Splunk Search

Community Activity

How to submit a Splunk Python SDK query with a restricted time range and return more than 50000 rows? I am trying to submit a query which is limited to a restricted time window AND returns more than 50000 rows in Python... by nikos_d Explorer in Splunk Search 05-26-2015 4 2	4	2
Why does my search work in the Search and Reporting app, but not in the traffic light example XML dashboard? Hi, we are trying to construct a search to provide server health information base upon the traffic light example to ... by david_poulin Explorer in Splunk Search 05-26-2015 0 1	0	1
How to add the stacked column feature in Django app dashboard? Hi I had a column chart in my dashboard and I copied it to my new Django-Splunk App, but it's stacked column feature ... by edrivera3 Builder in Splunk Search 05-26-2015 0 1	0	1
How to edit my search to output results to separate rows based on multiple values? Hi - I have been trying to get this search below to result in separate rows depending on the values. I have the info... by rajadatta New Member in Splunk Search 05-26-2015 0 7	0	7
Custom search script returning only first value in array/dictionary I have a custom search script (Python) which is nothing more than a dummy script at the moment, as I want to get the ... by joea9 Explorer in Splunk Search 05-26-2015 0 5	0	5
Lookup default_match for multiple columns? We are using a CSV to map one field to two more: status,status_title,status_type,status_ok -,Network connection suc... by mjpieters Explorer in Splunk Search 05-26-2015 0 2	0	2
Is it possible to perform stats within a transaction? I have a transaction with multiple values for the same field. Is it possible for me to do a dc(other_field) within ... by the_wolverine Champion in Splunk Search 05-26-2015 1 5	1	5
Transform for sourcetype issue I am trying to make a minor update to take some data that is coming in via syslog and change the sourcetype to infobl... by LiquidTension Path Finder in Splunk Search 05-26-2015 0 5	0	5
Identify which data is useful Is there an app or some documented searches that can help identify things like Indexes frequently searchedUsers who ... by dominiquevocat SplunkTrust in Splunk Search 05-26-2015 0 4	0	4
display result with specific condition matched Hi All, If I want to display the result with contain the below number(+61011 or +61012) the first 5 digits numbers. ... by cykuan New Member in Splunk Search 05-26-2015 0 3	0	3
How to: Splunk without any formatting? Hello, So I have written a very simple Django app that displays a basic HTML and CSS webpage. The only reference to ... by bkeif Path Finder in Splunk Search 05-26-2015 0 2	0	2
How to extract part of an XML message from the log file in the form of a table? Hi, I have a log file named Audit.Log and has content something like below. < AuditLog > < Comp name="samsung"/... by ravikanthbapath New Member in Splunk Search 05-25-2015 0 1	0	1
Automatic extraction of DATE from path in Splunk 6.2 Hi Could anyone help me with the configuration for extraction of date from path, which is done automatically? [Deta... by melonman Motivator in Splunk Search 05-25-2015 0 1	0	1
Simple XML view only shows 10 results in table I have a dashboard/view that is built using simple XML. There are tables on this view that are built from saved sear... by dang Path Finder in Splunk Search 05-25-2015 0 7	0	7
How to define "latest" based on "earliest" in order to act on the group of events happening in a certain duration. I have a search challenge where I need to pick a _time from SearchA and look for all the events happening in SearchB... by ahuseid New Member in Splunk Search 05-25-2015 0 1	0	1
How to count two file paths? I'm very new to spiunk so bare with me. I'm trying to count the number of events on two seperate file paths and have... by meisjen26 Engager in Splunk Search 05-25-2015 0 2	0	2
Mail Journal Header Log Hi All! Today I index a log created from a script that extract some interesting fields from each received (from jour... by pierre_weg Path Finder in Splunk Search 05-25-2015 0 12	0	12
Lookup Search Dear Experts, I need to write the custom search where user x can login from 5 sources , I am thinking to use lookup(... by sumit29 Path Finder in Splunk Search 05-25-2015 0 1	0	1
Regex for extraction of Pattern from existing field I want to extract a pattern from existing field "source" whose value is /abc/Prod/log/p123ot12. I want to extract p12... by Sourabhv05 Communicator in Splunk Search 05-24-2015 0 8	0	8
Splunk 6.0.1 recusrsive directory search not hapening Hi, I have a series of Particular file types in a Direcotry of Directories, I tried to index them with monitor on \.... by anirudhk Explorer in Splunk Search 05-24-2015 0 1	0	1
Exporting search results to a specified path I have looked at commands "outputlookup" and "outputcsv". Is there a way to export your search results to a specifie... by bleung93 Path Finder in Splunk Search 05-24-2015 0 1	0	1
Find rogue splunk servers I have a list of computers running splunkweb , I am trying to remove results that are logging to the _internal index ... by omgwut56k Path Finder in Splunk Search 05-24-2015 0 3	0	3
Line breaks being removed from raw data in email alerts after upgrade to 6.1 Hi all, I have tried modifying the scheduled alert email actions to use raw and table format for the emailed alert, ... by nvonkorff Path Finder in Splunk Search 05-24-2015 7 6	7	6
exclude asterisk character from a search Hi at all, I have a field (called uid) with some values = "*" and I'd like to exclude them from the results of my se... by gcusello SplunkTrust in Splunk Search 05-24-2015 0 4	0	4
How do I write a combined search query that allows me to pick a time from the first search and then use this time to look for log events in the second search that happened witthin 30 seconds of the first. I would like to write a search query that allows me to pick a _time from the first and use it to search all the event... by ahuseid New Member in Splunk Search 05-24-2015 0 1	0	1