Splunk Search

Community Activity

	How to list of all indexes and all fields within each index? I can obtain a list of fields within an index eg.index=bind_queries \| stats values() AS \| transpose \| table column... by TonyJobling New Member in Splunk Search 07-03-2023 0 4	0	4
	Need to make changes in correlation search audit query Hi all,I'm trying to audit correlation searches in my environment but unable to view the "Last Modified By" "Last Mod... by Raj Builder in Splunk Search 07-01-2023 0 3	0	3
	How to find a user behind an action? Hi I have a report showing who have added or removed a person to or from a group. Like :index="win*" (EventCode=4728 ... by Loepp Observer in Splunk Search 06-30-2023 0 6	0	6
	Splunk search to find the traffic of Heavy Forwarders reporting with their IP address? Hello, Can someone please help me with the Splunk search to find the list of Heavy Forwarders reporting with their IP... by Roy_9 Motivator in Splunk Search 06-30-2023 0 4	0	4
	How to use subquery values in a where clause? Im trying to do this: aid=0 Overflowexception msg="Print completed" @t<first \| [search Overflowexception \| stats min... by Staale New Member in Splunk Search 06-30-2023 0 6	0	6
	How to find common field values in different action? Hello All,I want to create an alert to find certain actions done by users from same Index.Index= myindexsourcetype= m... by navan1 Explorer in Splunk Search 06-30-2023 0 4	0	4
	extract two different field values into one field using regex Hi All,I am fairly new to Splunk and I have bit of a challenge in front of me which I am not able to resolve. I have ... by man03359 Communicator in Splunk Search 06-30-2023 0 1	0	1
	Issue with MultiSearch and Missing Buckets with SLA Eval Hey all, I've got a multisearch query using inputlookups to untangle a sprawling kafka setup, getting all the various... by interrobang Explorer in Splunk Search 06-29-2023 0 0	0	0
	Created a report where I need to trigger an alert depending on the value of a cell I have the following searchindex=xoom_app_online_checkout_orchestration_api (level=ERROR AND "Failed to get open-bank... by gsbpp Explorer in Splunk Search 06-29-2023 0 3	0	3
	How do you MVZIP more than one field? My data is in JSON format, and contains arrays of JSON data that can be from 1 to N blocks. In this JSON, fields can ... by brajaram Communicator in Splunk Search 06-29-2023 0 3	0	3
	URL Decoding- How to resolve error? i tried all splunk answers and doesn't seems like working for me. i have this search \| rex mode=sed field=message.UA ... by yonphang Explorer in Splunk Search 06-29-2023 0 5	0	5
	Comparing the results in different time range? Hi Splunkers! Good day! I need a search which extracts the count of serial_number of different time range and i... by smanojkumar Contributor in Splunk Search 06-29-2023 0 4	0	4
	How can I extract with Regex? Hello, Hope you are wellI want to etract only TP58304 on this line (8)TP58304 (5)endra(3)ttx(5)local(0)How can i do p... by numeroinconnu12 Path Finder in Splunk Search 06-29-2023 0 1	0	1
	Optimizing subquery with inputlookup I have this query to find hosts from a lookup that have zero events. There are about a 100 hosts and I can see that t... by krbalaji77 Explorer in Splunk Search 06-29-2023 0 3	0	3
	Configuration file settings We keep getting warnings such as We have gone into the savedsaerch conf files and renames them on a diferent SH but I... by domino30 Path Finder in Splunk Search 06-29-2023 0 1	0	1
	Can't extract fields and make list? Hi Team, Please help us on the below issue. Below is the sample event. message: Dataframe row : {"_c0":{"0":"{","1"... by Renunaren Loves-to-Learn Everything in Splunk Search 06-28-2023 0 2	0	2
	MultiSearch and Missing Buckets Messing with SLA Calculations I've got a multisearch query basically using inputlookups to trace a sprawling kafka setup, getting all the various l... by interrobang Explorer in Splunk Search 06-28-2023 0 0	0	0
	Finding a number of outliers that repeteadly occurs on 3 consecutive time windows using streamstats? So I have this query that creates and incident if there is 7 outlier in the last 15 minutes: \| streamstats time_wind... by Goldenfit Explorer in Splunk Search 06-28-2023 0 0	0	0
	Log clearing not showing up from tstats? I can search my way into finding the result of a log clearing event bit if I use a data model with tstats it doesn't ... by domino30 Path Finder in Splunk Search 06-28-2023 0 10	0	10
	How would I look for dashboards/alerts not in use? Hi Team , Has anyone worked on finding out unused dashboards or alerts in Splunk . Can you please assist me . Thank... by npanda04 New Member in Splunk Search 06-28-2023 0 3	0	3
	Which Splunk Db version should match with Db servers? I have a Splunk app db connect running on version 3.4.2 so is it important to run those exsisting databases on that v... by Ritu Explorer in Splunk Search 06-28-2023 0 1	0	1
	Why is my search not specifying field vs _raw or explicit field? Hello, I'm trying to understand the behavior of a basic query as the one below (I've ingested a JSON dataset): inde... by blardy New Member in Splunk Search 06-28-2023 0 2	0	2
	How to count number of values in multi-valued field? Hello! I want to know how to count numbers of field values. Currently I have two fields, something like: User - AnnaC... by marinella26 Explorer in Splunk Search 06-27-2023 0 2	0	2
	Why is lookup command not working in Splunk REST API? I'm consuming data from Splunk REST API endpoints for other purposes. However, it is throwing this error because I us... by georgear7 Communicator in Splunk Search 06-27-2023 0 5	0	5
	Taking Count of Response Codes by Endpoints with Endpoints listed as rows and Response Codes listed as columns? Hello,I am new to Splunk. Please help me write a query to get count of response by ServcieName(displayed in rows) and... by NallaAyee Observer in Splunk Search 06-27-2023 0 2	0	2