Splunk Search

Community Activity

From a Hunk VIX, what is the max output on a table or stats command? I'm creating a table/stats command with a large output and the statistics seems to be capping out at 10k. Is there a... by jaredlaney Contributor in Splunk Search 09-21-2015 0 3	0	3
Need help writing a search command to determine if a value is in a json array more than once I am indexing json objects into splunk. An example of the json is: { id: "24234563", systems: [ "host... by lyndac Contributor in Splunk Search 09-21-2015 0 2	0	2
Fields from transaction not displaying in table after extra eval Hi, I'm using the transaction command to combine two different events into one larger event with the user_id as the ... by thisissplunk Builder in Splunk Search 09-21-2015 0 7	0	7
How do I remove rows from a table based on empty column values? What I'm trying to do Using the export API /servicesNS/admin/search/search/jobs/export?output_mode=json&search=search... by mrg_linus Engager in Splunk Search 09-21-2015 0 5	0	5
How to search which hosts are missing patches using a lookup with a list of patches that should be installed for each hostname? Hi I have a list of events about patches installed on my hosts (about 3k) which look like Hostname1, PatchId1 Host... by ArsenyKapralov Path Finder in Splunk Search 09-21-2015 0 3	0	3
Splunk python sdk oneshot search: How to get earliest_time and latest_time in datetime format? I have a one shot search to which i am passing earliest time and latest time from time range picker. Trying to gener... by i2sheri Communicator in Splunk Search 09-21-2015 0 3	0	3
Error during Search Hi, In the home page of our application, a combo box is populated with results from a splunk search. At times, the c... by strive Influencer in Splunk Search 09-21-2015 0 2	0	2
How does Splunk decide which rows to display in top if there's a tie? for example here's the full data: widgets total item1 10 item2 8 item3 8 item4 8 item5 8 item6 4 and you... by sk8asd123 Engager in Splunk Search 09-20-2015 0 1	0	1
Why is the xpath search command not extracting the expected result from my sample XML data? Hi! I would like to use the xpath search command to extract my test results from daily XML files. I have created the... by TheRayTracer Explorer in Splunk Search 09-20-2015 0 3	0	3
timechart count by what values are chosen If a log is generated every time a user comments on a blog index=bloglog sourcetype=comments \| timechart count by us... by robertlabrie Path Finder in Splunk Search 09-20-2015 0 2	0	2
See Gigabytes Added to Each Index in Last 24 hours Issue: Various internal groups pay for space in Splunk based on their needs. For example, dev teams paid for 40GB's ... by davespatz Explorer in Splunk Search 09-19-2015 0 2	0	2
How to search two different events by two different eventtypes? Hi, I have two different eventtypes in which I have defined two different events given below: event_attachment cont... by sunnyparmar Communicator in Splunk Search 09-19-2015 0 6	0	6
Splunk apply cluster-bundle not working Trying to update my cluster bundle and keep getting this? yet splunkd seems to be running? This command [POST /servi... by samlaw Explorer in Splunk Search 09-19-2015 1 4	1	4
deduping one field by another field Hi I'm very new to Splunk so hopefully this is an easy one. I have 2 Fields server_name and userid. I would like t... by ajdyer2000 Path Finder in Splunk Search 09-19-2015 0 2	0	2
mvzip multivalue pairs with different cardinality Hi, I am struggling with xml data in splunk and need help in mvzip command to store multi value pairs with differen... by badrinath_itrs Communicator in Splunk Search 09-18-2015 1 5	1	5
How do I break apart a field with numeric ranges? I have a field that I want to break out, something like value [0760-0780] so I can run calculations on those fields. ... by CoryASE Engager in Splunk Search 09-18-2015 0 1	0	1
script for comparing cells Hi, I have a search query which fetches the result host server1 server1 ... by SridharS Path Finder in Splunk Search 09-18-2015 0 1	0	1
Do KV store lookups only currently work with numeric and lowercase fields? It seems that my KV Store lookup only works when the field selected to be looked up is lowercase or numeric. If I hav... by pj Contributor in Splunk Search 09-18-2015 0 2	0	2
How to crossreference the search ID to the search owner and search name ? How to crossreference the search ID to the search owner and search name? Example if another person created a search a... by cdo_splunk Splunk Employee in Splunk Search 09-18-2015 1 4	1	4
Searching for multiple strings I'm trying to collect all the log info for one website into one query. The site uses two starting url's /dmanager and... by jxjackso Explorer in Splunk Search 09-18-2015 0 4	0	4
Is there a way I can hard-code a drop-down search to display all virtual machines on my network? Hello people, Is there a way I can hard-code a drop-down search to display all virtual machines in my network on the... by idab Path Finder in Splunk Search 09-18-2015 0 4	0	4
Why is my search using curl returning "No results found"? This is my query and it looks fine to me, but I do not see any output. It just tells me "No results found". Can som... by Navanitha Path Finder in Splunk Search 09-18-2015 0 2	0	2
Are field names always case sensitive and field values not case sensitive? Hello, Could you tell me what in Splunk is case sensitive? My understanding is: Field values are not case sensitiv... by akawacz Path Finder in Splunk Search 09-18-2015 1 2	1	2
Is it possible to autoregress by unique site I get a series of unique sites sending through the size of Database. I would like to show the growth of their DB to s... by Amohlmann Communicator in Splunk Search 09-17-2015 0 2	0	2
Timechart Overlay I have a dashboard with two different panels showing time chart for the number of events and avg size of those events... by athorat Communicator in Splunk Search 09-17-2015 0 1	0	1

Get Updates on the Splunk Community!

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

AI is one of the biggest topics in the market today, and for security teams, its value goes far beyond the ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

[REGISTER HERE] This thread is for the Community Office Hours session on Detection Engineering Office Hours: ...

Splunk Search

From a Hunk VIX, what is the max output on a table or stats command?

Need help writing a search command to determine if a value is in a json array more than once

Fields from transaction not displaying in table after extra eval

How do I remove rows from a table based on empty column values?

How to search which hosts are missing patches using a lookup with a list of patches that should be installed for each hostname?

Splunk python sdk oneshot search: How to get earliest_time and latest_time in datetime format?

Error during Search

How does Splunk decide which rows to display in top if there's a tie?

Why is the xpath search command not extracting the expected result from my sample XML data?

timechart count by what values are chosen

See Gigabytes Added to Each Index in Last 24 hours

How to search two different events by two different eventtypes?

Splunk apply cluster-bundle not working

deduping one field by another field

mvzip multivalue pairs with different cardinality

How do I break apart a field with numeric ranges?

script for comparing cells

Do KV store lookups only currently work with numeric and lowercase fields?

How to crossreference the search ID to the search owner and search name ?

Searching for multiple strings

Is there a way I can hard-code a drop-down search to display all virtual machines on my network?

Why is my search using curl returning "No results found"?

Are field names always case sensitive and field values not case sensitive?

Is it possible to autoregress by unique site

Timechart Overlay

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation