| Thread Info | |||||
|---|---|---|---|---|---|
| 
          
    
  I have a log that documents call results for phone calls as a CSV event recordThere is a field in the event...
        
         
           by 
           
                
                    
                        C37996518
                    
                
           
             
             
               Explorer
             
           
           in
           Splunk Search
           
           
              
               07-31-2023
             
           
         
        | 
		
		0
   | 
	  
	  3
	 | |||
| 
        Consider these three searches that end with timechart.  The second one skews time range all the way to year 2038!  Ho...
        
         
           by 
           
                
                    
                        yuanliu
                    
                
           
             
             
               SplunkTrust
             
           
           in
           Splunk Search
           
           
              
               07-31-2023
             
           
         
        | 
		
		0
   | 
	  
	  3
	 | |||
| 
        Hi All, urgent help here. I check whether is any activity done by a user on a client machine, so i use this query in ...
        
         
           by 
           
                
                    
                        BryanLim
                    
                
           
             
             
               New Member
             
           
           in
           Splunk Search
           
           
              
               07-31-2023
             
           
         
        | 
		
		0
   | 
	  
	  2
	 | |||
| 
        Hello Splunkers!! 
  I am facing an issue while running below search. As you can see in the screenshot. Can anyone he...
        
         
           by 
           
                
                    
                        uagraw01
                    
                
           
             
             
               Motivator
             
           
           in
           Splunk Search
           
           
              
               07-26-2023
             
           
         
        | 
		
		0
   | 
	  
	  21
	 | |||
| 
        Dear Team 
  I have a splunk lookup with two fields, username and location. 
  The lookup is populated every time the...
        
         
           by 
           
                
                    
                        pagnihot
                    
                
           
             
             
               Path Finder
             
           
           in
           Splunk Search
           
           
              
               07-31-2023
             
           
         
        | 
		
		0
   | 
	  
	  0
	 | |||
| 
        Hi I was wondering on a dashboard if you could click on an item and it shows all the information for that single inst...
        
         
           by 
           
                
                    
                        Talking_Master
                    
                
           
             
             
               Explorer
             
           
           in
           Splunk Search
           
           
              
               07-21-2023
             
           
         
        | 
		
		0
   | 
	  
	  3
	 | |||
| 
        Hi looking to change a color of a field based on its value in a monitoring context like failed , successful kind of t...
        
         
           by 
           
                
                    
                        Talking_Master
                    
                
           
             
             
               Explorer
             
           
           in
           Splunk Search
           
           
              
               07-31-2023
             
           
         
        | 
		
		0
   | 
	  
	  1
	 | |||
| 
        I've been trying to solve this every which way and another and I always come up just short of the target.
  When sear...
        
         
           by 
           
                
                    
                        fatsug
                    
                
           
             
             
               Builder
             
           
           in
           Splunk Search
           
           
              
               07-28-2023
             
           
         
        | 
		
		0
   | 
	  
	  8
	 | |||
| 
        Hi there, need a bit of help here.  
  Context:  
  Our organisation recently changed the `index` thus we need to upd...
        
         
           by 
           
                
                    
                        Wendy
                    
                
           
             
             
               Explorer
             
           
           in
           Splunk Search
           
           
              
               07-30-2023
             
           
         
        | 
		
		0
   | 
	  
	  5
	 | |||
| 
        I want to find time difference between two events (duration some operation took) and plot a graph which shows how muc...
        
         
           by 
           
                
                    
                        sravan
                    
                
           
             
             
               Explorer
             
           
           in
           Splunk Search
           
           
              
               07-25-2023
             
           
         
        | 
		
		0
   | 
	  
	  5
	 | |||
| 
        Hi , I am trying to extract aggregated errors from json message log coming from splunk event and categorising them ba...
        
         
           by 
           
                
                    
                        Anu1184
                    
                
           
             
             
               Explorer
             
           
           in
           Splunk Search
           
           
              
               07-29-2023
             
           
         
        | 
		
		0
   | 
	  
	  3
	 | |||
| 
        I am retrieving operation details like operation name, total time etc from json message log coming as a part of splun...
        
         
           by 
           
                
                    
                        Anu1184
                    
                
           
             
             
               Explorer
             
           
           in
           Splunk Search
           
           
              
               07-29-2023
             
           
         
        | 
		
		0
   | 
	  
	  2
	 | |||
| 
        Hi 
  I need help to extract and to filter fields with rex and regex 
  1) i need to use a rex field on path wich end...
        
         
           by 
           
                
                    
                        jip31
                    
                
           
             
             
               Motivator
             
           
           in
           Splunk Search
           
           
              
               07-25-2023
             
           
         
        | 
		
		0
   | 
	  
	  8
	 | |||
| 
        I 've  two fields one is _time and another one is received_time.  I want to get the time differences between these tw...
        
         
           by 
           
                
                    
                        mikeyty07
                    
                
           
             
             
               Communicator
             
           
           in
           Splunk Search
           
           
              
               07-20-2023
             
           
         
        | 
		
		0
   | 
	  
	  7
	 | |||
| 
        I m having a hard time trying to extract a string from a field from a splunk search using splunk regex , can someone ...
        
         
           by 
           
                
                    
                        deepaksn1214
                    
                
           
             
             
               Engager
             
           
           in
           Splunk Search
           
           
              
               07-28-2023
             
           
         
        | 
		
		0
   | 
	  
	  1
	 | |||
| 
        Hello Members, 
  I have seen and used the accum command, but it does not quite give me what I want. 
  I have this s...
        
         
           by 
           
                
                    
                        eholz1
                    
                
           
             
             
               Builder
             
           
           in
           Splunk Search
           
           
              
               07-24-2023
             
           
         
        | 
		
		0
   | 
	  
	  4
	 | |||
| 
        I am attempting to extract attachment fields from our email logs using regex. Attachments like .jpg, .png, pdf, etc. ...
        
         
           by 
           
                
                    
                        treven
                    
                
           
             
             
               Explorer
             
           
           in
           Splunk Search
           
           
              
               07-28-2023
             
           
         
        | 
		
		0
   | 
	  
	  8
	 | |||
| 
        I'm facing a weird issue. I'm not able to calculate percentage value when I use two variables/fields.
  I have a look...
        
         
           by 
           
                
                    
                        sh254087
                    
                
           
             
             
               Communicator
             
           
           in
           Splunk Search
           
           
              
               07-28-2023
             
           
         
        | 
		
		0
   | 
	  
	  2
	 | |||
| 
        Hi, 
  Alert Query to monitor CPU usage every 5 minutes and send an email if it matches 5 of 6 bad samples (i.e., if ...
        
         
           by 
           
                
                    
                        Satheesh_red
                    
                
           
             
             
               Path Finder
             
           
           in
           Splunk Search
           
           
              
               07-18-2023
             
           
         
        | 
		
		0
   | 
	  
	  9
	 | |||
| 
        Hi
  I use a | stats min(_time) as time_min stats max(_time) as time_max command in my search
  The time is displayed...
        
         
           by 
           
                
                    
                        jip31
                    
                
           
             
             
               Motivator
             
           
           in
           Splunk Search
           
           
              
               07-28-2023
             
           
         
        | 
		
		0
   | 
	  
	  4
	 | |||
| 
        I have a Splunk query that helps me to visualize different APIs vs Time as below. Using this query I could see each l...
        
         
           by 
           
                
                    
                        RemyaT
                    
                
           
             
             
               Explorer
             
           
           in
           Splunk Search
           
           
              
               07-27-2023
             
           
         
        | 
		
		0
   | 
	  
	  2
	 | |||
| 
        Hi,
  I'm attempting to calculate the average of the last six CPU event values. If the average of those six events is...
        
         
           by 
           
                
                    
                        Satheesh_red
                    
                
           
             
             
               Path Finder
             
           
           in
           Splunk Search
           
           
              
               07-27-2023
             
           
         
        | 
		
		0
   | 
	  
	  1
	 | |||
| 
        I'm wanting to avoid using saved searches and lookup tables as much if possible so it's easily maintainable by anyone...
        
         
           by 
           
                
                    
                        BinaryAddict
                    
                
           
             
             
               Engager
             
           
           in
           Splunk Search
           
           
              
               07-27-2023
             
           
         
        | 
		
		0
   | 
	  
	  2
	 | |||
| 
        I am still trying to get my head around regular expressions in splunk, and would like to use regex that could parse t...
        
         
           by 
           
                
                    
                        Steve_A200
                    
                
           
             
             
               Path Finder
             
           
           in
           Splunk Search
           
           
              
               07-26-2023
             
           
         
        | 
		
		0
   | 
	  
	  3
	 | |||
| 
        Hello,
  I have an index with a field that record how long a computer has been running. Basically, when I display the...
        
         
           by 
           
                
                    
                        Altexec
                    
                
           
             
             
               New Member
             
           
           in
           Splunk Search
           
           
              
               07-27-2023
             
           
         
        | 
		
		0
   | 
	  
	  1
	 |