Splunk Search

Splunk Search
Community Activity
daniel333
Hello, This is sorta opened ended. Since I am not too familiar with Real time searches short of just running a quic...
by daniel333 Builder in Splunk Search 04-22-2015
0 1
0
1
CatherineLiu007
For the following events, I need to calculate the duration of all stepA to stepB. There are multiple pairs and there ...
by CatherineLiu007 Explorer in Splunk Search 04-22-2015
1 7
1
7
jbleich
hello all, relative newbie here, so bare with me. I have a table output with 3 columns Failover Time, Source, Destin...
by jbleich Path Finder in Splunk Search 04-22-2015
1 9
1
9
iacobeaj
I have a search head cluster that is trying to search across an indexer cluster, but for some reason, only the Curren...
by iacobeaj New Member in Splunk Search 04-22-2015
0 1
0
1
masonmorales
So, I know I can get a list of saved searches by doing: | rest /servicesNS/-/MYAPP/saved/searches | table title H...
by masonmorales Influencer in Splunk Search 04-22-2015
8 3
8
3
shengcow
I am trying to get two different kinds of stats for the same search and I have been having problems. I want to get so...
by shengcow Explorer in Splunk Search 04-22-2015
1 9
1
9
tkwaller
Here is what I am trying to do: Within the same timeframe 1. I have a splunk search that returns all hosts in the la...
by tkwaller Builder in Splunk Search 04-22-2015
0 6
0
6
Hindoo
Hello I want to display a chart to see the bandwidth, inbound and outbound, from a switch. i wrote my search: sour...
by Hindoo Path Finder in Splunk Search 04-22-2015
0 10
0
10
andra_pietraru
I am trying to add a new field in my events using eval, but I am getting errors. My search looks like this: ... | ev...
by andra_pietraru Path Finder in Splunk Search 04-22-2015
0 28
0
28
nitesh218ss
I have one log file where the Msg part contains many things like transaction id, error code, marchend name, etc But ...
by nitesh218ss Communicator in Splunk Search 04-22-2015
0 6
0
6
splunker12er
Index time field extraction & Search Time field extraction How do both differ ? Which has less performance impact of...
by splunker12er Motivator in Splunk Search 04-22-2015
1 2
1
2
Bliide
I am trying to place values with different time ranges on the same column chart. I have 3 values that I would like t...
by Bliide Path Finder in Splunk Search 04-22-2015
0 2
0
2
zac18992
Hi I have some logs in the format below (multiple lines in each log). Note that there are spaces on the start of eac...
by zac18992 New Member in Splunk Search 04-22-2015
0 6
0
6
lohit
Hi all , i am trying to merge my results from 2 searches running over different indexes that have a common field "ur...
by lohit Path Finder in Splunk Search 04-22-2015
0 17
0
17
crossap
Hi, We seem have stopped receiving account lockout data since 23/03/2015 I am using the search eventtype=wineventlo...
by crossap Path Finder in Splunk Search 04-22-2015
0 3
0
3
cdstealer
Hi, I'll cut straight to the chase. I have a sourcetype that contains 2 log sources. Both are broken correctly usin...
by cdstealer Contributor in Splunk Search 04-21-2015
0 9
0
9
Norling80
Hi guys. I need some help to to understand what's wrong with this search. I want this one to return one count for e...
by Norling80 Path Finder in Splunk Search 04-21-2015
1 13
1
13
jaalex101
Hi, Is there a way to save the Splunk search along with the time frame of the search when exporting the results to C...
by jaalex101 Explorer in Splunk Search 04-21-2015
0 6
0
6
ufotech
In 4.3 SPLUNK we had a niche drop-down menue with our saved searches properly grouped. Therefore we would define coll...
by ufotech Explorer in Splunk Search 04-21-2015
1 4
1
4
djconroy
I have one index with a field "MessageId" that is common with another index. I need to got through all the values of...
by djconroy Path Finder in Splunk Search 04-21-2015
0 4
0
4
mhng
Hi All I have a log file which contain some information that I need. I would like to extract the date_time which I h...
by mhng New Member in Splunk Search 04-21-2015
0 6
0
6
iKate
stacked100 option is good one in chart visualization. But seems it misses obvious thing - percentage labels in toolti...
by iKate Builder in Splunk Search 04-21-2015
0 2
0
2
fourkidsco
The data: The simplest example is signal strength per station attached to wireless access point. Every 5 minutes, si...
by fourkidsco Explorer in Splunk Search 04-21-2015
0 3
0
3
j666gak
Hello, I needed a blacklist to populate with IPs and URLs, so I created a lookup file called blacklist.csv. the Look...
by j666gak Communicator in Splunk Search 04-21-2015
1 11
1
11
nk-1
Sample Splunk Web search in Splunk 6.1.3 (Windows Server 2012): host=MyHost level=INFO | stats count always return...
by nk-1 Path Finder in Splunk Search 04-21-2015
0 4
0
4
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...