Splunk Search

Community Activity

How does data feed into external lookup scripts? Can I multithread the API calls in my script to speed it up? I have an external lookup script that takes in a username from our Splunk events then uses an API call to go and grab... by thisissplunk Builder in Splunk Search 10-13-2015 0 4	0	4
Commenting Search Code I would like to add comments to my searches, saved searches, macros and just about anywhere that I write search synta... by reed_kelly Contributor in Splunk Search 10-13-2015 3 10	3	10
How do I edit the syntax for my rex expression to extract the field from my sample data? Can't get the following to work: rex field=updateTitle "(?<patch>)KB\d*+" Sample text: Security Update for Lync ... by rgcox1 Communicator in Splunk Search 10-13-2015 0 2	0	2
using depends + tokens + chart not spaning the full dashboard/screen width after checking checkbox I am using a checkbox to show/hide multiple rows. I have some rows that have a single chart that spans the full width... by HattrickNZ Motivator in Splunk Search 10-13-2015 0 1	0	1
Pages with timeline chart index = "abcd" sourcetype = * Customers= ABC \|chart count by Pages I get the pages as a list I want one of the page... by puneetkharband1 Path Finder in Splunk Search 10-13-2015 0 3	0	3
What is the best way to have Splunk run a shell command on demand on a Splunk server? What is the best way to have Splunk run a shell command on a Splunk server on demand? I found a way to do this via s... by teedilo Path Finder in Splunk Search 10-13-2015 0 4	0	4
How do I get an accurate count for a field that has values in different formats? Hi We have field that has data in different formats (having values in [] but other simply name) e.g. itemkey = ms.... by vinay4444 Explorer in Splunk Search 10-13-2015 0 1	0	1
Splunk should upgrade the `noop` command to take a single string parameter (making it a `comment` command) and then document it! I just discovered the interesting noop command and have been playing around with it. I cannot find it mentioned ANYW... by woodcock Esteemed Legend in Splunk Search 10-13-2015 3 4	3	4
How to search the distinct count of a field based on a condition, then calculate percentage? Here is an example of my search: Search \| stats dc(eval(DISPLAYNAME)) AS Total,dc(eval(STATUS="Offline")) AS Offline... by jawebb Explorer in Splunk Search 10-13-2015 0 4	0	4
Exporting Splunk configurations I would like to export the Splunk for CEF configuration from one Splunk server, in order to import it to another Splu... by alexsuv Engager in Splunk Search 10-13-2015 0 4	0	4
How to plot the max of a value in 1 minute intervals over a period for an extracted field? Hi, I am very new to Splunk. I have extracted a value from my data. The value appears every 25 seconds. I want to pl... by sankalpsah New Member in Splunk Search 10-13-2015 0 1	0	1
This report cannot be accelerated. I've got a simple search which uses stats. I've saved the dashboard and created a scheduled report but when I go to ... by DamageSplunk Explorer in Splunk Search 10-13-2015 0 3	0	3
How to create a report of distinct Error Descriptions and count of each for each hour of a day? We are getting a number of different errors in the log file. Requirement is to get a report of distinct Error Descr... by runiyal Path Finder in Splunk Search 10-13-2015 0 1	0	1
Trouble using mvfind on multivalue field I am trying to exclude results from my search if a certain string occurs in one of the hyperlinks in the results. The... by techusky Explorer in Splunk Search 10-13-2015 0 9	0	9
Comparing hosts not reporting to a separate lookup and adding supplemental information I came across a posting that had the following search which works amazingly well: \| metadata index=* type=hosts \| ev... by LiquidTension Path Finder in Splunk Search 10-13-2015 0 3	0	3
how to calculate sum of two fields using eval command? I have column A and B, its values are A- 5,10,15,20 B-1,2,3,4 i need the Total in third field which should contain ... by Madhan45 Path Finder in Splunk Search 10-13-2015 0 4	0	4
verify message was received at port using log Is there a way to view log files or entries for a specific port where messages should be coming into? The reason I as... by jdepp Path Finder in Splunk Search 10-13-2015 0 8	0	8
When a user with read access opens a dashboard, who do the searches in that dashboard run as? I have searches powering multiple charts and tables within a dashboard. When a user with read access opens that dashb... by muebel SplunkTrust in Splunk Search 10-13-2015 0 2	0	2
How to pass multiple parameters from a form input to a search? Hi I have a form that allows users to enter an ID, which will then be populated in a search. Is there a way to let ... by ewanbrown Path Finder in Splunk Search 10-13-2015 1 5	1	5
query for a list of hosts I have a list of 700+ hosts. I need to verify if those hosts have entries in a splunk instance. So I'm just looking... by DTERM Contributor in Splunk Search 10-13-2015 0 2	0	2
Converting time Hi How to convert below into readable format ? 41861.003287037 41855.001458333 I was trying this but did not wor... by akawacz Path Finder in Splunk Search 10-13-2015 0 5	0	5
Regular Expression for Field Extract custom log Hello, Can anyone help me to extract some field as I need like POS CODE, POS NAME, POS ID with these value: [POS CODE... by thuhnv New Member in Splunk Search 10-13-2015 0 2	0	2
multiple subsearch using appendpipe I am trying to create a search that will give a table displaying counts for multiple time_taken intervals. For exampl... by ljohnson_possib New Member in Splunk Search 10-12-2015 0 5	0	5
Filter access log by time of exceptions in syslog with splunk I have a log4j syslog which throws a few nullpointers every day like: 2015-10-05 00:00:53,042 ERROR DefaultException... by staffang New Member in Splunk Search 10-12-2015 0 1	0	1
Eval case capturing too much information Hi, I was trying to use eval with a case. Now I want to separate 2 different log messages, SEND_NOW and SEND_ON. W... by jameskerivan Explorer in Splunk Search 10-12-2015 0 2	0	2

Get Updates on the Splunk Community!

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Splunk Search

How does data feed into external lookup scripts? Can I multithread the API calls in my script to speed it up?

Commenting Search Code

How do I edit the syntax for my rex expression to extract the field from my sample data?

using depends + tokens + chart not spaning the full dashboard/screen width after checking checkbox

Pages with timeline chart

What is the best way to have Splunk run a shell command on demand on a Splunk server?

How do I get an accurate count for a field that has values in different formats?

Splunk should upgrade the `noop` command to take a single string parameter (making it a `comment` command) and then document it!

How to search the distinct count of a field based on a condition, then calculate percentage?

Exporting Splunk configurations

How to plot the max of a value in 1 minute intervals over a period for an extracted field?

This report cannot be accelerated.

How to create a report of distinct Error Descriptions and count of each for each hour of a day?

Trouble using mvfind on multivalue field

Comparing hosts not reporting to a separate lookup and adding supplemental information

how to calculate sum of two fields using eval command?

verify message was received at port using log

When a user with read access opens a dashboard, who do the searches in that dashboard run as?

How to pass multiple parameters from a form input to a search?

query for a list of hosts

Converting time

Regular Expression for Field Extract custom log

multiple subsearch using appendpipe

Filter access log by time of exceptions in syslog with splunk

Eval case capturing too much information

Quick connection discovery mode for forwarders

Build and Launch AI Agents from Your Splunk Workflows

Splunk Cloud Application Management in Terraform

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation