Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk Search
Splunk Search
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Splunk Community,
I’d like to be able to count the number of events I have per SourceFile when my sourcetype is Lo...
by
MichaelCohen829
Explorer
in
Splunk Search
06-19-2014
|
0
|
4
| ||
|
|
There is a log file which has events in the following format 0|10|434d5532|xxxxxx34|2014/06/06 04:47:54|819670|3|2014...
by
Mubarish
Path Finder
in
Splunk Search
06-20-2014
|
0
|
1
| ||
|
|
Hi all,
I'm having difficulty trying to create a total_cpu field. If I map a single variable to it, this works fin...
by
alekksi
Communicator
in
Splunk Search
06-20-2014
|
0
|
2
| ||
|
I can write a search like this:
| dbquery "DB1" "SELECT A.* AOS.* FROM Assets A JOIN AssetOSs AOS ON A.AssetOSID =...
by
hartfoml
Motivator
in
Splunk Search
06-19-2014
|
0
|
5
| ||
|
Hi [index=main host=syslog status="deny"| top src_IP | table src_IP ]:::::this is my sub search. and it will produce ...
by
thambisetty
SplunkTrust
in
Splunk Search
06-19-2014
|
0
|
6
| ||
|
|
Hi, we're trying to find out windows XP users with some rules:
if mod=syn, get client ip (cli)if mod=syn+ack, get ...
by
stwong
Communicator
in
Splunk Search
06-17-2014
|
0
|
6
| ||
|
|
I am attempting to perform a search time field extraction via the rex command. I use the default field of _raw and gi...
by
dkichline
Engager
in
Splunk Search
06-19-2014
|
0
|
3
| ||
|
|
This is a recurring problem for me in SPL. I want to assign some stats command results to a variable name and pop tha...
by
proletariat99
Communicator
in
Splunk Search
06-19-2014
|
0
|
1
| ||
|
|
i have 50 indexes and i want to find out the last most recent event for each host in each index.
i can do this for...
by
robf
Path Finder
in
Splunk Search
06-16-2014
|
1
|
6
| ||
|
|
HI, I have data like below, Source_Address Event_Code Time User 10.10.10.010 4625 6/17/2014 00:12:26 Balaji 10.10.10....
by
thambisetty
SplunkTrust
in
Splunk Search
06-17-2014
|
0
|
14
| ||
|
|
Hi, I have a query that is meant to compare longitudinal count of an event of a given day (e.g. today) with historica...
by
kundeng
Path Finder
in
Splunk Search
06-13-2014
|
0
|
3
| ||
|
|
Dear All,
I have oracle error data i need to extract some fields from it here is the data
[EntID: ] 17-Jun-2014...
by
gajananh999
Contributor
in
Splunk Search
06-19-2014
|
0
|
6
| ||
|
In the below stanzas , both are having same source-type names, how the priority will be in assigning sourcetype?
H...
by
splunker12er
Motivator
in
Splunk Search
06-19-2014
|
0
|
1
| ||
|
|
Search query: list the last known user (userid) on each host.
sourcetype=syslog source=/var/log/secure "pam_unix(s...
by
ayenumula
Explorer
in
Splunk Search
06-17-2014
|
2
|
4
| ||
|
Hi,
I am in great troubles with a multilines events i'm trying to analyse, and associated required regex to extrac...
by
guilmxm
Influencer
in
Splunk Search
06-12-2014
|
0
|
8
| ||
|
|
Hey guys, is it possible to run an eval function in the search bar without piping a search to it?
In an attempt to...
by
pfernandez133
Explorer
in
Splunk Search
06-18-2014
|
0
|
4
| ||
|
|
I'm using splunk 6.0.3
When I search for: "has been closed after being in use" I have a series of hits like shown ...
by
fziegler
New Member
in
Splunk Search
06-18-2014
|
0
|
2
| ||
|
|
I will try my best to formulate my question as I couldn't find anything similar asked already.
I am trying to disp...
by
ateterine
Path Finder
in
Splunk Search
06-16-2014
|
0
|
9
| ||
|
All,
I want to create a search that will return the count of events over the last 5 minutes, 30 minutes, hour, 6 h...
by
bruceclarke
Contributor
in
Splunk Search
06-18-2014
|
1
|
4
| ||
|
Hi,
I have a request to trend new users on a web application by month over a two year period and produce this repo...
by
DanielFordWA
Contributor
in
Splunk Search
06-13-2014
|
0
|
2
| ||
|
|
Hi All Here are my sample logs
_time prod-server-1234 web_access 10.11.12.13 "GET /json/some_search?asasa HTTP/1.1...
by
splunk_worker
Path Finder
in
Splunk Search
06-17-2014
|
1
|
2
| ||
|
|
Hi, i'm using splunk 6.1.1
I made this si- search and scheduled it to run "every hour" at period -1h@m to "now"
...
by
ejpulsar
Path Finder
in
Splunk Search
06-16-2014
|
0
|
6
| ||
|
|
I'm trying to do
"[Simple text search]" | top limit=50 count
To so the 50 highest occurrences of my search for...
by
letharion
Engager
in
Splunk Search
06-18-2014
|
0
|
1
| ||
|
|
Hello
I am running the following search with the end aim of using the 'map' functionality to plot the results but ...
by
ahogbin
Communicator
in
Splunk Search
06-17-2014
|
0
|
1
| ||
|
|
How to rename the _time to TIME in the below query:
|inputlookup currentesdorders.csv | dedup ORDER_NUMBER | where...
by
webnair
Explorer
in
Splunk Search
06-17-2014
|
2
|
3
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Become An Expert
Top Labels
-
administration
3 -
alert action
3 -
alert condition
2 -
Analytics Workspace
2 -
authentication
1 -
chart
941 -
Classic dashboard
1 -
configuration
2 -
correlation search
1 -
count
997 -
Dashboard Studio
3 -
data
3 -
data model
1 -
development
6 -
distributed search
1 -
drilldown
1 -
email
1 -
eval
2,588 -
field extraction
2,000 -
fields
2,042 -
host
1 -
index
4 -
indexer
2 -
inputs.conf
1 -
intermediate forwarder
1 -
introduction
5 -
join
1,050 -
JSON
2 -
Linux
2 -
login
1 -
lookup
1,540 -
metadata
305 -
monitoring console
2 -
other
80 -
panel
2 -
PDF
1 -
Python
1 -
regex
1,490 -
report acceleration
2 -
rex
1,242 -
SAML
1 -
saved search
5 -
scheduled search
4 -
scripted input
1 -
search
1 -
search head
3 -
search job inspector
670 -
search peer
1 -
simple XML
1 -
source
1 -
sourcetype
4 -
Splunk Web Framework
1 -
splunk-assist
1 -
splunkd
1 -
stats
3,522 -
subsearch
1,704 -
summary indexing
4 -
table
1,733 -
time
1 -
timechart
1,150 -
transaction
449 -
transforms.conf
1 -
troubleshooting
8 -
tstats
561 -
universal forwarder
5 -
using Splunk Cloud
2 -
using Splunk Enterprise
13 -
Windows
3
- « Previous
- Next »
Get Updates on the Splunk Community!
A Prelude to .conf25: Your Guide to Splunk University
Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...
4 Ways the Splunk Community Helps You Prepare for .conf25
.conf25 is right around the corner, and whether you’re a first-time attendee or a seasoned Splunker, the ...
Enhance Your Splunk App Development: New Tools & Support
UCC FrameworkAdd-on Builder has been around for quite some time. It helps build Splunk apps faster, but it ...
