Splunk Search

Community Activity

	Can someone please guide me some sweet spots of Splunk Analytics to MITRE Framework? Hi everyone, I am coming from background of Java, Python in the past 12 years. I am new to Splunk. Currently I am w... by prabbala Observer in Splunk Search 07-09-2023 0 1	0	1
	How to get details of accelerated datamodels that failed to complete? Hello All,I need help to build an SPL for finding details of Accelerated Data Models which have failed to execute or ... by Taruchit Contributor in Splunk Search 07-09-2023 0 4	0	4
	How to run bashscript when user hit bottom on dashboard? Hi I want to put a bottom on a dashboard that when I hit it, run bashscript on splunk server, and show this message ... by indeed_2000 Motivator in Splunk Search 07-08-2023 0 3	0	3
	How to add work week date in Splunk query (or) how to convert date to work week? how to add work week date in splunk query (or) how to convert date to work week ? by samadhuazad Engager in Splunk Search 07-08-2023 0 2	0	2
	How to remove duplicates rows based on all fields, not just one field, and display the unique rows? how to remove duplicates rows based on all fields, not just one field, and display the unique rows?Let say there are ... by LearningGuy Motivator in Splunk Search 07-08-2023 0 2	0	2
	How to show 2 eventcode fields? HiI need to run this query, I don't know what I'm missing but when I run it the src_ip field doesn't show me anything... by splunkcol Builder in Splunk Search 07-07-2023 0 1	0	1
	How to extract the first element from the JSON element based on a field match? I want to extract the json object based on a single field match from below string message. payload ::[{"name","suman"... by Chandra New Member in Splunk Search 07-07-2023 0 2	0	2
	Any way to filter multiple wildcard lookup matches to narrowest match? If a value matches multiple rows due to wildcard, I want a method to return only one match that is "narrowest". Is t... by yuanliu SplunkTrust in Splunk Search 07-07-2023 0 5	0	5
	How to find the field value corresponding to an extremity (min, max)? Say I have sales figures Month Sales June 44 July 55 August 66 September 60 November 50 ... by yuanliu SplunkTrust in Splunk Search 07-07-2023 0 3	0	3
	how to reverse field value in Splunk Hi Team, I have a field name domain with value "www.microsoft.com"; how I can reverse that and make it to "com.micros... by joomla Engager in Splunk Search 07-07-2023 0 3	0	3
	INLINE EXTRACTION with /g option for RegEX Hi.Question:is there a way to add the classic /g option for RegEX in INLINE RegEX extractor for Splunk (props), witho... by verbal_666 Builder in Splunk Search 07-07-2023 0 7	0	7
	Joining two queries not giving the desired result I have 2 queries and joining it with "Join" using the common field "SessionID".With the below query I'm just getting... by Deprasad Path Finder in Splunk Search 07-07-2023 0 10	0	10
	index and the sourcetypes in which the hosts have collected events, with the date of the first and last event on the spe on index=_internal I have to create two searches one on (report ) and one connected to the dashboard where the index ... by jtabilas Loves-to-Learn Everything in Splunk Search 07-07-2023 0 1	0	1
	リアルタイムアラートのルックアップ参照についてリアルタイムアラートにて受信したイベントをCSV lookupを参照して処理し、結果をアラート機能の「結果をルックアップに出力」でCSV lookupに追加しています。イベントの処理中に次のイベントが来た際、処理中のイベント結果がCS... by M_K Observer in Splunk Search 07-07-2023 0 0	0	0
	bucket repair splunk fsck repair --all-buckets-all-indexes i need to know where i need to put this command on Linux by lorscardala985 Explorer in Splunk Search 07-07-2023 0 1	0	1
	Sort result of bin to draw distribution histogram HiI'm trying to draw a distribution histogram of the duration to complete a specific action. The search is: index=ind... by BernardEAI Communicator in Splunk Search 07-07-2023 0 3	0	3
	Help on input text token HiI use an input text token in.my dashboard in order to retrieve spécifications numériques for a fieldIt works but i ... by jip31 Motivator in Splunk Search 07-06-2023 0 7	0	7
	Actions in regards to events coming in We have searches for 4740 account lockouts not showing as action=lockout but instead as action=modified.This is impor... by domino30 Path Finder in Splunk Search 07-06-2023 0 5	0	5
	How to dynamically set a variable for Dashboard Panel Title? I am looking to dynamically update the Splunk Dashboard panel title, depending on options I've chosen from a dropdown... by GaryZ Path Finder in Splunk Search 07-06-2023 0 1	0	1
	Line breaking issue with [source] stanza (with [sourcetype] stanza working fine We are trying to do custom linebreaking for different types of logs under the same sourcetype using the props below.T... by Naa_Win Path Finder in Splunk Search 07-06-2023 0 4	0	4
	Splunk Query to find the AD groups not configured in SAML - Splunk Cloud. Hello,I'm looking for a splunk query to capture AD groups that are not integrated with SAML in Splunk Cloud by Naa_Win Path Finder in Splunk Search 07-06-2023 0 1	0	1
	query search don't match on input by jtabilas Loves-to-Learn Everything in Splunk Search 07-06-2023 0 4	0	4
	populate multiselect why doesn't this search populate the multiselect by lorscardala985 Explorer in Splunk Search 07-06-2023 0 1	0	1
	trim everything till refusal reason from the start Hi,I am trying to trim everything before the "211 Withdrawal amount exceeded: from the output --WITHDRAWAL_AMOUNT_EXC... by man03359 Communicator in Splunk Search 07-06-2023 0 6	0	6
	How to check for armis logs in cloud? Hi All,How do we check for armis app alert logs in cloud, recently We have updated the app so how we can check for t... by smith_ Builder in Splunk Search 07-06-2023 0 0	0	0