Splunk Search

Community Activity

How to search for newly created OOID's and parse it with my previous search Hey guys, So I am trying to combine an old search with a new search of mine. I basically wanted to continually fetch... by splunkman341 Communicator in Splunk Search 08-03-2015 0 8	0	8
create table/chart like excel pivot I need to make a chart of nested columns like we can do in excel pivot. Sample data and required view is given in th... by ishaanshekhar Communicator in Splunk Search 08-03-2015 0 3	0	3
How can I do a subsearch in group by? Hey folks, I am really new to Splunk and this has bothered me for several days. I have following data by a query: Da... by sureleo New Member in Splunk Search 08-03-2015 0 3	0	3
Splunk break a saved search report if a field value contains a colon. Do I need to escape the colon and how? Splunk breaks saved search report if the field value contains a colon. My source record is below. [2015-07-29 12:43:... by sunbol New Member in Splunk Search 08-03-2015 0 3	0	3
How to table list of values from lookup NOT found in Splunk? I have a lookup that lists x number of values. I would like to be able to discover how many of those aren't actuall... by _gkollias Builder in Splunk Search 08-03-2015 0 3	0	3
How do I automate the indexing and field extraction process? Good morning, For the past few days, I have been putting log files through an indexer and extracted some fields manu... by minkyuk Explorer in Splunk Search 08-03-2015 0 1	0	1
Sort field based on sorted field Hello, I'm trying to get out a table that sorts connections by network type, and then for each connection displays th... by ohlafl Communicator in Splunk Search 08-03-2015 0 6	0	6
Best practices when using subsearch (eval, etc) I am relatively new to Splunk and would like to get a better sense of using subsearch as I can see how valuable it mu... by ohlafl Communicator in Splunk Search 08-03-2015 0 3	0	3
How to use stats group by _time without null fields? Here is a screenshot of what I do. How can I remove null fields and put the values side by side? I am using stats t... by josefa123 Explorer in Splunk Search 08-03-2015 0 2	0	2
How to search and calculate stats on the outages for business transactions? Hello I'm interested in finding the outages for my business service. Here is how it works: I have a log file that l... by hereissat New Member in Splunk Search 08-03-2015 0 1	0	1
How long does my search live in the dispatch directory I am running Splunk 6.3 and I have a search that runs every evening and I can pick up the results the next day. The ... by terryjohn Path Finder in Splunk Search 08-03-2015 0 6	0	6
help in eval Hi Guys, Need a help. I have two types of logs. nwfin1swt2 : 2015 Jul 27 23:01:29 CDT: %SATCTRL-FEX101-2-SATCTRL: F... by marees123 Path Finder in Splunk Search 08-03-2015 0 19	0	19
Counting non-events Hi all, I have data of movement sensors. Each sensor sends data when it detects that someone is near the sensor. I w... by vbarna Engager in Splunk Search 08-03-2015 0 6	0	6
How to use Javascript in creating tables? Here is my XML in Splunk Web <dashboard script="yeahboy.js"> <label>Sample Dashboard</label> </dashboard> And th... by josefa123 Explorer in Splunk Search 08-02-2015 0 2	0	2
Splunk PDF reports not loading properly - missing fonts Hello, We have a scheduled pdf report that is delivered every morning but when trying to open it it throws an error ... by aaronkorn Splunk Employee in Splunk Search 08-02-2015 0 4	0	4
How to use the stats command to get the sums of 3 fields and the count of sessions IDs by user in one table? So far I have the stats for calculating Total, Upload & Download Bandwidths by user, but then I also want to get a co... by lmaclean Path Finder in Splunk Search 08-02-2015 0 1	0	1
External lookup failing with error code 1 - 6.1.2 I'm trying to get an external lookup to work (already have one other one working successfully), but I've been getting... by hortonew Builder in Splunk Search 08-02-2015 1 3	1	3
How to reverse my current search to display names as opposed to numbers( lookup) Hi guys, So I have a search that currently grabs the most active category, with also the most active subcategory und... by splunkman341 Communicator in Splunk Search 08-01-2015 0 3	0	3
How to chart sum(value) by date ? Hi, I got some raw data like : Backup-ID: host1.domain.fr_1 Fragment Size (KB): 4425792 Expires: ... by afourdraine New Member in Splunk Search 08-01-2015 0 3	0	3
How to calculate the percentage change over a month based on delta? hi all, I want a new column which calculates the percentage change over a month. In the below snapshot, the change r... by hqw Path Finder in Splunk Search 08-01-2015 0 1	0	1
How to convert a date field with values as the number of days counting from the year 2000 to a dd/mm/yy format? Hello, I'm currently doing a school project which requires me to monitor a database file using Splunk. However, the... by p2splunk2015 New Member in Splunk Search 07-31-2015 0 4	0	4
blacklist matching issues The documentation says: If you want Splunk to ignore entire directories beneath a monitor input refer to this exampl... by lrhazi Path Finder in Splunk Search 07-31-2015 0 2	0	2
What is the difference between "search terms" and "fully qualified query string"? #SPLUNK_ARG_0 Script name #SPLUNK_ARG_1 Number of events returned #SPLUNK_ARG_2 Search terms #SPLUNK_ARG_3 Fully qual... by abour Explorer in Splunk Search 07-31-2015 0 1	0	1
sum of 2 possible fields The search result looks like this <date>, COUNT_SENT=20, SUM_AMOUNT=50000 <date>, COUNT_RECEIVED=30, SUM_AMOUNT=10000... by lanilim16 Explorer in Splunk Search 07-31-2015 0 3	0	3
Get percentage between two graph lines over time I have two numbers that I am trying to get a percentage out of. One number is a count of total IPs. The other is a co... by jizzmaster Path Finder in Splunk Search 07-31-2015 0 2	0	2