Splunk Search

Community Activity

Searching for punct field values As the title reveals, I am trying to search the punct field for specific values. The punct field is naturally tricky... by landen99 Motivator in Splunk Search 05-02-2014 0 5	0	5
How to output matching fields Hi, I have indexed few records from my DB into Splunk & an log file is also indexed into Splunk. There is one matchi... by harshavrath Contributor in Splunk Search 05-02-2014 0 7	0	7
Response Time search with a additional calculation Hi there Splunkers I need some assistance with a search. We are calculating the response time between transactions ... by denisevw Path Finder in Splunk Search 05-02-2014 0 5	0	5
Plot Avg, Std Dev and Data on the same Chart Hi, I realize there are a number of ways to approach putting multiple values in a time chart, but I'm not sure how be... by proletariat99 Communicator in Splunk Search 05-01-2014 1 2	1	2
iplocation is available in version 5? According to this link, iplocation command is available in version 5.0. I'm not sure if this is incorrect or if my i... by the_wolverine Champion in Splunk Search 05-01-2014 0 3	0	3
get total results per client per item for the last 7 days I would like to create a panel that displays in a table a historical records of counts for the last 7 days. The total... by jdepp Path Finder in Splunk Search 05-01-2014 0 6	0	6
visualization of iis logs hey! i indexed the iis logs. when i type in the search field sourcetype=iis, i see a lot of information in text form.... by jimmyfallon New Member in Splunk Search 05-01-2014 0 4	0	4
Get the last Json Inserted document I have an Index where i store huge Json documents. I want the last document inserted which contains the latest state.... by sibbsnb Path Finder in Splunk Search 05-01-2014 0 3	0	3
column chart : How can we create a chart with three fields? Hello, I have a question about a timechart creation. I want to create a columns chart. My search is : tag::source="... by LauraBre Communicator in Splunk Search 05-01-2014 0 3	0	3
regex difficulty with host / path discrimination I have a log file that has the host as either an IP address OR a FQDN. This is easy, right. Nope. The format can b... by tyronetv Communicator in Splunk Search 05-01-2014 0 3	0	3
sum function with conditions Hey there, I am trying to get stats for one of our OpEx metrics Working query : index=summary source="c:\\users\\nj... by Raghav2384 Motivator in Splunk Search 05-01-2014 0 5	0	5
Joining Searches for Authentication Times So I have two searches; one for the client_vpn_asa and one for the nac, they both require regex: index=client_vpn_as... by dsmeerkat Explorer in Splunk Search 05-01-2014 0 4	0	4
Increase the number of values shown for selected fields Is there a way to increase the number of values shown for selected fields from 10 to 20-25? A customer has put in a r... by theouhuios Motivator in Splunk Search 05-01-2014 0 3	0	3
Transaction not showing some events in table format I am using Transaction command to group events in one line and want to see this in a table format. Have the "order_n... by jinal24 New Member in Splunk Search 04-30-2014 0 1	0	1
limit results by 10 events per day in one month timeframe Hi- I have this search query: "source="/prod/splunkforwarder/bin/scripts/jrexpiry.sh" npw.gov.se" and my time frame i... by Isaias_Garcia Path Finder in Splunk Search 04-30-2014 0 1	0	1
How to execute a shell script kept in app's bin folder using a dashboard? I have a requirement to execute a script (does file cleanup) to be executed from a dashboard button (so as to avoid l... by somesoni2 Revered Legend in Splunk Search 04-30-2014 0 1	0	1
updrate SPLUNK 6.0 to 6.0.3 Steps to perform upgrade? by laurie_maginn New Member in Splunk Search 04-30-2014 0 1	0	1
Timestamp splitted in log files Hi all, I'm trying to extract the timestamp from a crappy unstructured logs. Every event is one line with 300 charact... by bizza Path Finder in Splunk Search 04-30-2014 0 10	0	10
Troubling json extraction I can't for the life of me figure this out. There seem to be examples all over and none of them address this. I hav... by Cuyose Builder in Splunk Search 04-30-2014 0 5	0	5
how to take the values from nth field Hi all, Below is my search... source="computer_status_export_SEP12_Mar27.csv" \| dedup "Computer Name","MAC Address1" ... by thambisetty SplunkTrust in Splunk Search 04-30-2014 0 9	0	9
HTML Dashboard - Clarification on the search A HTML Dashboard is created that has five textboxes and one search button.When the search button is clicked,the value... by Jananee_iNautix Path Finder in Splunk Search 04-30-2014 0 1	0	1
List of default working extractions in Splunk like "\| extract access-extractions" Hi All, So I was looking at some unextracted web log data, found this link: http://docs.splunk.com/Documentation/Spl... by Pierceyuk Path Finder in Splunk Search 04-30-2014 0 3	0	3
_time from filename using Eval Hi My file name is like ABC20140321.csv I want splunk to read _time value from this file name. I tried to edit datet... by SplunkBaby Explorer in Splunk Search 04-30-2014 0 5	0	5
eval if isnull hope fill other values Hi: My weburl sometim is null, i hope if weburl is null then weburl1 fill to weburl. I'm try "eval n=if(isnull(hostn... by chengyu Path Finder in Splunk Search 04-30-2014 0 3	0	3
Failed Logins I am observing the failed logins of a user and it is getting locked quite frequently morning between 01:30 AM to 02:3... by udayk1 Path Finder in Splunk Search 04-29-2014 0 3	0	3