Splunk Search

Community Activity

Select the Top 1 from a set of TopN Using the Splunk query language how would be a splunk query that returns the Top 1 from a set of Top N? Data set sam... by lpolo Motivator in Splunk Search 03-29-2014 0 6	0	6
Suggestion: Enabling connectivity to SQlite I'm not sure if this is the correct way to put a suggestion. But it would be great to have Splunk DBConnect with SQli... by koshyk Super Champion in Splunk Search 03-29-2014 0 2	0	2
Summary incorrect on search page The 'Search' page, which lists the number of events, the oldest and latest event is not accurate. Can anyone tell m... by splunkranger Path Finder in Splunk Search 03-29-2014 0 7	0	7
Lost on ASA syslog config. I have configured the ASA to syslog directly to my splunk server(low volume) and I have set up to receive syslog on U... by isworks New Member in Splunk Search 03-28-2014 0 1	0	1
combining distinct count and count in one table I have two indexers that are being load balanced. I am interested to see the distribution of events from each host o... by JWBailey Communicator in Splunk Search 03-28-2014 0 3	0	3
Find results based on field value of 2 events I have a logfile in the following format: [2014-27-03 20:57:15.875 CST] [receivedSmsFileLogger] - message = "Yes", m... by carljohan Path Finder in Splunk Search 03-28-2014 0 5	0	5
Events “data” field is the same for all events collected. Hi, splunkers! Some strange search results make me stuck. There is have a Splunk cluster in customer’s environment (s... by ribentrop Explorer in Splunk Search 03-27-2014 0 2	0	2
literal * in search? Is it possible to search for a literal * character? If I had a string in a log that read "hi*there", and I wanted to ... by caphrim007 Path Finder in Splunk Search 03-27-2014 6 7	6	7
Detect deviations over historical query I have a query that looks like: index=proxy filter_category="Blocked" \| eval hrmarker=strftime(_time, "%H") \| eval d... by __________o7___ New Member in Splunk Search 03-27-2014 0 1	0	1
Group together different fields found on different lines, based on a common field Hello, I would like to group together different fields found on different lines, based on a common field that is fo... by RecoMark0 Path Finder in Splunk Search 03-27-2014 0 4	0	4
problem with addcoltotals Hi, I have a file like : XXXX 20 YYYY 40 ZZZZ 60 I am running a query ....\|addcoltotals I am getting : XXXX 20 Y... by abhayneilam Contributor in Splunk Search 03-27-2014 0 3	0	3
ask compatibility with R60, R65 and R75.20 Dear Support, Is the current version are also compatible with Check Point R60, R65 and R75.20 platform? Thanks, Wen... by wendy_novandi New Member in Splunk Search 03-27-2014 0 1	0	1
A great Charting Problem! I do not understand why Im currently having this problem, I have never had this problem before when creating charts w... by Dark_Ichigo Builder in Splunk Search 03-27-2014 1 2	1	2
trace a transaction through different fields I've been poking around at this for a bit now to no avail. I'm sure it's something super simple and I'm just missing ... by jeremiahc4 Builder in Splunk Search 03-27-2014 0 5	0	5
field extraction not working with transforming commands I wrote an inline field extraction like this: \| rex "splunk[\s]+[\d]+[\s]+[\d]+[\s]+(?<CPUPCT>[\d]+\.[\d]+)[\s]+[\d]... by sansay Contributor in Splunk Search 03-27-2014 0 9	0	9
Filtering in search. Hi I have a search string like host=ABC "Sales Month"="March"\|..... Instead of hard coding the month March can I ma... by SplunkBaby Explorer in Splunk Search 03-27-2014 0 6	0	6
Search all fields except ____ I have a log with say 50 fields.Is there a way to search all fields except one of them? Something like ... \|search M... by smileyge Path Finder in Splunk Search 03-27-2014 0 12	0	12
dboutput with 65 Million Rows I need to output 65 Million rows to a database table, I see the default per transaction is 50K. Is there a good way t... by ShaneNewman Motivator in Splunk Search 03-27-2014 0 6	0	6
strftime format for event breaks not working Event breaks based on strftime format for weblogic log events that are not being parsed correctly. e.g. It seems to b... by noveix Explorer in Splunk Search 03-26-2014 0 7	0	7
how to extract the required text from the fields using rex Hi , I have a field with VendorName Example : HOMOLOGATED-(Contrend CT 5072s) HOMOLOGATED-(DLINK-DLINK 500B C1) @ H... by ncbshiva Communicator in Splunk Search 03-26-2014 0 3	0	3
Predict command Hi, We would like to know more about lower (lower95) and upper (upper95) prediction and how the count for lower(pred... by muguniya Explorer in Splunk Search 03-26-2014 0 1	0	1
Error with Dashboard Has anyone ever came across this error on IE 8 "Internet Explorer has modified this page to help cross-site scripting... by nikhilmehra79 Path Finder in Splunk Search 03-26-2014 0 3	0	3
How to find the redirect request along with its redirected target location? When a request comes on domain 1 (say abc.com) we do a 301 redirect to domain 2 (def.com). These will be two separate... by santhakr Explorer in Splunk Search 03-26-2014 0 5	0	5
Get unique values from with in a field. I have a splunk entry like this url="11111/toy/{toy_id}/part/{part_id}" Here toy_id and part_id are six digit numbe... by sanchitlohia Explorer in Splunk Search 03-26-2014 0 2	0	2
Skip one hour in one day search I wanted to search for full day except one hour from 6.30am to 7.30am. I am not able to do it. Can anyone help me in ... by abhi144 New Member in Splunk Search 03-26-2014 0 2	0	2

Get Updates on the Splunk Community!

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas Do you ever feel ...

Build and Launch AI Agents from Your Splunk Workflows

Replay Tech Talk Build and Launch AI Agents from Your Splunk Workflows We’ve all been there: juggling ...

index This | What kind of room has no doors?

IndexEducation Cover Art Banner Cisco.png August 2026 Edition Hayyy Splunk Education Enthusiasts and the ...

Splunk Search

Select the Top 1 from a set of TopN

Suggestion: Enabling connectivity to SQlite

Summary incorrect on search page

Lost on ASA syslog config.

combining distinct count and count in one table

Find results based on field value of 2 events

Events “data” field is the same for all events collected.

literal * in search?

Detect deviations over historical query

Group together different fields found on different lines, based on a common field

problem with addcoltotals

ask compatibility with R60, R65 and R75.20

A great Charting Problem!

trace a transaction through different fields

field extraction not working with transforming commands

Filtering in search.

Search all fields except ____

dboutput with 65 Million Rows

strftime format for event breaks not working

how to extract the required text from the fields using rex

Predict command

Error with Dashboard

How to find the redirect request along with its redirected target location?

Get unique values from with in a field.

Skip one hour in one day search

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Build and Launch AI Agents from Your Splunk Workflows

index This | What kind of room has no doors?

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation