Splunk Search

Splunk Search
Community Activity
pcorchary
I'm having trouble getting a Field Extraction that I need and hope for some advice. Below are three examples. Please ...
by pcorchary Explorer in Splunk Search 07-26-2015
0 1
0
1
jepoyyyy
Good day Splunkers. Splunk newbie here, I have been testing it for a few days already. I can now create searches and...
by jepoyyyy Explorer in Splunk Search 07-26-2015
0 2
0
2
jwalzerpitt
I have a situation in which Cisco Sourcefire files are being ingested into Splunk (v6.0.1) under different sourcetype...
by jwalzerpitt Influencer in Splunk Search 07-25-2015
0 3
0
3
melonman
Hi I found an example using Django Framework in Splunk app site. But I still can not figure out how to do the same ...
by melonman Motivator in Splunk Search 07-25-2015
2 7
2
7
wweiland
I have 2 fields (nodeid,jobid in which you could have multiple nodes assigned to 1 jobid) and need to graph it in a f...
by wweiland Contributor in Splunk Search 07-25-2015
1 4
1
4
ohlafl
I have several fields containing machine performance data named as CPUload and RAMload etcetera. They are dynamically...
by ohlafl Communicator in Splunk Search 07-25-2015
1 5
1
5
Bhargav99
Hello Folks I am new to plunk please help me out of this I need Value with its individual count shown next to it . I...
by Bhargav99 New Member in Splunk Search 07-24-2015
0 4
0
4
MichaelPriest
Hoping someone can help me out. This is my search: [| metadata type=sources index="test_inputs" | search source="GAL...
by MichaelPriest Communicator in Splunk Search 07-24-2015
0 7
0
7
Riel
Hi, As you know, date_month, date_mday, date_year fields are so useful to fetch data quickly. I usually use these f...
by Riel Engager in Splunk Search 07-24-2015
1 4
1
4
syx093
What I am trying to do is look through src_ip and dest_ip to see if they match the list of IP Addresses that are on a...
by syx093 Communicator in Splunk Search 07-24-2015
0 3
0
3
justgovind30198
hi, below is my XML file format <?xml version="1.0" encoding="UTF-8"?> <RSDReport xmlns:xsd="http://www.w3.org/2001...
by justgovind30198 Explorer in Splunk Search 07-24-2015
0 6
0
6
BrentRiva
I'm working in Python and trying to use the SDK to search from a program. One of the apps I have installed uses a loo...
by BrentRiva Explorer in Splunk Search 07-24-2015
0 1
0
1
guimilare
Hi all, When searching for total price, I get the following answer: ...| stats sum(total_price) as "Valor Total" | ...
by guimilare Communicator in Splunk Search 07-24-2015
0 1
0
1
joseph_lodrigui
In this search: (for example) index="_internal" source="*metrics.log" group="per_host_thruput" series = ( result of ...
by joseph_lodrigui New Member in Splunk Search 07-24-2015
0 1
0
1
HeinzWaescher
Hi, I would like to find out the 10 highest values per day. ... | bucket span=1d | stats sum(xyz) AS values BY _ti...
by HeinzWaescher Motivator in Splunk Search 07-24-2015
0 2
0
2
sheltomt1
So let's start with what I have. What's getting me good data: sourcetype=xfer AND (XferStatus="*Beginning*") OR (Xfe...
by sheltomt1 Explorer in Splunk Search 07-24-2015
0 4
0
4
Abilan1
Hi, I need help to create a Dashboard for the below logs. If we look into the below query, we can see that the *SQL...
by Abilan1 Path Finder in Splunk Search 07-24-2015
0 2
0
2
ohlafl
I have the following search: city=* store=* | stats values(store) by city | mvexpand store | eval Role=case(store L...
by ohlafl Communicator in Splunk Search 07-24-2015
1 6
1
6
brent_weaver
What is the optimal format our application can generate for splunk to pick it up by default? Development can make the...
by brent_weaver Builder in Splunk Search 07-23-2015
0 2
0
2
vman_me
I am still getting into the swing of things with Splunk and have a question. I am generating a chart like this: c...
by vman_me New Member in Splunk Search 07-23-2015
0 3
0
3
IRHM73
Hi, I wonder whether someone could help me please. I've been presented with the following search, and although as a ...
by IRHM73 Motivator in Splunk Search 07-23-2015
1 6
1
6
michael_lee
Hi, In one of my index directories: CreationTime db_1428308275_1420532289_1 db_1432097800_1428308291_0 ...
by michael_lee Path Finder in Splunk Search 07-23-2015
0 7
0
7
jarrex
When performing IPLocation on a set of login IPs and trying to find outlying data, I notice that Splunk is translatin...
by jarrex Explorer in Splunk Search 07-23-2015
0 1
0
1
Amohlmann
I am trying to find the rate at which parts fail. Parts send me a message every x amount of time. If I do not get a m...
by Amohlmann Communicator in Splunk Search 07-23-2015
0 6
0
6
faramarz
I have messed up log data for a specific type of event, and I wanted to fix it manually. Basically, when the data was...
by faramarz Path Finder in Splunk Search 07-23-2015
0 6
0
6
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...