Splunk Search

Splunk Search
Community Activity
SubtotalAMG
Hey All,  So I'm relatively new to Splunk. I have a csv file that has multiple computers and I've created a dashboard...
by SubtotalAMG Loves-to-Learn Lots in Splunk Search 06-08-2023
0 4
0
4
Ant1D
Hi, I have asked a similar question already but have not had an answer so I thought I would try again because I belie...
by Ant1D Motivator in Splunk Search 06-08-2023
2 13
2
13
john-de
My log messages format is like this: 2023-01-01 01:02:40 INFO - Thread-1 com.example.ClassName : this is log A2023-01...
by john-de Observer in Splunk Search 06-08-2023
0 4
0
4
jialiu907
I am currently trying to join two search queries together through the appendcols command in order to display two line...
by jialiu907 Path Finder in Splunk Search 06-08-2023
0 5
0
5
john8745
Hi, dear splunkers, actually im new to splunk and I need to write a query in order to make a report. So, from a logs ...
by john8745 New Member in Splunk Search 06-08-2023
0 1
0
1
scottj1y
Whenever my users try to export search results via the "Action" menu they get the following error message:     <respo...
by scottj1y Path Finder in Splunk Search 06-08-2023
0 0
0
0
TorbinIT
Hello!I've got a search that I'm working on. I've been asked to integrate the results of a lookup table into that sea...
by TorbinIT Path Finder in Splunk Search 06-08-2023
0 3
0
3
POR160893
Hi, My initial Splunk query was:index="ABC" sourcetype="DEF"| stats dc(fruit) AS "Fruits" by Diet| sort -"Fruits"Howe...
by POR160893 Builder in Splunk Search 06-08-2023
0 0
0
0
sujoybose77
Hi,I have two source types CardMember_cycle_data (with card member cycle date info) and CardMember_Demographic_data (...
by sujoybose77 Explorer in Splunk Search 06-08-2023
0 1
0
1
Imhim
Hi,  So i have this search:        | tstats prestats=true count WHERE index=*_ot (source="*sgre*" OR o_wp="*sgre*") A...
by Imhim Explorer in Splunk Search 06-08-2023
0 5
0
5
haripotu
Index = prod-x7 host IN ( 12345678) sourcetype=“Wineventlog” Eventcode=“19” |eval patching = if(eventcode =“19”, “ok”...
by haripotu Loves-to-Learn Everything in Splunk Search 06-07-2023
0 3
0
3
akshayinnamuri
Hi I have sample like this Source                                                                      Sample time fr...
by akshayinnamuri Loves-to-Learn Lots in Splunk Search 06-07-2023
0 1
0
1
Graham_Hanningt
Background to this question I am the developer of a Splunk app, recently published on Splunkbase, that is intended f...
by Graham_Hanningt Builder in Splunk Search 06-07-2023
1 4
1
4
Alanmas
Hello!I am trying to figure out how to convert an table query into a histogram using timechart(), but I am having iss...
by Alanmas Explorer in Splunk Search 06-07-2023
0 4
0
4
amitrinx
Hi Team, I have a field "duration". There are lot of APIs for which this field is populatedcan i use the Detect outli...
by amitrinx Explorer in Splunk Search 06-07-2023
0 3
0
3
usernamejpblais
Hello, I have 2 index, one that received about 40 millions records per day and the other one about 80% of the first i...
by usernamejpblais Engager in Splunk Search 06-07-2023
0 4
0
4
akshaycloud11
Need to compare 2 KV files and report the missing records of File1 in File2File 1: Row#roll numbersName Registration ...
by akshaycloud11 Loves-to-Learn Lots in Splunk Search 06-07-2023
0 2
0
2
thanchen
Here is the document, but how?https://docs.splunk.com/Documentation/Splunk/8.2.6/Search/Changetheformatofsubsearchres...
by thanchen Explorer in Splunk Search 06-07-2023
0 10
0
10
Dayalss
Hello, I have a search query which list users and there email addresses as the result. Now I want to send individual ...
by Dayalss Engager in Splunk Search 06-07-2023
0 2
0
2
RanjiRaje
Hi all, I need your help in validating my query. Please help.. in indexA , fields are: user, login(user=firstname, lo...
by RanjiRaje Explorer in Splunk Search 06-07-2023
0 4
0
4
ssuluguri
Hi Team I am getting below warning notification from indexers , can someone help how to clear this .   "Search peer X...
by ssuluguri Path Finder in Splunk Search 06-06-2023
1 3
1
3
philh
Hi, I have a query where I'm extrapolating type based on a conditional then counting by type. This works great when t...
by philh Explorer in Splunk Search 06-06-2023
0 4
0
4
atebysandwich
|inputlookup lookup1,csv |fields IP Host_Auth |lookup lookup2.csv IP output Host_Auth as Host_Auth.1 Some of the fiel...
by atebysandwich Path Finder in Splunk Search 06-06-2023
0 1
0
1
jialiu907
I am looking to display only one statistic row being named Total with the count of all of the hosts added up, which s...
by jialiu907 Path Finder in Splunk Search 06-06-2023
0 3
0
3
Nadeem
index=web sourcetype=access_combined | transaction _time,clientip, JSESSIONID,action How do I Modify my search to dis...
by Nadeem New Member in Splunk Search 06-06-2023
0 3
0
3
Get Updates on the Splunk Community!

Casting Call: Compete in Cyber Games

Lights, Camera, SecOps: Apply to Compete in Cyber Games     Think you have what it takes to beat the clock? ...

Data Management Digest – June 2026

Welcome to the June 2026 edition of Data Management Digest! This month’s update is short and sweet, with a ...

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them.    As ...