunk Search 02-14-2016 0 10	0	10
How do I edit my search to include an app in a list that is using source=metrics.log? Hi, All my apps are indexing their data _internal index and using source=license_usage.log, but one of my apps is us... by sunnyparmar Communicator in Splunk Search 02-13-2016 0 11	0	11
How to search the average of one field by values of another field, then chart them side by side? I am very new to Splunk and trying to learn manipulation like I would in Excel. My current task is to get an average... by jasoholt Engager in Splunk Search 02-13-2016 0 2	0	2
How to configure regex in transforms.conf to extract values for a field? Hello, I am attempting to figure out a regex for a transforms.conf for a field named Call Reason Example data looks... by TheJagoff Communicator in Splunk Search 02-13-2016 0 6	0	6
Select all values from downdown list I have populated drop down input list in my dashboard and I am able to select all my options but everything I have t... by hastrike New Member in Splunk Search 02-12-2016 0 7	0	7
Why do one of my sourcetypes have a time field and others have a _time field? Hi, I have two different sourcetypes, and I noticed that one of them always has a "time" field, and another has a _... by a212830 Champion in Splunk Search 02-12-2016 0 5	0	5
help with field extraction Hi, I have a field extraction that I'm hoping someone can help me with. Here's the example: 2016-02-08T12:17:34.21... by a212830 Champion in Splunk Search 02-12-2016 0 5	0	5
How do I fill nulls in time series data without using timechart? I have time series data that I want to bucket into 15 minute chunks with corresponding counts like so.... mysearch \|... by jedatt01 Builder in Splunk Search 02-12-2016 0 2	0	2