Splunk Search

Community Activity

Lookup in multiple indexes and compare I have been searching for this for a bit now and haven't come up with anything just yet. I am trying to take a list o... by chrishatfield21 Path Finder in Splunk Search 04-23-2014 0 4	0	4
Add hyperlink column to SimpleResultsTable Hi everyone, I have to add a column containing specific hyperlinks to a SimpleResultsTable. This table has the follow... by mguacci New Member in Splunk Search 04-23-2014 0 3	0	3
how to sum of count of values of fields? Hi, I have a search and output. source="risks_repor.csv"\| dedup "Computer Name" \| search D- Output: values ... by thambisetty SplunkTrust in Splunk Search 04-23-2014 0 3	0	3
CPU Perfmon Averages by Host I'm trying to list all hosts that breach a set threshold average on CPU load. Here is my query which returns no resul... by hagjos43 Contributor in Splunk Search 04-23-2014 0 1	0	1
When creating data type, Splunk fails to find the correct timestamp to use. I'm trying to make a datatype for a specific kind of CSV data seen by Splunk. Here's an example of the individual da... by teward001 Path Finder in Splunk Search 04-23-2014 0 8	0	8
How can I search events occured in last one hour Hi, Is there any command for filtering out the search results that occured in last 24 hrs. Please help. by Ravi_c New Member in Splunk Search 04-23-2014 0 4	0	4
Is comma ignored during a Splunk search? Hello Everyone, I noticed that commas are not necessary when searching as the following would give the same results.... by filmon6402e Explorer in Splunk Search 04-23-2014 0 4	0	4
Error with subsearch I am new to creating subsearches and have completed a few of them successfully. This latest example is causing me a b... by DonDandrea Path Finder in Splunk Search 04-23-2014 0 5	0	5
extract (kv) only certain fields, or use column as headers in transpose I have log data that looks like this key1=val1 key2=val2 key3=val3 The names of the keys is unknown and could be ... by sberry2a Engager in Splunk Search 04-23-2014 0 5	0	5
timeformat Hi, Ny log has a timeformat like this -- 4/22/14 12:59:56.000 AM. How can I make the display like 4/22/14 00:59:56.... by shangshin Builder in Splunk Search 04-22-2014 0 4	0	4
Show min/max of one column with top/count The data I have looks like this: Time Shape Color 12:00 square green 12:01 circle blue 12:02 square bl... by atamido New Member in Splunk Search 04-22-2014 0 2	0	2
Timechart count of -30d rolling window I'm looking to create a timechart of counts for a field where there is one bucket per day, and each bucket spans back... by hoiby Explorer in Splunk Search 04-22-2014 0 3	0	3
Condensing multiple table rows into one row I'm working with a database as my source (through DB Connect) and performing a bunch of different evals. When I go to... by willial Communicator in Splunk Search 04-22-2014 0 3	0	3
SimpleResultsTable page number When search results are displayed via a table, the following appears when the number of result rows exceeds the set l... by Ant1D Motivator in Splunk Search 04-22-2014 1 3	1	3
lookup doubts Hi, Need info on why lookup is necessary what is the use of it. I have a scenario under which i have indexed 30 rec... by harshavrath Contributor in Splunk Search 04-22-2014 0 9	0	9
How to group disparate data in stats (Interface Names and Routers) Here is my sample data: CoreRouter peer uplink speed -- Core1.stl gw1.stlouis f... by albyva Communicator in Splunk Search 04-22-2014 0 3	0	3
Using subsearches to narrow down main search to a specific source Hi, Say I'm collecting crash reports into log A (I'm extracting the PID using rex) and the activity leading to said ... by anz_leycurav Explorer in Splunk Search 04-22-2014 0 3	0	3
Lookup Table作成について Query上でoutputlookupコマンドを利用して作成したlookup csvファイルは、自動的にSettings > Lookups > Lookup table filesに生成されると認識していたのですが、実際にcsvファ... by appleman Contributor in Splunk Search 04-22-2014 0 2	0	2
Multiple diff commands in same search I am using diff to compare two results from a search. Everything works great if my search only returns two results. ... by JWBailey Communicator in Splunk Search 04-21-2014 0 1	0	1
Search query requirements Is it possible to require fields in a search query for specific users/roles? Non-power users or admins, they must ha... by bleung93 Path Finder in Splunk Search 04-21-2014 0 4	0	4
Colour the rows of dashboard Hi, I have created a dashboard in search named "dashboard_title", which shows the output result as follows: I want... by harshal_chakran Builder in Splunk Search 04-21-2014 0 3	0	3
update search head & indexer to 6.0.3 but not forwarders? I would like to update my search head and indexer (ver. 6.0 both) to version 6.0.3. Do I need to update all of my fo... by jollyjackster New Member in Splunk Search 04-21-2014 0 2	0	2
Plottng a value (cumulative) over time. Hi: I am feeding in Accounting data from my network equipment. This allows me to see what current active sessions I ... by matthewceroni New Member in Splunk Search 04-21-2014 0 1	0	1
Microsoft DNS debug logs. Massaging log format. I have sending DNS debug log from forwarder on Windows 2003 to Splunk indexer: The DNS names in the log appear like ... by ageld Path Finder in Splunk Search 04-21-2014 1 2	1	2
What does it mean the difference between "phoneHomeIntervalInSecs" and "handshakeRetryIntervalInSecs" ? Hi Splunkers, I cannot understand the difference between "phoneHomeIntervalInSecs" and "handshakeRetryIntervalInSecs... by sunrise Contributor in Splunk Search 04-21-2014 0 1	0	1