Splunk Search

Community Activity

How can we extract a text in a new field Hi , I want to extract a part of a text in a new field, and it was very difficult for me . this is an extract of my ... by otman01 Communicator in Splunk Search 05-13-2015 0 9	0	9
stacked column chart for three values Hi All, I have generated a dashboard with column chart using Query: sourcetype="Churn Data_CSV" Churn="True." \| sta... by SanthoshSreshta Contributor in Splunk Search 05-13-2015 0 1	0	1
how to give data for scatter plot Hi All, I am a newbie for Splunk. I am unable to plot a scatter graph for three measures like I need a scatter plot... by SanthoshSreshta Contributor in Splunk Search 05-13-2015 0 1	0	1
How to find incomplete transactions outside of a 30 day period In the query below I am trying to find all users who logged in and then did not login again with in the time range. ... by metersk Path Finder in Splunk Search 05-12-2015 0 1	0	1
Can I sort the legend of a timechart by value instead of alphabetically? The timechart is based on avg response time for webpages, but the legend lists the URL's in alphabetical order. Is t... by richnavis Contributor in Splunk Search 05-12-2015 0 3	0	3
2 queries in a line chart Query one 1> index=prod sourcetype="STORM" "received message from MQ" ">EXIGEN_QUOTE<" \| timechart count ... by athorat3 New Member in Splunk Search 05-12-2015 0 1	0	1
How to add the custom app to Management App list? Hi, I've just joined Splunk world. I made my app. Then, how can I add my all to Management App list? I just want to s... by mijounglee New Member in Splunk Search 05-12-2015 0 8	0	8
..求中文文档..chinese document 小弟我英语不过关，求中文文档。 my english is pool .Need chinese document. 为毛搞个搜索要这么复杂这么多正则表达式，写的像编程一下的语句去搜索，搞怎么复杂干嘛，产品经理出来，保证不打死... by apolee New Member in Splunk Search 05-12-2015 0 1	0	1
Dashboard table styling? I want to adapt a script from the XML examples to a dashboard of mine. When I add the script="" stylesheet="" line do... by szabados Communicator in Splunk Search 05-12-2015 1 6	1	6
Rowcount comparisons on large numbers of database tables I'm working with a customer to run rowcount comparisons between two tables that are replicating data in one direction... by mcomfurf Path Finder in Splunk Search 05-12-2015 1 2	1	2
Log file not have any date field but splunk auto give different different date to event i need remove date in _time field? Hi I have log file which create every 1 hr so they not have date field but splunk Automatically provide different da... by nitesh218ss Communicator in Splunk Search 05-12-2015 0 15	0	15
Subtract two time in one event not work properly in milisecond hi try to subtract 2 time but some are subtract some show blank my time format is 07:33:41.556 I below i write 2... by nitesh218ss Communicator in Splunk Search 05-12-2015 0 18	0	18
Search for inactive users in my application I am using Splunk to monitor my application and would like to know what users have been inactive of the last X days. ... by will_paxata Explorer in Splunk Search 05-12-2015 0 4	0	4
Top 10 Values of the column Hi all, I am able to get top 10 values but with that I need to get others ( Those who are not in Top 10 ) in one val... by SanthoshSreshta Contributor in Splunk Search 05-12-2015 1 3	1	3
Add a new column,except "Time" "Event". I want to add a new column,just like host to default the search results display .You know the searchstring like "ind... by dovelsh12223621 Path Finder in Splunk Search 05-12-2015 1 3	1	3
Timechart with two graphs Hi! Is there any way to show the following search on a timechart with two graphs lines, one with the number of hits ... by epacke Path Finder in Splunk Search 05-12-2015 0 1	0	1
Scatter Plot of some data I'm new to Splunk and trying to create graphs on some information that I'm collecting. I have lots of jobs that run ... by wweiland Contributor in Splunk Search 05-12-2015 0 6	0	6
How to restrict searches that use wildcards in the index (ex: index=* index=test* index=*test)? For audit and performance reasons, I want to educate (force) my users to always explicitly provide the index(es) that... by lassel Communicator in Splunk Search 05-12-2015 1 8	1	8
Extract date / time from source path with custom datetime.xml I'm hoping someone can help out with something that's been baffling me re: using custom a datetime.xml to extract the... by emechler_splunk Splunk Employee in Splunk Search 05-11-2015 3 4	3	4
conditional distinct count Hello, Is there a way I can merge these two searches into a single conditional search? index="webs" (process_resour... by zahmadian Engager in Splunk Search 05-11-2015 0 3	0	3
formatting _time field into a YYYY-MM-DD field This search is ok ... \| stats max(fieldname1) as fn1 by _time but I want to control the format of the _time field ... by HattrickNZ Motivator in Splunk Search 05-11-2015 0 3	0	3
How do you obtain an attribute present in numerous sourcetypes? I want to find any IP addr present in numerous sourcetypes. That is, the IP Addr MUST be present in ALL sourcetypes: ... by leotoa New Member in Splunk Search 05-11-2015 0 7	0	7
Setting table headers? I have a transposed table, and I want to change the header. Because of being transposed, it looks like this now: <hea... by szabados Communicator in Splunk Search 05-11-2015 0 1	0	1
Top 10 values and other to be Grouped in "OTHERS"..?? Hi All, I am bit new to this Splunk I am able to get top 10 values but not able to group other ( not in top 10 ) in ... by SanthoshSreshta Contributor in Splunk Search 05-11-2015 1 2	1	2
REST API/Curl help Hi, I have a search that runs within Splunk, but when I try it via curl, I get an error. Hoping someone can help me... by a212830 Champion in Splunk Search 05-11-2015 0 2	0	2