Splunk Search

Community Activity

[indexer] Streamed search execute failed because: User 'nobody' could not act as: Can someone please tell me what this means, and where I can look to fix this? Thanks! by x9079 Engager in Splunk Search 08-07-2014 0 10	0	10
Ignore milliseconds of _time when grouping I need to ignore the milliseconds when I group by _time stats avg(instance_internal) as amount by _time, unit_id, in... by dukeatcoding Engager in Splunk Search 08-07-2014 1 2	1	2
mvindex not working trying to extract time of firewall events Hi guys, I have a search which finds DHCP and Firewallevents with the same src_ip. It works perfectly fine, but gi... by pscheidl New Member in Splunk Search 08-07-2014 0 6	0	6
Query to return top ten users and the applications they connect to? My events contain users and applications to which they connect to. I want a query to return top 10 users and the appl... by splunkn Communicator in Splunk Search 08-07-2014 0 3	0	3
How to calculate timespan of a field value as session-duration only for a specific sourcetype ? I need to extract the session-duration from different BI server logs. Most BI server logs have clearly defined sessio... by shresthas New Member in Splunk Search 08-07-2014 0 1	0	1
Grouping events by time range relative to the current time, using calculations with eval statements Hi, I want to groups event times in ranges relative to the current time. Currently this method does not work. The fi... by jdbtee Path Finder in Splunk Search 08-07-2014 1 5	1	5
Pivot search won't work if it's accelerated, but works fine when acceleration is removed I currently have a simple constraint in a pivot datamodel which is: index=video earliest=-5h-1d@d+5h latest=-5h@d+5h... by anthony_copus Explorer in Splunk Search 08-07-2014 1 2	1	2
how to extract total count for different fields Hi, i will like to extract the count for the following Data_no: 1T Identity: A Data_no: 2T Identity: C i t... by wkau New Member in Splunk Search 08-06-2014 0 7	0	7
Alert when a threshold is met consistently at certain intervals within a time frame I'm having trouble building an alert. I want to get alerted, if during a 4 hour window, an IP has more than 5 blocks ... by tpowell12 Explorer in Splunk Search 08-06-2014 1 1	1	1
How to join people directory csv lookup with VOIP logs to see username? I have VOIP logs that have the cgn and cdn number as format nnnnnnnnnn or nnnnn I have a people directory with teleph... by hartfoml Motivator in Splunk Search 08-06-2014 0 8	0	8
plot time against date in graph Hi everyone, Is it possible to plot time which is in HH:MM format agains date which is in MM/DD/YYYY format . the ho... by usha_nittala New Member in Splunk Search 08-06-2014 0 3	0	3
get source file names containing a specific value without search through every event within I need to get the source names of files that contain a specific value. The search is taking a long time because each ... by splunkmasterfle Path Finder in Splunk Search 08-06-2014 0 7	0	7
interpolating non matching values before correlating two series Hello, We want to produce correlations between two different (timestamp,value) series. We basically want to plot one ... by SunDance Explorer in Splunk Search 08-06-2014 0 2	0	2
How to join data and extract field values as field names? How to change event field values into field name? Event log sample1: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ id, code, message... by splunk_worker Path Finder in Splunk Search 08-06-2014 0 4	0	4
How to convert a dollar amount field with $ sign, commas and decimals to a number so I can do avg or sum, etc.? latest funciton works but avg function does not. I believe splunk is treating my Amount field as a text string. Any ... by bandit Motivator in Splunk Search 08-06-2014 0 5	0	5
How to create a chart showing ticket status by week? Hi all, I am trying to create a dashboard or a graph where I want to show the ticket status by weekly. I am uploading... by kvmanjunath New Member in Splunk Search 08-06-2014 0 4	0	4
Regex help to extract number Hello, My logs contain some sentence like : "2014-07-22 14:47:10,783 INFO [LoggingInterceptor]\|EXIT: CmsXwbDecoding... by splunksogetiht Explorer in Splunk Search 08-06-2014 1 3	1	3
How can i convert String Type Time field(a) to a human readable Date Type Time field(#)? Splunk version 4.3 I want to sort human readable Time Field in Table results. Date Type _time(timestamp) field is s... by joy76 Path Finder in Splunk Search 08-06-2014 1 2	1	2
input monitor scanning too much files and causes Splunk indexing troubles Hi, I have to monitor specific files over a NFS share containing itself thousands of files, this causes troubles to ... by guilmxm Influencer in Splunk Search 08-06-2014 0 8	0	8
Can Splunk index the complete folder? If yes, how can we achieve this? Can Splunk index the complete folder? If yes, how can we achieve this? by kratikaj07 Explorer in Splunk Search 08-06-2014 0 9	0	9
Custom scripts in Splunk Hi, I need to understand that does SPLUNK supports creating our own scripts/java codes to read data from some securi... by viverma5 Explorer in Splunk Search 08-05-2014 1 3	1	3
How does iplocation identify anonymous proxies? We use IpLocation at my company and its performing pretty well. I would like to find out a bit more of how the IpLoca... by bdenes_snap Engager in Splunk Search 08-05-2014 0 2	0	2
splunk db connect - dbquery not accessible Hi, I have a Splunk6 search-head which has DB Connect installed on it. I configured some db connections as admin, an... by a212830 Champion in Splunk Search 08-05-2014 1 3	1	3
How to assign field name area_code to first 3 digits in voip logs and geolocate based on field? My voip logs have a format of xxxxxxxxxx 10 digit number. Two questions: How do I assign a field name of "area_code... by hartfoml Motivator in Splunk Search 08-05-2014 1 1	1	1
Conditional count in stats function I need to do the following: Get a distinct count of serial numbers where a selected date falls within a particular r... by willial Communicator in Splunk Search 08-05-2014 1 2	1	2

Get Updates on the Splunk Community!

Developer Spotlight with Denis Gladkikh

From Splunk Engineer to Kubernetes App Builder Denis GladkikhWhat happens when a lifelong developer turns a ...

Governing Enterprise AI, Bringing Cisco Telemetry Home, and More from Splunk Lantern

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Splunk Search

[indexer] Streamed search execute failed because: User 'nobody' could not act as:

Ignore milliseconds of _time when grouping

mvindex not working trying to extract time of firewall events

Query to return top ten users and the applications they connect to?

How to calculate timespan of a field value as session-duration only for a specific sourcetype ?

Grouping events by time range relative to the current time, using calculations with eval statements

Pivot search won't work if it's accelerated, but works fine when acceleration is removed

how to extract total count for different fields

Alert when a threshold is met consistently at certain intervals within a time frame

How to join people directory csv lookup with VOIP logs to see username?

plot time against date in graph

get source file names containing a specific value without search through every event within

interpolating non matching values before correlating two series

How to join data and extract field values as field names?

How to convert a dollar amount field with $ sign, commas and decimals to a number so I can do avg or sum, etc.?

How to create a chart showing ticket status by week?

Regex help to extract number

How can i convert String Type Time field(a) to a human readable Date Type Time field(#)?

input monitor scanning too much files and causes Splunk indexing troubles

Can Splunk index the complete folder? If yes, how can we achieve this?

Custom scripts in Splunk

How does iplocation identify anonymous proxies?

splunk db connect - dbquery not accessible

How to assign field name area_code to first 3 digits in voip logs and geolocate based on field?

Conditional count in stats function

Developer Spotlight with Denis Gladkikh

Governing Enterprise AI, Bringing Cisco Telemetry Home, and More from Splunk Lantern

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation