Splunk Search

Community Activity

Creating operacional intelligence in xml file. Hey guys, I am writing a script to colect data from social media and generate a XML file. I would like to index the... by dfigurello Communicator in Splunk Search 05-30-2014 0 1	0	1
Dynamic Lookup issue By trying to run a python script for a dynamic lookup I get the following error Error in 'lookup' command: The look... by dirkbaumann Explorer in Splunk Search 05-30-2014 1 3	1	3
metadata vs stats count When running \| metadata index=myindex type=sources, I see 301785788 for my totalCount for one of my sources (let's ca... by sloshburch Ultra Champion in Splunk Search 05-30-2014 0 2	0	2
transaction startswith 1, endswith multiple Hi all, simple question I hope. I have a system that has one starting event with multiple outputs and I want to find ... by leea11 Engager in Splunk Search 05-30-2014 0 5	0	5
Top 10 IP along w/ top 4 ports Hello Splunkers, I'm looking to build a search w/ chart that tracks top 10 source IP's in a firewall but also a list... by lbogle Contributor in Splunk Search 05-29-2014 0 7	0	7
Dropdown Not Populating I'm trying to populate a dropdown box with this search which returns the values I would expect, but the dropdown is n... by CannonT Engager in Splunk Search 05-29-2014 0 1	0	1
Need help with rex Hi, i am using this expression - base search \| rex field=uri "better\?q=(?[^&]+)$" and i was expecting to return e... by xvxt006 Contributor in Splunk Search 05-29-2014 0 4	0	4
Unique Port Count Per IP I'm trying to find the number of unique ports accessed by IP's, by count. i.e. IP 8.8.8.8 connected to 5 unique port... by ThisIsTom New Member in Splunk Search 05-29-2014 0 3	0	3
Splunk returns some queries much faster than others I am working with access_combined_wcookie data (essentially Nginx log files) in Splunk. An example of a record is bel... by mgimelfarb Explorer in Splunk Search 05-29-2014 3 7	3	7
How to get unique patterns Hi, we would like to get unique query string patterns so that we can cache them at Akamai. i have written a query re... by xvxt006 Contributor in Splunk Search 05-29-2014 1 10	1	10
filter windows application event by Source I am using windows TA app to get events from windows event log. The windows events are coming inside Indexer. But i ... by ajaysamantbms Explorer in Splunk Search 05-29-2014 0 1	0	1
How to reassemble bidirectional flows with transaction I need to assemble transactions where, depending on the direction of the traffic, the "source" might actually be the ... by emf1123 New Member in Splunk Search 05-29-2014 0 3	0	3
how to get the total sum based on specific field I have a query which runs over a month period which lists all users connected via VPN and the duration of each connec... by ikcresswell Explorer in Splunk Search 05-29-2014 2 5	2	5
Combination of stat and lookup? Hi! I would like have some advice with the search command. If I have 3 records like below and each record contains ... by yuwtennis Communicator in Splunk Search 05-29-2014 0 4	0	4
How to use the chart command optional argument "format" hi, i'm looking at the documentation (http://docs.splunk.com/Documentation/Splunk/6.1.1/SearchReference/Chart) and I'... by klee310 Communicator in Splunk Search 05-29-2014 0 4	0	4
Stop search after events matched Hi! I would like to ask question related to following thread. http://answers.splunk.com/answers/8107/return-only-th... by yuwtennis Communicator in Splunk Search 05-29-2014 0 1	0	1
Count of hosts I have a search: index="proxy" ([\|inputlookup proxy.csv\|rename site as query \| fields query] ) NOT www.google.com \| ... by Armyeric Path Finder in Splunk Search 05-28-2014 0 2	0	2
REX / REGEX question Hi all, I am new to splunk. I am trying to extract a field from a line in a record where the field will always begin ... by dbrown0412 Engager in Splunk Search 05-28-2014 0 11	0	11
Percentage in range - numeric search? I have a field extraction that comes back with the literal values of 'X%'. Note that the % is part of the value retur... by timbCFCA Path Finder in Splunk Search 05-28-2014 0 4	0	4
replace with a where clause on a null field I seem to be having a syntactical error that I can't resolve in splunk 6.1 when I have about 3 fields that may have u... by mjones414 Contributor in Splunk Search 05-28-2014 0 4	0	4
use Rex to extract second IP address from message text I am trying to extract the IP address from the field below, I can extract the first but am not sure how to extract th... by ikcresswell Explorer in Splunk Search 05-28-2014 0 3	0	3
host regex does not seem to work Hello all, I am new to Splunk and I am currently evaluating 6.1. We collect logs from a bunch of devices (routersan... by stefan_radovano Explorer in Splunk Search 05-28-2014 0 5	0	5
Clarification on the search in Form Hi, A form was created using simple XML containing two components as two text boxes named as Filename and Status.When... by Jananee_iNautix Path Finder in Splunk Search 05-28-2014 0 3	0	3
How to filter data quickly Hi! I would like to get advice for search command. I have a search that looks like below. index=A \| MySearch1 ....... by yuwtennis Communicator in Splunk Search 05-27-2014 0 7	0	7
Lexicographic comparison of version strings? I have version strings in my log output, and I'd like to filter on these, like \| where version < 2.3.5 But Splunk ... by waisbrot Engager in Splunk Search 05-27-2014 1 1	1	1

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Splunk Search

Creating operacional intelligence in xml file.

Dynamic Lookup issue

metadata vs stats count

transaction startswith 1, endswith multiple

Top 10 IP along w/ top 4 ports

Dropdown Not Populating

Need help with rex

Unique Port Count Per IP

Splunk returns some queries much faster than others

How to get unique patterns

filter windows application event by Source

How to reassemble bidirectional flows with transaction

how to get the total sum based on specific field

Combination of stat and lookup?

How to use the chart command optional argument "format"

Stop search after events matched

Count of hosts

REX / REGEX question

Percentage in range - numeric search?

replace with a where clause on a null field

use Rex to extract second IP address from message text

host regex does not seem to work

Clarification on the search in Form

How to filter data quickly

Lexicographic comparison of version strings?

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Event Series: Telemetry Pipeline Management

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation