Splunk Search

Community Activity

Transform for sourcetype issue I am trying to make a minor update to take some data that is coming in via syslog and change the sourcetype to infobl... by LiquidTension Path Finder in Splunk Search 05-26-2015 0 5	0	5
Identify which data is useful Is there an app or some documented searches that can help identify things like Indexes frequently searchedUsers who ... by dominiquevocat SplunkTrust in Splunk Search 05-26-2015 0 4	0	4
display result with specific condition matched Hi All, If I want to display the result with contain the below number(+61011 or +61012) the first 5 digits numbers. ... by cykuan New Member in Splunk Search 05-26-2015 0 3	0	3
How to: Splunk without any formatting? Hello, So I have written a very simple Django app that displays a basic HTML and CSS webpage. The only reference to ... by bkeif Path Finder in Splunk Search 05-26-2015 0 2	0	2
How to extract part of an XML message from the log file in the form of a table? Hi, I have a log file named Audit.Log and has content something like below. < AuditLog > < Comp name="samsung"/... by ravikanthbapath New Member in Splunk Search 05-25-2015 0 1	0	1
Automatic extraction of DATE from path in Splunk 6.2 Hi Could anyone help me with the configuration for extraction of date from path, which is done automatically? [Deta... by melonman Motivator in Splunk Search 05-25-2015 0 1	0	1
Simple XML view only shows 10 results in table I have a dashboard/view that is built using simple XML. There are tables on this view that are built from saved sear... by dang Path Finder in Splunk Search 05-25-2015 0 7	0	7
How to define "latest" based on "earliest" in order to act on the group of events happening in a certain duration. I have a search challenge where I need to pick a _time from SearchA and look for all the events happening in SearchB... by ahuseid New Member in Splunk Search 05-25-2015 0 1	0	1
How to count two file paths? I'm very new to spiunk so bare with me. I'm trying to count the number of events on two seperate file paths and have... by meisjen26 Engager in Splunk Search 05-25-2015 0 2	0	2
Mail Journal Header Log Hi All! Today I index a log created from a script that extract some interesting fields from each received (from jour... by pierre_weg Path Finder in Splunk Search 05-25-2015 0 12	0	12
Lookup Search Dear Experts, I need to write the custom search where user x can login from 5 sources , I am thinking to use lookup(... by sumit29 Path Finder in Splunk Search 05-25-2015 0 1	0	1
Regex for extraction of Pattern from existing field I want to extract a pattern from existing field "source" whose value is /abc/Prod/log/p123ot12. I want to extract p12... by Sourabhv05 Communicator in Splunk Search 05-24-2015 0 8	0	8
Splunk 6.0.1 recusrsive directory search not hapening Hi, I have a series of Particular file types in a Direcotry of Directories, I tried to index them with monitor on \.... by anirudhk Explorer in Splunk Search 05-24-2015 0 1	0	1
Exporting search results to a specified path I have looked at commands "outputlookup" and "outputcsv". Is there a way to export your search results to a specifie... by bleung93 Path Finder in Splunk Search 05-24-2015 0 1	0	1
Find rogue splunk servers I have a list of computers running splunkweb , I am trying to remove results that are logging to the _internal index ... by omgwut56k Path Finder in Splunk Search 05-24-2015 0 3	0	3
Line breaks being removed from raw data in email alerts after upgrade to 6.1 Hi all, I have tried modifying the scheduled alert email actions to use raw and table format for the emailed alert, ... by nvonkorff Path Finder in Splunk Search 05-24-2015 7 6	7	6
exclude asterisk character from a search Hi at all, I have a field (called uid) with some values = "*" and I'd like to exclude them from the results of my se... by gcusello SplunkTrust in Splunk Search 05-24-2015 0 4	0	4
How do I write a combined search query that allows me to pick a time from the first search and then use this time to look for log events in the second search that happened witthin 30 seconds of the first. I would like to write a search query that allows me to pick a _time from the first and use it to search all the event... by ahuseid New Member in Splunk Search 05-24-2015 0 1	0	1
Index time field extraction: regexp issue Hello, Since I often search a specific expression in a large set of events, I would like to index it. Every single ... by Super_Knulps Explorer in Splunk Search 05-24-2015 0 36	0	36
Help to Write the Custom Query Dear Experts, I am creating the custom search in ES app , \| tstats allow_old_summaries=true dc(Authentication.src)... by sumit29 Path Finder in Splunk Search 05-23-2015 0 4	0	4
strip off a part of a search field I have a search query that goes like this: sourcetype="inv" Inv name=* \| table name, intf, model, serialnum, mfgname ... by sugethakch New Member in Splunk Search 05-23-2015 0 3	0	3
Bundle Replication in Splunk What is Bundle Replication in Splunk? How it works in Search Head and Indexer? In below link they explained about se... by Arun_N_007 Communicator in Splunk Search 05-23-2015 0 4	0	4
I want to change the style of the chart I made a chart using a django-tag. I want to change the style of the chart. How should I do? by ryuch2002 Explorer in Splunk Search 05-23-2015 0 2	0	2
i have a query that outputs a chart with 3 columns. I want to output another column that has the delta between the column 2 and 3. Query : MSTC>0 run_id=123 OR run_id=456 \| sort 0 MSTC \| rename "Actual Battery Power _B0AP" as Battp \| chart avg(Batt... by shrey12 Explorer in Splunk Search 05-22-2015 0 1	0	1
Need help for Predict command Need your help, We need to get the prediction for each business unit and sub business unit. But the below query givi... by dhavamanis Builder in Splunk Search 05-22-2015 0 1	0	1