Splunk Search

Splunk Search
Community Activity
krastevk
Hello Splunk experts, I'm working over a dashboard where I would like to have statistical table with line chart in th...
by krastevk Observer in Splunk Search 07-19-2023
0 1
0
1
kepffr
Hi guys,I'm trying to write a very simple external python search but it's just not working.I get the following error ...
by kepffr Explorer in Splunk Search 07-19-2023
1 6
1
6
revanthammineni
Hi Splunkers, I have results in the following way. Country        Count Japan                50 USA.                 ...
by revanthammineni Path Finder in Splunk Search 07-18-2023
0 1
0
1
adikrhd
Hello Community,I am fairly new to Splunk, and I am struggling with this. Here is my raw event: these are discrepancy...
by adikrhd Path Finder in Splunk Search 07-18-2023
0 15
0
15
auzark
Hi,In the below code for a panel on my dashboard, I am displaying whether a report/alert is being skipped. If the _ti...
by auzark Communicator in Splunk Search 07-18-2023
0 2
0
2
KalebeRS
Hello,I have this search for a chart that counts values weekly and divides then by day of the week.Is there any optio...
by KalebeRS Explorer in Splunk Search 07-18-2023
0 3
0
3
smith_
Hi,I'm trying to exclude list of sites from my search from lookup table its not working as expected, base search sub ...
by smith_ Builder in Splunk Search 07-18-2023
0 11
0
11
man03359
Hi All!I want to calculate the sum of failed and declined | eval Msg=if((Failure_Message=="200 Emv error " OR Failure...
by man03359 Communicator in Splunk Search 07-18-2023
0 12
0
12
keishsplunk
Hi All, we had successfully upgraded to Splunk 9.0.4.  However, we observed that when using tstats command, we are ge...
by keishsplunk Explorer in Splunk Search 07-18-2023
0 4
0
4
nmarun
Hi,[12:30:13 INF 0ceafa153290582e1f1faec3f98d84ac] Gateway API|Request...[12:30:15 INF 0ceafa153290582e1f1faec3f98d84...
by nmarun Explorer in Splunk Search 07-17-2023
0 5
0
5
dantimola
Since Splunk stream doesn't support M1/arm-based processors yet, are there any Splunk stream alternatives that we can...
by dantimola Communicator in Splunk Search 07-17-2023
0 0
0
0
isac_santana
Guys, good morningI'm having trouble inverting this table below. I need to leave the horizontal "key_type" informatio...
by isac_santana Explorer in Splunk Search 07-17-2023
0 2
0
2
abi2023
I have spl in splunkindex=demo search compliance= standard1 | timechart span=1week count by status | add totals row=t...
by abi2023 Path Finder in Splunk Search 07-17-2023
0 1
0
1
henryf
I have installed Splunk add on for AWS and created the inputs, which have a listed source type. However, when I try t...
by henryf Explorer in Splunk Search 07-17-2023
0 7
0
7
Lithyum
Hi.I need help in understanding how this can be done:The application's log have a multivalue like this:<somedata> [fi...
by Lithyum Engager in Splunk Search 07-17-2023
0 2
0
2
emzed
Is there anyone who can explain me strange behaivor of "values" function. I created statistic by "stats" with "values...
by emzed Path Finder in Splunk Search 07-17-2023
0 4
0
4
rissois
I've a search that return a table like this:column1             column2               column3      a                 ...
by rissois Observer in Splunk Search 07-17-2023
0 2
0
2
rezaeimo
i have a search query and i want to add another condition to check the url if test!=staging. the first test is coming...
by rezaeimo Explorer in Splunk Search 07-17-2023
0 9
0
9
maayan
Hi,I have a table of 3 columns: Event name, time(=when the event happened) and source (file name).I need to create a ...
by maayan Path Finder in Splunk Search 07-17-2023
0 1
0
1
rikinet
I have JSON event data like this (it is shown as a collapsable tree structure in the event view): { "data": { ...
by rikinet Path Finder in Splunk Search 07-16-2023
0 3
0
3
Liran
I need to create a baseline for what is common in an environment before creating a rule.The rule can be as simple as:...
by Liran Observer in Splunk Search 07-16-2023
0 2
0
2
sjringo
I have been trying to figure this out but getting stumped. I have seen other questions similar but just slightly diff...
by sjringo Contributor in Splunk Search 07-15-2023
0 8
0
8
john_arrowwood
I am trying to summarize AWS ELB Access Logs.  Once I get the raw URLs, I need to substitute out the path and query p...
by john_arrowwood Explorer in Splunk Search 07-15-2023
0 4
0
4
AyushiSrivas
I have a list of below host in a csvuasws12usaws120usaws11usaws13susaws13usaws130usaws14usaws15usaws16usaws17usaws173...
by AyushiSrivas Loves-to-Learn in Splunk Search 07-15-2023
0 8
0
8
simpkins1958
We have table with a list of users. Some user names are all lower case, some all upper case, some mixed case. We can ...
by simpkins1958 Contributor in Splunk Search 07-15-2023
0 6
0
6
Get Updates on the Splunk Community!

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...

What's New in Splunk Enterprise Security 8.8 and Beyond

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or ...
Top Solution Authors