Splunk Search

Splunk Search
Community Activity
ezajac
I would like to trim down a field to 5 characters using an Excel Left Logic. I have read some suggestions to use LEN,...
by ezajac Path Finder in Splunk Search 03-05-2014
0 2
0
2
bob87
I am trying to index a new file and am first configuring the source type in the Data Preview screen, however although...
by bob87 Explorer in Splunk Search 03-05-2014
0 3
0
3
vikas_gopal
Hello Everyone, Using javascript I am showing some text in a read only text box, now I want to add another line to th...
by vikas_gopal Builder in Splunk Search 03-05-2014
0 6
0
6
jimjohn
Hi HostA contains employer_code like (A,B,C,D,E,F,G) HostB contains ER Code like (A,A,B,D,D) I am trying ...
by jimjohn Path Finder in Splunk Search 03-05-2014
0 5
0
5
ma_anand1984
blacklist = ((\.(tar|gz|bz2|tar.gz|tgz|tbz|tbz2|zip|z)$)|(*logger_console*|*logger_soap*|*logger_batch-documents*)) ...
by ma_anand1984 Contributor in Splunk Search 03-05-2014
0 2
0
2
Hildoceras
Hi I am looking at access log data with the fields src_ip and method (get, post, head) I have been running the sear...
by Hildoceras New Member in Splunk Search 03-05-2014
0 3
0
3
0range
Hi all. When I type "useother=f" in timechart some values are lost: fro example, I've got 5-types events: A - 10 even...
by 0range Communicator in Splunk Search 03-05-2014
0 1
0
1
basanthp
Hi, I am trying to perform field extractions in the searchtime using hiddensearch module.the following search works f...
by basanthp Path Finder in Splunk Search 03-05-2014
0 1
0
1
ncbshiva
Hi i have a Date in the below form 201304 201306 201307 I want to convert to these to below form APR-13 JUN-13 JUL...
by ncbshiva Communicator in Splunk Search 03-05-2014
0 3
0
3
_gkollias
Hi All, I'd like to create a props.conf for log files in this format: DEBUG[ScriptingSession] 2013-11-30 15:52:4...
by _gkollias Builder in Splunk Search 03-04-2014
0 4
0
4
jasklee
I need to create a table which will display workweek as rows and subarea as column, meanwhile the data inside will ...
by jasklee Engager in Splunk Search 03-04-2014
0 1
0
1
jasklee
I need to create a table which will display workweek as rows and subarea as column, meanwhile the data inside will ...
by jasklee Engager in Splunk Search 03-04-2014
0 2
0
2
dmalcor
In the GUI I get results plus the fields: host, source, and sourcetype Same search in the CLI I just get results, no ...
by dmalcor Engager in Splunk Search 03-04-2014
0 5
0
5
twkan
Hello everybody, I'm trying to do a timechart using a 3 day timeframe, for example from Jul 17 2011 00:00:00 to Jul ...
by twkan Splunk Employee Splunk Employee in Splunk Search 03-04-2014
1 7
1
7
Thuan
I have set up a lookup table that consists of a number of offenses that need to be identified for every daily search....
by Thuan Explorer in Splunk Search 03-04-2014
0 3
0
3
vikas_gopal
Hi Everyone, Is it possible to concatenate current date and time with dashboard label e.g. my dashboard label is "Mon...
by vikas_gopal Builder in Splunk Search 03-04-2014
0 9
0
9
mcrawford44
Hi all, CSV export of multi-key values is a bit basic at the moment. It exports each value with a space delimiter. ...
by mcrawford44 Communicator in Splunk Search 03-04-2014
0 1
0
1
ryanmims
Trying to write a search that will show top 10 "repeat" offenders over last 7 days. I'm guessing an eval(if) statemen...
by ryanmims Explorer in Splunk Search 03-04-2014
0 7
0
7
rileyken
we make the index names very short since they will be used in searches, but we have a lot of indexes, so we would lik...
by rileyken Explorer in Splunk Search 03-04-2014
0 1
0
1
mrjlam
Is there a way to create an alias to an existing index so we can search by its name and it's alias: eg. index=origi...
by mrjlam Engager in Splunk Search 03-03-2014
1 4
1
4
mdavis43
I have two source types, one (A) has Active Directory information, user id, full name, department. The other (B) con...
by mdavis43 Path Finder in Splunk Search 03-03-2014
0 1
0
1
mrflibbleuk
Hi, I have a single large dataset that is related as follows. Each User has a UserID, when they login a SessionID i...
by mrflibbleuk New Member in Splunk Search 03-03-2014
0 1
0
1
jasklee
I want to count the number for the multivalue field count(eval x=commands("search passed | search sub_areaA")) AS su...
by jasklee Engager in Splunk Search 03-03-2014
0 3
0
3
asmithe
this search: index=flowspaces sourcetype=auditlog produces search results that are not displayed in the ui. if field...
by asmithe Path Finder in Splunk Search 03-03-2014
0 2
0
2
harshal_chakran
Hi, I have a python file, whose output I am trying to show on splunk web interface. I have written some print stateme...
by harshal_chakran Builder in Splunk Search 03-03-2014
0 1
0
1
Get Updates on the Splunk Community!

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...

Build and Launch AI Agents from Your Splunk Workflows

Replay Tech Talk Build and Launch AI Agents from Your Splunk Workflows     We’ve all been there: juggling ...

index This | What kind of room has no doors?

IndexEducation Cover Art Banner Cisco.png August 2026 Edition  Hayyy Splunk Education Enthusiasts and the ...