Splunk Search

Community Activity

Log clearing not showing up from tstats? I can search my way into finding the result of a log clearing event bit if I use a data model with tstats it doesn't ... by domino30 Path Finder in Splunk Search 06-28-2023 0 10	0	10
How would I look for dashboards/alerts not in use? Hi Team , Has anyone worked on finding out unused dashboards or alerts in Splunk . Can you please assist me . Thank... by npanda04 New Member in Splunk Search 06-28-2023 0 3	0	3
Which Splunk Db version should match with Db servers? I have a Splunk app db connect running on version 3.4.2 so is it important to run those exsisting databases on that v... by Ritu Explorer in Splunk Search 06-28-2023 0 1	0	1
Why is my search not specifying field vs _raw or explicit field? Hello, I'm trying to understand the behavior of a basic query as the one below (I've ingested a JSON dataset): inde... by blardy New Member in Splunk Search 06-28-2023 0 2	0	2
How to count number of values in multi-valued field? Hello! I want to know how to count numbers of field values. Currently I have two fields, something like: User - AnnaC... by marinella26 Explorer in Splunk Search 06-27-2023 0 2	0	2
Why is lookup command not working in Splunk REST API? I'm consuming data from Splunk REST API endpoints for other purposes. However, it is throwing this error because I us... by georgear7 Communicator in Splunk Search 06-27-2023 0 5	0	5
Taking Count of Response Codes by Endpoints with Endpoints listed as rows and Response Codes listed as columns? Hello,I am new to Splunk. Please help me write a query to get count of response by ServcieName(displayed in rows) and... by NallaAyee Observer in Splunk Search 06-27-2023 0 2	0	2
How to apply header color based on the header value on the table? I have 10 columns and want to color header alone with different color codes based on value of the header since column... by DataOrg Builder in Splunk Search 06-27-2023 0 7	0	7
How to search to retrieve the host values from the index data that match the host values in the CSV file? I have an index named "Linux" and a CSV file called "sample.csv" with multiple columns, including "IP" and "Host." My... by satyaallaparthi Communicator in Splunk Search 06-27-2023 0 7	0	7
How to discard users that start with a urn:forms:anonymous#? I have some users that start with urn:forms:anonymous# in my lookupI was trying to to discard them use urn:forms:anon... by Netza Engager in Splunk Search 06-27-2023 0 2	0	2
How to extract stats in a multivariate field? I have the following query that sets 'Results' based on the JSON portion of my logs below: index="internallogs"source... by Bizzaro_Shake Explorer in Splunk Search 06-27-2023 0 4	0	4
How to pass current year and month to search query dynamically? Hi Team, I am trying to write a search query where it will find the existing filename is present in the logs or not.H... by splunkNewbie007 Loves-to-Learn in Splunk Search 06-26-2023 0 5	0	5
How to add total median and min to median and min by month? Hey guys! I need the statistics of a bunch of data by month. And this is done already. search\|eval Month=strftime(_ti... by qqzj Explorer in Splunk Search 06-26-2023 0 8	0	8
Why is index missing in list of indexes while editing roles? We are running splunk 9.0.5 We want to add an index to the default indexes for a user role, but the index does not sh... by pharmapartners Explorer in Splunk Search 06-26-2023 0 2	0	2
How to extract each set of numbers from a string before space and after a ;(semi-colon)? Hi, I'm trying to extract the matching patterns 35255955, 35226999, 35162846 ...etc untill end of the string with mat... by Satheesh_red Path Finder in Splunk Search 06-26-2023 0 4	0	4
How to match email from index with a lookup file.csv ? same "email prefix" but different email domain. Hi, I'm trying to use index and lookup function. However values in those fields are not an exact match but those emai... by harold_ziedler Engager in Splunk Search 06-26-2023 0 2	0	2
Log file is importing: How to parse the event? I am getting the log file imported to Splunk, but each line is an event with no field name. Can I break up the line ... by richtate Path Finder in Splunk Search 06-26-2023 0 1	0	1
Chart logon session duration:hour of day as x axis and day of the month as y axis, duration of session as a line segment Hi, I have a couple of logs showing user login and logout sessions. I'm trying to display each session of a specific ... by mngeow Engager in Splunk Search 06-26-2023 0 2	0	2
How do you make a table that reduces in height when your dashboard search returns no results? How to change a Simple XML table height when no data is present? The table should be much smaller when no alerts are ... by niketn Legend in Splunk Search 06-26-2023 3 6	3	6
How to create common name for 3 different fields in an event? I have event like below and I am trying to create a common field for CI_Name / Hostname /IP_Address and name it as G... by Navanitha Path Finder in Splunk Search 06-26-2023 0 2	0	2
How to find out the unused IP address from IP ranges? hi, all, I have an index=myindex, and with two data sourcestype sourcetype1 includes some IP subnet information jus... by TaylorSwift Loves-to-Learn in Splunk Search 06-25-2023 0 2	0	2
How to find Okta users that logged in from rare countries? I want to search for Okta Logs to find users that logged in from rare countries. So typically, users who logged from ... by JasonPhang New Member in Splunk Search 06-24-2023 0 4	0	4
How to delete events which is decreasing inbetween? How to delete events which is decreasing inbetween. I have extracted the _time column using regex so that splunk defa... by kirthika26 Explorer in Splunk Search 06-24-2023 0 12	0	12
What is wrong with my sub-pipeline in appendpipe? I have a lookup table bsm_string_new_overheat_records.csv: _time overheat_location start_CCU_AMBI_TEMP start_time_se... by yshen Communicator in Splunk Search 06-24-2023 0 10	0	10
Is there a way to limit the results to UP TO 3 per host? Good Afternoon, I have a query to get disk space from servers. Each server has between 1 and 3 drives. My query will ... by thebankitgui Path Finder in Splunk Search 06-23-2023 0 1	0	1