Splunk Search

Community Activity

	How to get the 0 data rows using tstats query? Original query: index=app-data sourcetype=clientapp-code \|rex field=_raw "\Status\:(?<Code>.*?)\\|" \|eval Failed=if... by Vani_26 Path Finder in Splunk Search 06-06-2023 0 2	0	2
	How to merge the field value and its count into one field? I am relatively new to Splunk and I am trying to create a field that contains the field value and its count into one... by man03359 Communicator in Splunk Search 06-06-2023 0 5	0	5
	How to genterate list of data by giving max and min limit? Hi,I need genterate list of data by giving max and min range.But I can't find a command (function) doing that.I will ... by DS904458 Explorer in Splunk Search 06-05-2023 0 2	0	2
	How to search multiple strings from lookup and provide count? Hi All, I am working on search to search fields values from the lookup in an index and i have created the below searc... by Splunk4 Explorer in Splunk Search 06-05-2023 0 1	0	1
	Is it possible to use \| format to get !=? I have a search and in the initial part of the search I have a subquery that returns some IP addresses formatted like... by fredclown Builder in Splunk Search 06-05-2023 0 3	0	3
	Warning in internal log: unable to parse site_label I recently noticed a huge amount of warnings in the _internal logs for our search heads. events are all like this:02-... by mortf Explorer in Splunk Search 06-05-2023 0 7	0	7
	Can someone help me adjust my regex to only capture "P3820 Houston to A345 Atlanta Line Down" for the field "Details"? I can't use the field extractor because the field configurations are frequently very different and it gives me errors... by michaeler Communicator in Splunk Search 06-05-2023 0 2	0	2
	Join all objects with specific object within the same file? Hi, i have a lot of files, the size of each file can be 4M.the structure of each JSON file: Events/objects. Each even... by maayan Path Finder in Splunk Search 06-05-2023 0 7	0	7
	How can I search not only filter messages also couple of messages around it? How can I search not only filter messages also couple of messages around it? by Uday1 New Member in Splunk Search 06-05-2023 0 6	0	6
	How to get new exceptions stats by comparing two time ranges? Hello splunk, I'm trying to compare the exceptions between time ranges and get the new exceptions list. Suppose co... by Kk Path Finder in Splunk Search 06-05-2023 0 14	0	14
	How would I use lookup in this search? Hi everyone, I created a CSV lookup that has one column named "IP" which contains public IP list, and now I want to u... by faiq1999 Explorer in Splunk Search 06-04-2023 0 3	0	3
	Is it possible to do a regex at search time or preferably at index time to do this? Hi, I have below raw event. Data is ingested via reading logfiles from dedicated location on monitored server with UF... by mbasharat Builder in Splunk Search 06-04-2023 0 4	0	4
	How to extract URL and text after a string? Hi, I would like to extract fields from an unstructured data that contain multiple labels followed by its HTML href t... by firoagni Engager in Splunk Search 06-04-2023 0 3	0	3
	How to extract and count email address? Hello. How to extract and count personal email address? Say the destination email field (d-email) contains email as b... by stick-o New Member in Splunk Search 06-04-2023 0 3	0	3
	Replace Characters- How can I replace \\\\ for \ ? Hi guys how are you doing? I'm reading this link Solved: How to use replace in search? - Splunk Community but I can... by Tincho Engager in Splunk Search 06-03-2023 0 3	0	3
	How can I search vlookup data from CSV? Hello I have injested CSV data in lookup. The common data is Service_Method in CSV and dt.entity.service_method in Sp... by naujla85 Explorer in Splunk Search 06-03-2023 0 1	0	1
	Is there a "Splunk Enterprise" vs "Splunk Security" comparable list? Hi Is there any feature or ability exist in "Splunk Enterprise" that does not exist in "Splunk Security"? Any cheat s... by indeed_2000 Motivator in Splunk Search 06-03-2023 0 2	0	2
	How to get statistical distribution of multivalue entry in Splunk? I am starting with this query to show which types of products our top customers buy ``` get all purchases ``` ind... by JamesWierzba Observer in Splunk Search 06-02-2023 0 2	0	2
	How to categorize time into group? Hi Splunkers, I am looking for a query to categorize timestamp into Morning, Afternoon, Night. I'm using this to know... by JimLucas New Member in Splunk Search 06-02-2023 0 1	0	1
	Can I search without using join? Hi,I'm looking to improve performance and avoid the subsearch_maxout issue with a join on two source types. I'm joini... by mcaulsc Path Finder in Splunk Search 06-02-2023 0 3	0	3
	What is an SPL search query for detection of stolen credentials? totally stuck with this query by Hurricanet Observer in Splunk Search 06-02-2023 0 1	0	1
	Is there an alternate solution to stats count with two BY fields? \| eval ExitStatus=if(ExitStatus>0, 1, 0) \| stats count by ExitStatus by Site In the search query above, I am look... by jialiu907 Path Finder in Splunk Search 06-02-2023 0 2	0	2
	How to setup an alert but omit certain time of day? Hello All, I'm trying to do a search "found ANC VITC in source 01:00:00;00" which works just fine, but I would like t... by ScottW1 New Member in Splunk Search 06-02-2023 0 3	0	3
	Can I report for number of monthly incoming and outgoing calls with total minutes? Currently, I can download a report for overall incoming plus outgoing calls, total number of minutes and average call... by satnam_singh New Member in Splunk Search 06-02-2023 0 3	0	3
	How to timechart with join> I have a problem using the timechart command with this query. if i use "table" it works, but with timechart it doesn'... by Goldenfit Explorer in Splunk Search 06-02-2023 0 1	0	1