Splunk Search

Splunk Search
Community Activity
Runals
This is designed to be a self answering question based on our experience. We've configured indexer clustering with a...
by Runals Motivator in Splunk Search 08-27-2015
1 1
1
1
kirkbates
I am new to Splunk and am working with DTS Compliant formatted logs generated from Microsoft Network Policy Server an...
by kirkbates New Member in Splunk Search 08-27-2015
0 2
0
2
alanxu
Hello, I extracted the time with the variable TIME. I am trying to create a line graph where it shows the latest tim...
by alanxu Communicator in Splunk Search 08-27-2015
0 27
0
27
szabados
Little strange issue I got... I ingest files into an index. I want to add a yes/no field to my events, based on if th...
by szabados Communicator in Splunk Search 08-27-2015
0 3
0
3
hartfoml
I segregate my data using indexes for each group. I have a csv with a list of hosts that cross several indexes. I c...
by hartfoml Motivator in Splunk Search 08-27-2015
0 4
0
4
reswob4
So we have both Snort and Sourcefire in our environment. I'm using a simple search to create a table of the top hits...
by reswob4 Builder in Splunk Search 08-27-2015
0 8
0
8
msalaverry
Hi, I have this search: host="myhost.com" NOT source=*access_log* AND "SearchA" | timechart span=1d dc(App) as Not...
by msalaverry New Member in Splunk Search 08-27-2015
0 4
0
4
thomas_forbes
I have a search that searches for Windows Security Event IDs and displays the results in a table format. The maximum...
by thomas_forbes Communicator in Splunk Search 08-27-2015
0 3
0
3
matt
I'd like to be able to assign the day of the week to my events so I can show my users whatever happens on a Monday. ...
by matt Splunk Employee Splunk Employee in Splunk Search 08-27-2015
1 2
1
2
sam_jacob
I'm trying to search by a specific date, so I wanted to return the date to an eval, but when I run it, I get the mess...
by sam_jacob Path Finder in Splunk Search 08-27-2015
0 4
0
4
bgourlie
I have a search and I would like to normalize a data point so that I can use it effectively in conjunction with other...
by bgourlie New Member in Splunk Search 08-27-2015
0 2
0
2
mm977g
Given the below log file, I need to create a chart that shows the time taken for a given step. The time is a summatio...
by mm977g Explorer in Splunk Search 08-27-2015
0 2
0
2
ewanbrown
I have a search in which I want to return the distinct number of users doing an number of actions b1 - b5 split by pl...
by ewanbrown Path Finder in Splunk Search 08-27-2015
0 1
0
1
rupesh_patil20
Hi.. I have json data such as {"result": [ {"EventData.mlsnumber": "1039455", "result": 1}, {"EventDat...
by rupesh_patil20 Path Finder in Splunk Search 08-27-2015
0 1
0
1
gtg
We have been running a search that returns results for user and computer account creation. For the past week or so, ...
by gtg New Member in Splunk Search 08-27-2015
0 4
0
4
Ganees
Can someone please help me to write a regex to get the value "78" value from the below sample data? Destination to ...
by Ganees New Member in Splunk Search 08-27-2015
0 6
0
6
Onuorahc
How can I create a search to run a report on Administrator Accounts that are used to access the internet
by Onuorahc New Member in Splunk Search 08-27-2015
0 5
0
5
IRHM73
I wonder whether someone could help me please. I initially used the search below with my results for a given day sho...
by IRHM73 Motivator in Splunk Search 08-27-2015
0 4
0
4
sergiupopescu
So I have a search which pulls the number of servers in a farm that have the "X" application installed on them. Now I...
by sergiupopescu New Member in Splunk Search 08-27-2015
0 2
0
2
avivn
Hi, I am trying to run the transaction command on a SQL query with DB Connect 1. My problem is when I am using the f...
by avivn Explorer in Splunk Search 08-27-2015
0 5
0
5
IRHM73
Hi, I wonder whether someone may be able to help me please. After reading the Splunk documentation I'm trying to put...
by IRHM73 Motivator in Splunk Search 08-27-2015
0 2
0
2
IRHM73
Hi, I wonder whether someone could help me please. I've inherited a search with the line sort 0 detail.ref,-_time. ...
by IRHM73 Motivator in Splunk Search 08-27-2015
1 2
1
2
htkwan
Hello, I would like to provide the name of the location, besides the latitude, longitude & values. My search is: ...
by htkwan Path Finder in Splunk Search 08-26-2015
0 3
0
3
pinVie
Hello all, I have a search that just produced the Top 10 clients regarding outgoing network traffic over the last 2...
by pinVie Path Finder in Splunk Search 08-26-2015
0 1
0
1
michwii
Hi all, I've been struggling for a few days to extract logs from our SVN repository. Each event contains a list of ...
by michwii New Member in Splunk Search 08-26-2015
0 2
0
2
Get Updates on the Splunk Community!

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...
Top Solution Authors