Splunk Search

Community Activity

Can search deal with bracket expansions? I'm using splunk in HPC use cases that can span hundreds or even thousands of machines contiguously or potentially in... by mjones414 Contributor in Splunk Search 12-09-2015 0 2	0	2
How to make an existing field equal a certain value based on the value of another field? I have a need to make an existing field a value if another field is a certain value. Example: what I want to do: im... by wtaylor149 Explorer in Splunk Search 12-09-2015 0 2	0	2
How do I edit my regular expression for rex to extract all expected fields and values from my sample multiline event? Here is the logged event: SepsisGraphBuilderImpl: 11252495 MS VitalsGraphBuilderImpl: 2257 MS Mic2GraphBuilder: ... by pkudrle New Member in Splunk Search 12-09-2015 0 5	0	5
Can I force Splunk to set a minimum number of bins for timechart? Hi, I have a timechart with some data (earliest and latest); Splunk displays 2 bins, and I want to have 20 bins. My ... by lukasz92 Communicator in Splunk Search 12-09-2015 1 1	1	1
use rex to extract last word/number in a line Hi, I have logs like theses: blah blah (Linux+amd64+2.6.18-308.11.1.el5;+Java+HotSpot(TM)+64-Bit+Server+VM+20.5-b03... by sriva6 New Member in Splunk Search 12-09-2015 0 3	0	3
How do I represent an Eval result with timechart? Hi, With the support of Splunk's community, I have this search below. However, right now I would like to take the re... by rafasalo Engager in Splunk Search 12-09-2015 0 5	0	5
Why are some default fields not being extracted for data coming in via TCP syslog with my current props and transforms.conf? I have data incoming via TCP syslog. I have created the following transforms to process them: etc/system/local/props... by dannestor Explorer in Splunk Search 12-09-2015 0 8	0	8
Splunk Stream question I work for energy capture and storage organisation and we were thinking of using Splunk to capture data from our main... by chaker Contributor in Splunk Search 12-09-2015 0 4	0	4
Merge 'sourcetype-too_small' with 'sourcetype' I have the same sourcetype log files separated in different directories by day, and different files for every hour. S... by zachmaster Engager in Splunk Search 12-08-2015 1 2	1	2
How can I get external JavaScript framework app to wait until the search has completed before executing additional code? I need my app to wait until the search has completed before it executes additional code. I'm using the following meth... by jedatt01 Builder in Splunk Search 12-08-2015 0 1	0	1
What is a Web server, which is used in splunk? What is a Web server, which is used in splunk? Splunkで使用しているWebサーバーは何ですか？ by flapjackoctopus New Member in Splunk Search 12-08-2015 0 1	0	1
How to retrieve Chart Title and use it in the search? I am wondering if it is possible to get the value of the chart title and use it/reference it in the search? <panel> ... by dablackgoku1234 New Member in Splunk Search 12-08-2015 0 5	0	5
How to create a dashboard panel of alerts triggered in the past 24 hours that also displays the alert search results? I have set up alerting for my app such that it emails the user whenever the count or volume for today is outside of a... by lyndac Contributor in Splunk Search 12-08-2015 0 4	0	4
If I delete all accelerated searches inside a summary index, would it delete the summary as well? I have a massive summary index that contains multiple searches that I have selected to use acceleration. Instead of ... by mmensch Path Finder in Splunk Search 12-08-2015 0 1	0	1
How to search the list of devices that have sent logs the past 30 days, but not within the last 24 hours? Dear Experts, I am looking to find the difference in the devices sending logs in the last 24 hour with devices which... by sumit29 Path Finder in Splunk Search 12-08-2015 0 1	0	1
How and where do I filter logs with regex before indexing? I have a .txt log file and it has many patterns in it. I need logs of only a particular pattern. How and where can I ... by SridharS Path Finder in Splunk Search 12-08-2015 0 1	0	1
Unable to find the difference in time between two events. What am I doing wrong? Hello, I am trying to report on the differences in time between two events. To do so seems straightforward enough. ... by _dave_b Communicator in Splunk Search 12-08-2015 0 3	0	3
Why is remote server returning error: (400) Bad Request trying to run a search macro using C#? I am trying to run a search ( Macro) but I am not able to get past this error "The remote server returned an error: (... by rajakanapala New Member in Splunk Search 12-08-2015 0 3	0	3
How to mask sensitive data in search from any app in Splunk I have looked at answers for this already, but when I try any of them, my search still shows the unmasked data. Samp... by cbright Explorer in Splunk Search 12-08-2015 0 4	0	4
Trying to chart ONLY the reprocessed cartons. (Data coming from a PLC Conveyor system.) I'm trying to show how many cartons were RE-processed manually, each day, d... by jhumkey Path Finder in Splunk Search 12-08-2015 0 4	0	4
How to use geostats with a lookup containing Zip Codes, Population, and Latitude/Longitude to aggregate number of events against Population? Hey guys, So I have events that contain a lat / long. Here's an example of an event from the access log /search?q... by chowspecial New Member in Splunk Search 12-08-2015 0 6	0	6
How to use the email sender from one search as input for another search? Hello, I'm still learning a lot about Splunk so bear with me. My current search: 'get_phished' \| stats values(reci... by adayton20 Contributor in Splunk Search 12-08-2015 0 2	0	2
Why is my "NOT [subsearch...]" still returning events that should be excluded from results? Hi, I wonder whether someone may be able to help me please. I've put together the following search which: For each ... by IRHM73 Motivator in Splunk Search 12-08-2015 0 10	0	10
How do I use eval with two searches and format the result as a Single Value? Hi, I've done a search that uses eval with two searches to get the final result. Then, I'm trying to see the result ... by rafasalo Engager in Splunk Search 12-08-2015 0 5	0	5
Calculate Between Current Date and 30 Days Hi, I wonder whether someone may be able to help me please. I'm trying to put together a search which extracts recor... by IRHM73 Motivator in Splunk Search 12-07-2015 0 8	0	8

Get Updates on the Splunk Community!

Improve Delivery Assurance with S2S ACK for Edge Processor

Edge Processor helps Splunk customers process data closer to the source: filtering, transforming, masking, and ...

.conf26 Platform Sessions: Turn Machine Data into Agentic Action

As autonomous agents and multi-cloud architectures reshape modern IT, data platforms have to do far more than ...

Introducing the Launch of Edge Processor in Hybrid Mode!

Modernize Data Ingestion Without Starting Over For years, organizations have relied on Splunk's proven ...

Splunk Search

Can search deal with bracket expansions?

How to make an existing field equal a certain value based on the value of another field?

How do I edit my regular expression for rex to extract all expected fields and values from my sample multiline event?

Can I force Splunk to set a minimum number of bins for timechart?

use rex to extract last word/number in a line

How do I represent an Eval result with timechart?

Why are some default fields not being extracted for data coming in via TCP syslog with my current props and transforms.conf?

Splunk Stream question

Merge 'sourcetype-too_small' with 'sourcetype'

How can I get external JavaScript framework app to wait until the search has completed before executing additional code?

What is a Web server, which is used in splunk?

How to retrieve Chart Title and use it in the search?

How to create a dashboard panel of alerts triggered in the past 24 hours that also displays the alert search results?

If I delete all accelerated searches inside a summary index, would it delete the summary as well?

How to search the list of devices that have sent logs the past 30 days, but not within the last 24 hours?

How and where do I filter logs with regex before indexing?

Unable to find the difference in time between two events. What am I doing wrong?

Why is remote server returning error: (400) Bad Request trying to run a search macro using C#?

How to mask sensitive data in search from any app in Splunk

Trying to chart ONLY the reprocessed cartons.

How to use geostats with a lookup containing Zip Codes, Population, and Latitude/Longitude to aggregate number of events against Population?

How to use the email sender from one search as input for another search?

Why is my "NOT [subsearch...]" still returning events that should be excluded from results?

How do I use eval with two searches and format the result as a Single Value?

Calculate Between Current Date and 30 Days

Improve Delivery Assurance with S2S ACK for Edge Processor

.conf26 Platform Sessions: Turn Machine Data into Agentic Action

Introducing the Launch of Edge Processor in Hybrid Mode!

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation