Splunk Search

Community Activity

How to apply header color based on the header value on the table? I have 10 columns and want to color header alone with different color codes based on value of the header since column... by DataOrg Builder in Splunk Search 06-27-2023 0 7	0	7
How to search to retrieve the host values from the index data that match the host values in the CSV file? I have an index named "Linux" and a CSV file called "sample.csv" with multiple columns, including "IP" and "Host." My... by satyaallaparthi Communicator in Splunk Search 06-27-2023 0 7	0	7
How to discard users that start with a urn:forms:anonymous#? I have some users that start with urn:forms:anonymous# in my lookupI was trying to to discard them use urn:forms:anon... by Netza Engager in Splunk Search 06-27-2023 0 2	0	2
How to extract stats in a multivariate field? I have the following query that sets 'Results' based on the JSON portion of my logs below: index="internallogs"source... by Bizzaro_Shake Explorer in Splunk Search 06-27-2023 0 4	0	4
How to pass current year and month to search query dynamically? Hi Team, I am trying to write a search query where it will find the existing filename is present in the logs or not.H... by splunkNewbie007 Loves-to-Learn in Splunk Search 06-26-2023 0 5	0	5
How to add total median and min to median and min by month? Hey guys! I need the statistics of a bunch of data by month. And this is done already. search\|eval Month=strftime(_ti... by qqzj Explorer in Splunk Search 06-26-2023 0 8	0	8
Why is index missing in list of indexes while editing roles? We are running splunk 9.0.5 We want to add an index to the default indexes for a user role, but the index does not sh... by pharmapartners Explorer in Splunk Search 06-26-2023 0 2	0	2
How to extract each set of numbers from a string before space and after a ;(semi-colon)? Hi, I'm trying to extract the matching patterns 35255955, 35226999, 35162846 ...etc untill end of the string with mat... by Satheesh_red Path Finder in Splunk Search 06-26-2023 0 4	0	4
How to match email from index with a lookup file.csv ? same "email prefix" but different email domain. Hi, I'm trying to use index and lookup function. However values in those fields are not an exact match but those emai... by harold_ziedler Engager in Splunk Search 06-26-2023 0 2	0	2
Log file is importing: How to parse the event? I am getting the log file imported to Splunk, but each line is an event with no field name. Can I break up the line ... by richtate Path Finder in Splunk Search 06-26-2023 0 1	0	1
Chart logon session duration:hour of day as x axis and day of the month as y axis, duration of session as a line segment Hi, I have a couple of logs showing user login and logout sessions. I'm trying to display each session of a specific ... by mngeow Engager in Splunk Search 06-26-2023 0 2	0	2
How do you make a table that reduces in height when your dashboard search returns no results? How to change a Simple XML table height when no data is present? The table should be much smaller when no alerts are ... by niketn Legend in Splunk Search 06-26-2023 3 6	3	6
How to create common name for 3 different fields in an event? I have event like below and I am trying to create a common field for CI_Name / Hostname /IP_Address and name it as G... by Navanitha Path Finder in Splunk Search 06-26-2023 0 2	0	2
How to find out the unused IP address from IP ranges? hi, all, I have an index=myindex, and with two data sourcestype sourcetype1 includes some IP subnet information jus... by TaylorSwift Loves-to-Learn in Splunk Search 06-25-2023 0 2	0	2
How to find Okta users that logged in from rare countries? I want to search for Okta Logs to find users that logged in from rare countries. So typically, users who logged from ... by JasonPhang New Member in Splunk Search 06-24-2023 0 4	0	4
How to delete events which is decreasing inbetween? How to delete events which is decreasing inbetween. I have extracted the _time column using regex so that splunk defa... by kirthika26 Explorer in Splunk Search 06-24-2023 0 12	0	12
What is wrong with my sub-pipeline in appendpipe? I have a lookup table bsm_string_new_overheat_records.csv: _time overheat_location start_CCU_AMBI_TEMP start_time_se... by yshen Communicator in Splunk Search 06-24-2023 0 10	0	10
Is there a way to limit the results to UP TO 3 per host? Good Afternoon, I have a query to get disk space from servers. Each server has between 1 and 3 drives. My query will ... by thebankitgui Path Finder in Splunk Search 06-23-2023 0 1	0	1
How to fetch fields and values reported in Job inspector of searches executed by end users? Hello All,I need help to make build an SPL which helps to get the results of Job inspector for each query executed by... by Taruchit Contributor in Splunk Search 06-23-2023 0 4	0	4
How to add a string in the field value when there are more than 2 values in a field? I have a field named "port_number" in my results which gives multivalves as follows. source destinationport_number3.... by shivani364 New Member in Splunk Search 06-23-2023 0 1	0	1
Search History Hi,Can we see queries run by another splunk user for any app ? Does it require any extra priviledges / roles ? Pleas... by Poojitha Communicator in Splunk Search 06-22-2023 0 1	0	1
How to use Rex to extract field Hi everyone, i have a logs vpn format 2023-06-21T03:29:16+0000 [stdout#info] LOG ERR: 'LOG_DB RECORD {"username": "du... by namlh Loves-to-Learn Everything in Splunk Search 06-22-2023 0 1	0	1
How to copy events from a search result to another index? Hi all, We have a an index (say log_index) where the log retention is only 7 days. We can not have this increased to ... by jpillai Path Finder in Splunk Search 06-22-2023 0 3	0	3
How to parse json with SPL? Hi Splunk Community,I am looking to create a search that can help me extract a specific key/value pair within a neste... by Strangertinz Path Finder in Splunk Search 06-22-2023 0 3	0	3
Is there a way for me to create a table output of the JSON keys? Hi Splunk Community! Is there a way for me to create a table output of the output of the json keys below & (possibly ... by Strangertinz Path Finder in Splunk Search 06-22-2023 0 3	0	3

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Splunk Search

How to apply header color based on the header value on the table?

How to search to retrieve the host values from the index data that match the host values in the CSV file?

How to discard users that start with a urn:forms:anonymous#?

How to extract stats in a multivariate field?

How to pass current year and month to search query dynamically?

How to add total median and min to median and min by month?

Why is index missing in list of indexes while editing roles?

How to extract each set of numbers from a string before space and after a ;(semi-colon)?

How to match email from index with a lookup file.csv ? same "email prefix" but different email domain.

Log file is importing: How to parse the event?

Chart logon session duration:hour of day as x axis and day of the month as y axis, duration of session as a line segment

How do you make a table that reduces in height when your dashboard search returns no results?

How to create common name for 3 different fields in an event?

How to find out the unused IP address from IP ranges?

How to find Okta users that logged in from rare countries?

How to delete events which is decreasing inbetween?

What is wrong with my sub-pipeline in appendpipe?

Is there a way to limit the results to UP TO 3 per host?

How to fetch fields and values reported in Job inspector of searches executed by end users?

How to add a string in the field value when there are more than 2 values in a field?

Search History

How to use Rex to extract field

How to copy events from a search result to another index?

How to parse json with SPL?

Is there a way for me to create a table output of the JSON keys?

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Quick connection discovery mode for forwarders

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation