Splunk Search

Community Activity

Percentage in range - numeric search? I have a field extraction that comes back with the literal values of 'X%'. Note that the % is part of the value retur... by timbCFCA Path Finder in Splunk Search 05-28-2014 0 4	0	4
replace with a where clause on a null field I seem to be having a syntactical error that I can't resolve in splunk 6.1 when I have about 3 fields that may have u... by mjones414 Contributor in Splunk Search 05-28-2014 0 4	0	4
use Rex to extract second IP address from message text I am trying to extract the IP address from the field below, I can extract the first but am not sure how to extract th... by ikcresswell Explorer in Splunk Search 05-28-2014 0 3	0	3
host regex does not seem to work Hello all, I am new to Splunk and I am currently evaluating 6.1. We collect logs from a bunch of devices (routersan... by stefan_radovano Explorer in Splunk Search 05-28-2014 0 5	0	5
Clarification on the search in Form Hi, A form was created using simple XML containing two components as two text boxes named as Filename and Status.When... by Jananee_iNautix Path Finder in Splunk Search 05-28-2014 0 3	0	3
How to filter data quickly Hi! I would like to get advice for search command. I have a search that looks like below. index=A \| MySearch1 ....... by yuwtennis Communicator in Splunk Search 05-27-2014 0 7	0	7
Lexicographic comparison of version strings? I have version strings in my log output, and I'd like to filter on these, like \| where version < 2.3.5 But Splunk ... by waisbrot Engager in Splunk Search 05-27-2014 1 1	1	1
Timechart avg values looking odd. I see values like this when I do \|table _time Value . 2014-05-26 16:30:28 48.438430017856341 2014-05-26 16:30:28... by theouhuios Motivator in Splunk Search 05-27-2014 0 7	0	7
Calculating Kill / Death ratio in a game I'd like to calculate K/D ratio for the game Insurgency. I have two searches that can calculate #kills and number of... by khourihan_splun Splunk Employee in Splunk Search 05-27-2014 3 8	3	8
Return values from map command? So I have a function which takes a certain amount of time (timer_value) and I'm trying to create an alert that trigge... by silentttone New Member in Splunk Search 05-27-2014 0 4	0	4
Sort fields by date Hello There , Basically I have some dates in this format : 01/13 700 02/13 600 ... 01/14 500 I use t... by baranova New Member in Splunk Search 05-27-2014 0 2	0	2
Grouping the data row based HI All, I need to group the data row based my table looks like this. Table: DBName Region Dag count DB1 ... by rsathish47 Contributor in Splunk Search 05-27-2014 0 2	0	2
Database lookup not returning all matches I have created a database lookup and have changed the maximum matches in the lookup defintion to 100, but only 1 matc... by sc0tt Builder in Splunk Search 05-27-2014 0 4	0	4
XPATH functions Hi there, Can we use the XPATH functions like fn:distinct-values(//NodeName) in Splunk XPATH command. I tried it but... by ramanjain1983 Path Finder in Splunk Search 05-27-2014 0 1	0	1
How to extract event raw size just like linecount I frequently use the length of the raw data - more often than readily extracted fields punctuation and linecount I d... by tpflicke Path Finder in Splunk Search 05-27-2014 1 2	1	2
Transaction function not working with dbquery Hi All, I tried using the transaction function on the output of a DB Connect \|dbquery and it keeps showing no result... by ManusMenon Explorer in Splunk Search 05-27-2014 0 2	0	2
Eval search help... can't seem to get it right. Hello, I am somewhat new to splunk but I am having issues creating a table for a search I am doing and I need assist... by kj384g New Member in Splunk Search 05-26-2014 0 3	0	3
How to improve django template search performance Created a django app to display some transaction history detail in a tabular format. But when the template is accesse... by vgnulinux New Member in Splunk Search 05-26-2014 0 4	0	4
Creating new Field Extractions I have a set of log data in Splunk Search app contained in source=sampledata,sourcetype=sample. field1,field2,field3 ... by misteryuku Communicator in Splunk Search 05-23-2014 0 6	0	6
Create one field from many, even when some fields don't exist Ok, so I understand how to eval something like this: index=mystuff \| eval NewBigField=firstname + "-" + lastname + ... by thisissplunk Builder in Splunk Search 05-23-2014 0 6	0	6
streamstats confusion Having some trouble with streamstats. I need to be alerted, once, at the time when a logical drive becomes less th... by a_splunk_user Path Finder in Splunk Search 05-23-2014 0 8	0	8
Clarification on xmlkv command Hi, I have a set of logs in xml format.Since the logs are xml formatted xmlkv command was used .As per the property... by Jananee_iNautix Path Finder in Splunk Search 05-23-2014 0 3	0	3
Is it possible to dedup data during indexing? I'm feeding splunk a large quantity of historical gzipped syslog files for many, many different machines through a si... by tylr Engager in Splunk Search 05-23-2014 1 2	1	2
Splunk sub search I have a splunk query to combine 2 different results. index=applogs sourcetype=appsource "performance metrics" \| s... by Sriram Communicator in Splunk Search 05-22-2014 1 3	1	3
UF sending data in LB fashion I have following config in my output.conf [tcpout] defaultGroup = productionSplunk1, productionSplunk2 [tcpout:pro... by nikhilmehra79 Path Finder in Splunk Search 05-22-2014 0 5	0	5