Splunk Search

Splunk Search
Community Activity
evang_26
Hi users, I am trying to combine the outputs of two different searches and stack them in a chart. The idea is to fi...
by evang_26 Communicator in Splunk Search 09-02-2014
1 6
1
6
sarfaraz1089
In Splunk search results, what is the difference between events count and statistic count. (I am unable to upload the...
by sarfaraz1089 Engager in Splunk Search 09-02-2014
1 2
1
2
carasso
Besides the obvious things of looking for rare field values... what are all the list of anomaly searches you use to ...
by carasso Splunk Employee Splunk Employee in Splunk Search 09-02-2014
1 2
1
2
mfjones65
Is it possible in a SPLUNK search to return a number of leading and trailing results surround each match similar to t...
by mfjones65 New Member in Splunk Search 09-02-2014
0 2
0
2
wiredmonkey
I want to create a table from the following syslog entry: Aug 14 15:37:34 192.168.10.18 Aug 14 15:37:33 WestAnnex1 M...
by wiredmonkey Explorer in Splunk Search 09-02-2014
1 4
1
4
DerekKing
Hi All, I've had an incident where phishing email has come through my reputation filter, and it got me to thinking ...
by DerekKing Path Finder in Splunk Search 09-02-2014
0 6
0
6
ranmanh
Hi This is for splunk version 4.3.4, build 136012 I have setup ldap authentication in file : /opt/splunk/etc/system...
by ranmanh New Member in Splunk Search 09-02-2014
0 1
0
1
vaishnavi07
Hi All. If the user selects %_Processor_Time,then I need to show the graph for avg(%_Processor_Time) for top 5 proces...
by vaishnavi07 Explorer in Splunk Search 09-02-2014
0 3
0
3
garryclarke
I have a set of events on an input stream which I need to query and want to carry out a join with another data set wh...
by garryclarke Path Finder in Splunk Search 09-01-2014
1 3
1
3
ashari
Hi, Can we tell Splunk to run a query on another machine and return back with an answer. I am working in shared envir...
by ashari Explorer in Splunk Search 09-01-2014
0 2
0
2
sina_shafaei
Hi I have a table like this (there are other fields between first and last field): Var1-------...-------Varn First...
by sina_shafaei Explorer in Splunk Search 09-01-2014
0 3
0
3
f_luciani
Hi, I've been using Splunk 6.1.2 trial for a week now, it has been installed on Debian and is running fine, but... I...
by f_luciani Path Finder in Splunk Search 09-01-2014
1 3
1
3
evang_26
Hi, I am challenging myself to solve a problem which came up last week. The idea is to first make a set diff betwe...
by evang_26 Communicator in Splunk Search 09-01-2014
1 2
1
2
reach2tushar
Hi, I am thinking of using the Calculated Fields option to extract one field. I have following values in a field nam...
by reach2tushar Explorer in Splunk Search 09-01-2014
0 3
0
3
kavraja
I am fairly new to splunk but I am trying to create a search that would send out an alert whenever a member of a cert...
by kavraja Path Finder in Splunk Search 09-01-2014
1 4
1
4
jrodriguezap
Hi there A query, you can do something like a "transaction where" For example, all of the following logs, merged wi...
by jrodriguezap Contributor in Splunk Search 08-31-2014
1 7
1
7
lbogle
Hello Splunkers, I have a search that's coming up nicely but I need to refine the search further by sorting by a fiel...
by lbogle Contributor in Splunk Search 08-30-2014
0 5
0
5
yaminims
I am trying to to the average of columns in a timechart as a grand average. Below is my query, any help on this will...
by yaminims New Member in Splunk Search 08-30-2014
0 2
0
2
mjones414
I have a script that I wrote which goes out and samples data from a few thousand servers every 5 minutes and returns ...
by mjones414 Contributor in Splunk Search 08-29-2014
0 1
0
1
ahooper239
I'm trying to extract fields from a message containing the following string.. 'database'=running 'management'=runnin...
by ahooper239 New Member in Splunk Search 08-29-2014
0 1
0
1
Michael_Schyma1
I am trying to only select the data that has Directory Administrators OR Master Web Resource Admins AND I want that d...
by Michael_Schyma1 Contributor in Splunk Search 08-29-2014
0 4
0
4
vtsguerrero
Can anyone help me making this table? I have the field Status, wich has events Status=1, Status=2, Status=3. I need t...
by vtsguerrero Contributor in Splunk Search 08-29-2014
1 3
1
3
timmy13
I have a very basic lookup defined. Given a UserID in my indexed data, I lookup the name from an external csv file t...
by timmy13 Communicator in Splunk Search 08-29-2014
2 2
2
2
hyahmadi
hello splunkers, I need to exclude in my search, IP values in the second lookup file | inputlookup file1_lookup.csv |...
by hyahmadi Explorer in Splunk Search 08-29-2014
0 2
0
2
rdownie
Can someone tell me why this search returns data: index=cnr-dhcp ( ( earliest="1377036255" latest="1377082255" lease...
by rdownie Communicator in Splunk Search 08-29-2014
0 2
0
2
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...
Top Solution Authors