Splunk Search

Community Activity

How to convert epoch to local time? Hi! I have log entries with a timestamp embedded for expiration inside the log event. What's the best way to conv... by subtrakt Contributor in Splunk Search 02-25-2015 0 1	0	1
How to write the regex and break and extract a field to get the required data? I need to create a report of failed services. From the logs, I get the data in the below mentioned format: *******$... by kamal_jagga Contributor in Splunk Search 02-25-2015 0 7	0	7
How to search and filter based on fields created by stats? Howdy, I have a stats search that returns values from fields in different events such as OS Devicetype etc. This inf... by mgubser Explorer in Splunk Search 02-25-2015 2 4	2	4
A particular search result is not showing up in \| stats count output. Very wierd. Hello, Here is my search: index=app_win source=service State=Stopped StartMode (Auto OR Manual) Name (IBM OR ... by agoktas Communicator in Splunk Search 02-25-2015 1 4	1	4
Unknown search command 'gauge'. Hi Guys, i am new to SPLUNK. when i search a query with non admin user i am getting below error, Unknown search co... by polamarasetti Explorer in Splunk Search 02-25-2015 1 6	1	6
Sum a series of values based on the distinctness of another column i think its easier to ask my question by showing you some of the data I'm working with: Mon Feb 23 16:35:07 2015 ... by kamgineer Explorer in Splunk Search 02-25-2015 0 5	0	5
I am try to to find the number of business days between two extracted fields I am trying to follow what the others have done, but I am stumped as to why things are not functioning for me. I have... by nfieglein Path Finder in Splunk Search 02-25-2015 0 9	0	9
Search in multiple indexes Hi guys, I need some help. I have 2 index, and in both there are the field "ip", How can I create a search that fin... by rafamss Contributor in Splunk Search 02-25-2015 0 8	0	8
How to compare two weeks ? Hi, I use Splunk 6.2. I try to compare two values between two differents weeks. index="market_logs" host="12.0.0.... by falcom92 Engager in Splunk Search 02-25-2015 0 4	0	4
Splunk treats any number that uses E (instead of 10) as a string Any number such as 1.23456E-3 (equivalent to 1.2345610^-3 or 0.00123456) is recognised by splunk as a string rather ... by toby6578 Path Finder in Splunk Search 02-25-2015 2 23	2	23
How to customize raw data into fields using regex before exporting to CSV? We are ingesting syslog logs. While doing a search and exporting to csv, we would like the raw data column to be spli... by zoeygirl45 Explorer in Splunk Search 02-24-2015 1 4	1	4
Why are certain events not showing in '\| stats count' output? Hello, The following search: index=app_win source=service State=Stopped StartMode (Auto OR Manual) Name=IBM OR... by agoktas Communicator in Splunk Search 02-24-2015 0 3	0	3
Why is my timechart search WHERE duration > 8 not returning any data? I have a lot of SOAP req/resp pairs and I was able to match them up and find the time between them (duration). I then... by skoelpin SplunkTrust in Splunk Search 02-24-2015 0 10	0	10
How can I pipe search results to syslog? Example: I'd like to run a search on windows logs, do some data transformation and then pipe the output to a syslog ... by grantsales Engager in Splunk Search 02-24-2015 0 4	0	4
How to edit my search to get a table of data from multiple indexes? Hello, I’m looking for to get a table from the the search results from two indexes: index="imwaccesslog" OR index="... by carlpier Explorer in Splunk Search 02-24-2015 0 3	0	3
how to extract from java.lang My events look like this TYP=ERR, TS1=1423574799157, TS2=1423574799157, CMP=PUR, EDESC=Unknown Host java.lang.Exc... by GreeshmaV New Member in Splunk Search 02-24-2015 0 5	0	5
How to extract the file name from full path using regex/rex? I am trying to extract a file name from the entire path using rex. An example log is: ....request=http://66.228.48.1... by jamesvz84 Communicator in Splunk Search 02-24-2015 0 2	0	2
time range picker in Splunk 6.1.3 build 220630 Hi, I´m trying to get the Time range picker to work in a test dashboards and in some cases it does work but not when ... by Norling80 Path Finder in Splunk Search 02-24-2015 1 1	1	1
Finding x number of log entries that happened prior to search results I'm looking to find the last 5 log entries that occurred before a certain event, but I don't know how to craft the se... by sanorthrup Path Finder in Splunk Search 02-24-2015 0 9	0	9
Real time search, how to check if event doesn't exist and return something if it doesn't. Hello, I have some logs arriving into splunk every 5 minutes from a script running on an application server. The fin... by DavidHourani Super Champion in Splunk Search 02-24-2015 1 3	1	3
How to find the total count of users who had logged in from last 30 days in siteminder and tyayd applications How to find the total count of users who had logged in from last 30 days in siteminder and tyayd applications From in... by moiezuddin Explorer in Splunk Search 02-24-2015 0 1	0	1
Can i have the autocomplete option for textbox ? Hi , I have a created a form with a textbox. Can i create autocomplete option for this textbox..ie while typing it s... by rakesh_498115 Motivator in Splunk Search 02-24-2015 2 4	2	4
How to search cisco firewall Deny actions based on internal source IPs against multiple external IP subnets? Hi There, This is my first post so wanted to say Hello! I am trying to create an alert for possible Deny action on o... by artheb New Member in Splunk Search 02-24-2015 0 3	0	3
How to convert my time field for use in a timechart search? Any suggestions on how to timechart an unusual timestamp that comes inside the log entry. These logs come in every ni... by subtrakt Contributor in Splunk Search 02-23-2015 0 1	0	1
Extract multiple values from a single field? I'm trying to extract multiple values from a single field. I noticed that Splunk field extractor will only extract on... by skoelpin SplunkTrust in Splunk Search 02-23-2015 0 3	0	3