Splunk Search

Splunk Search
Community Activity
desimpkins
Hello, Just downloaded & installed v6 onto my Win7 computer. Have then installed Splunk DB Connect, trying to set it...
by desimpkins Explorer in Splunk Search 02-26-2015
3 9
3
9
anthonycopus
Hi, What would be the simplest way of parsing the following logs so I can search what is inside the {} field: "Feb ...
by anthonycopus Path Finder in Splunk Search 02-26-2015
0 4
0
4
newbiesplunk
Hi, If my event does not contain the user field, and i need to have the automatic lookup for the user info based on t...
by newbiesplunk Path Finder in Splunk Search 02-26-2015
0 5
0
5
newbiesplunk
Hi, When I add a new automatic lookup, if I put * at the Apply to: Sourcetype, it does not work, but if i put the s...
by newbiesplunk Path Finder in Splunk Search 02-26-2015
0 1
0
1
spin691t
Hello Everyone I'm a new user. I would like to search the top 5 user logfail distinct by day in the last 7 days. I w...
by spin691t New Member in Splunk Search 02-26-2015
0 3
0
3
lbogle
Hello Splunkers, I have what I think should be an easy question, but I'm not able to make it happen. I have two look...
by lbogle Contributor in Splunk Search 02-26-2015
0 4
0
4
PPape
Hello, I found a strange behavior with my mySQL Server. I try to do this query: select t.change_time, t.create_ti...
by PPape Contributor in Splunk Search 02-26-2015
3 9
3
9
markthompson
Hello, I wish to create a new sourcetype in props.conf that uses the linebreak properties such as : SHOULD_LINEMERGE ...
by markthompson Builder in Splunk Search 02-26-2015
1 3
1
3
Umamaheshwar210
Hi , We are using Splunk 6.1.1 Ver .I would like to know few Information from Splunk. Their are alerts configured...
by Umamaheshwar210 New Member in Splunk Search 02-26-2015
0 2
0
2
hcheang
Hello I have question regarding limiting the number of events on search to reduce the search time. Currently, I'm tr...
by hcheang Path Finder in Splunk Search 02-26-2015
0 3
0
3
kmattern
Is it possible to display results in a web page using a python script? It is easy to dispatch a search and display th...
by kmattern Builder in Splunk Search 02-26-2015
0 1
0
1
reggie_123
Splunk doesn't parse the date in the beginning of an event, when it has a hour of 24 (JODA time), like in 03.02.2015 ...
by reggie_123 Explorer in Splunk Search 02-26-2015
1 5
1
5
Federica_92
Hi all, quick question: How I can match with rex or regex a regular expression that match all of this field? [/hom...
by Federica_92 Communicator in Splunk Search 02-26-2015
0 11
0
11
subtrakt
Hi! I have log entries with a timestamp embedded for expiration inside the log event. What's the best way to conv...
by subtrakt Contributor in Splunk Search 02-25-2015
0 1
0
1
kamal_jagga
I need to create a report of failed services. From the logs, I get the data in the below mentioned format: *******$...
by kamal_jagga Contributor in Splunk Search 02-25-2015
0 7
0
7
mgubser
Howdy, I have a stats search that returns values from fields in different events such as OS Devicetype etc. This inf...
by mgubser Explorer in Splunk Search 02-25-2015
2 4
2
4
agoktas
Hello, Here is my search: index=app_win source=service State=Stopped StartMode (Auto OR Manual) Name (*IBM* OR ...
by agoktas Communicator in Splunk Search 02-25-2015
1 4
1
4
polamarasetti
Hi Guys, i am new to SPLUNK. when i search a query with non admin user i am getting below error, Unknown search co...
by polamarasetti Explorer in Splunk Search 02-25-2015
1 6
1
6
kamgineer
i think its easier to ask my question by showing you some of the data I'm working with: Mon Feb 23 16:35:07 2015 ...
by kamgineer Explorer in Splunk Search 02-25-2015
0 5
0
5
nfieglein
I am trying to follow what the others have done, but I am stumped as to why things are not functioning for me. I have...
by nfieglein Path Finder in Splunk Search 02-25-2015
0 9
0
9
rafamss
Hi guys, I need some help. I have 2 index, and in both there are the field "ip", How can I create a search that fin...
by rafamss Contributor in Splunk Search 02-25-2015
0 8
0
8
falcom92
Hi, I use Splunk 6.2. I try to compare two values between two differents weeks. index="market_logs" host="12.0.0....
by falcom92 Engager in Splunk Search 02-25-2015
0 4
0
4
toby6578
Any number such as 1.23456E-3 (equivalent to 1.23456*10^-3 or 0.00123456) is recognised by splunk as a string rather ...
by toby6578 Path Finder in Splunk Search 02-25-2015
2 23
2
23
zoeygirl45
We are ingesting syslog logs. While doing a search and exporting to csv, we would like the raw data column to be spli...
by zoeygirl45 Explorer in Splunk Search 02-24-2015
1 4
1
4
agoktas
Hello, The following search: index=app_win source=service State=Stopped StartMode (Auto OR Manual) Name=*IBM* OR...
by agoktas Communicator in Splunk Search 02-24-2015
0 3
0
3
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...