Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Splunk Search
Splunk Search
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Community
- :
- Splunk Answers
- :
- Using Splunk
- :
- Splunk Search
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Invite a Friend
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
I have two searches. One search returns a field (using stats count) representing the number of users logging into a w...
by
Justin_Grant
Contributor
in
Splunk Search
08-10-2010
|
1
|
1
| ||
|
|
Is it possible to use regular expressions for the whitelist/blacklist filters in serverclass.conf? For example:
wh...
by
Peter
Path Finder
in
Splunk Search
03-29-2010
|
1
|
3
| ||
|
|
On splunkA I am monitoring an xml log file. It is forwarded to SplunkB in a separate index. Where should I define the...
by
imrago
Contributor
in
Splunk Search
08-10-2010
|
0
|
1
| ||
|
|
I have a search that is looking pipes through a rex.
rex fields=_raw "\D(?<big_num>\d{15,16})\D"
I want the UI...
by
whywhywhy
Engager
in
Splunk Search
07-23-2010
|
1
|
2
| ||
|
|
Here's my CLI search:
SPLUNK_URI=https://splunk_search_head:8089
/opt/splunk/bin/splunk search '|savedsearch "m...
by
vcarbona
Path Finder
in
Splunk Search
08-06-2010
|
2
|
4
| ||
|
|
I get lots of data from various systems via syslog. One of my systems sends me data that looks like this
HEADERTEX...
by
serialmonkey
Path Finder
in
Splunk Search
07-31-2010
|
1
|
5
| ||
|
|
Hi
We have a few charts that display summary-indexed data. The charts take a couple of form inputs including _tim...
by
sranga
Path Finder
in
Splunk Search
08-04-2010
|
0
|
7
| ||
|
(Love this forum. Didn't even know about the concurrency command before this morning.
My search:
SYSCODE=ezLM...
by
twinspop
Influencer
in
Splunk Search
08-06-2010
|
0
|
3
| ||
|
|
There is probably a better way to do this, but I am trying to catalog what rules are (and are not) used using the fir...
by
bfaber
Communicator
in
Splunk Search
08-01-2010
|
0
|
5
| ||
|
|
I am currently running a search for license bandwidth :
index=_internal source=*metrics.log group=per_index_thrupu...
by
goat
Explorer
in
Splunk Search
08-04-2010
|
1
|
4
| ||
|
|
Running splunk on windows2003. I am getting the events but it seems my regex is not working right on the event.
S...
by
kseshadri
New Member
in
Splunk Search
08-02-2010
|
0
|
1
| ||
|
|
Hello,
I have a search that looks for a particular set of data. if the data comes from a particular source address...
by
kholleran
Communicator
in
Splunk Search
07-30-2010
|
1
|
1
| ||
|
|
Hello, I have a log file with a very long record (about 255 chars) and I would like to know if and how is it possible...
by
cafissimo
Communicator
in
Splunk Search
08-02-2010
|
0
|
1
| ||
|
|
Hello,
I am asking a lot of questions today (obviously new to Splunk and in implementation...).
We do NOT use A...
by
kholleran
Communicator
in
Splunk Search
07-30-2010
|
2
|
2
| ||
|
|
I'm trying to develop a regex to separate merged events from a log. Here's my stanza in props.conf:
[source=c:\tem...
by
rgcox1
Communicator
in
Splunk Search
07-30-2010
|
0
|
2
| ||
|
|
Is there a search to check bundles delivered from search head to peers?
by
rroberts
Splunk Employee
in
Splunk Search
07-29-2010
|
2
|
2
| ||
|
|
For starters this app is amazing. I am trying to search a ton of log files for a certain error and its definitely doi...
by
jonathanjw
New Member
in
Splunk Search
07-30-2010
|
0
|
1
| ||
|
|
Below are the two files tcodesNew.csv paste.plurk.com/show/284992 chlogNew.csv paste.plurk.com/show/284990
I am tr...
by
ankitghai
New Member
in
Splunk Search
07-30-2010
|
0
|
1
| ||
|
|
Unfortunately our proxy data does not have user information. However I do have access to AV data that is able to map ...
by
morningwood
Explorer
in
Splunk Search
07-28-2010
|
0
|
2
| ||
|
|
I have a best practice time question for veteran Splunkers out there. Right now I have a a failed login search that r...
by
kholleran
Communicator
in
Splunk Search
07-29-2010
|
2
|
1
|
Top Labels
-
chart
295 -
count
327 -
distributed search
1 -
eval
870 -
field extraction
640 -
fields
627 -
index
2 -
introduction
4 -
join
325 -
lookup
492 -
metadata
97 -
other
1,099 -
python
1 -
regex
453 -
rex
369 -
saved search
1 -
search head
1 -
search job inspector
211 -
search peer
1 -
sourcetype
2 -
stats
1,139 -
subsearch
514 -
summary indexing
1 -
table
536 -
timechart
367 -
transaction
168 -
troubleshooting
2 -
tstats
141 -
universal forwarder
1 -
using Splunk Enterprise
1
- « Previous
- Next »
Register for .conf21 Now!
Go Vegas or Go Virtual!
How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.
Learn More or Register Now >
Get Updates on the Splunk Community!
