Splunk Search

Splunk Search
Community Activity
splunkrg
Hey Everyone, I'm having a bit of trouble with Splunk search performance, I currently have around 1 million rows of ...
by splunkrg Explorer in Splunk Search 01-27-2014
0 3
0
3
yugin
Hi, I'm trying to plot a histogram of transaction durations. The durations range from 0s to 60s. My search string ...
by yugin Explorer in Splunk Search 01-26-2014
4 9
4
9
yuwtennis
Hi! I would like to ask about the timemodifier. I have a following search including subsearch, index=hoge [ search...
by yuwtennis Communicator in Splunk Search 01-26-2014
0 7
0
7
maurelio79
Hi, i'm just learning using splunk and sdk-python. I have this search run from sdk: search = 'search index=main sour...
by maurelio79 Communicator in Splunk Search 01-26-2014
0 2
0
2
beano500
Since upgrading from 5 to 6, one of my dashboards started behaving "strangely", and I have distilled it down to this....
by beano500 Engager in Splunk Search 01-25-2014
0 20
0
20
sansay
I have an accelerated search which is set for a 3 months time range. The acceleration works, I can get a whole day's ...
by sansay Contributor in Splunk Search 01-25-2014
1 6
1
6
malex
How can I get a delta count by a key name when there are multiple keys for plotting the delta in a report? I have a ...
by malex Engager in Splunk Search 01-24-2014
2 7
2
7
Dark_Ichigo
I want to display a chart that automatically crops that whole chart to where there is data and not display any empty ...
by Dark_Ichigo Builder in Splunk Search 01-24-2014
1 2
1
2
dhorriganwa
I am consistently getting the following error when trying to create a Database Input: ERROR:TailDatabaseMonitor - Co...
by dhorriganwa New Member in Splunk Search 01-24-2014
0 2
0
2
a212830
Hi, I want to name my host based upon a value in the logfile. I know it can be done via regex but it's not working....
by a212830 Champion in Splunk Search 01-24-2014
0 4
0
4
bcusick
Hi all, I am trying to find the average number of bytesOut for proxy activity by user. Obviously first I am pulling...
by bcusick Communicator in Splunk Search 01-24-2014
0 2
0
2
ndkhoiits
I need a statistic which show total events in 1 month, 1 week and 1 day and create a dashboard, for example column ch...
by ndkhoiits Explorer in Splunk Search 01-24-2014
0 1
0
1
jdoer
i have an search with two transaction index=myindex | transaction queue_id sendmail_uid message_id maxspan=5s | se...
by jdoer Engager in Splunk Search 01-24-2014
0 2
0
2
Jananee_iNautix
The log information contains say 10,000 lines which has status as "SUCCESS"or "MAJOR." Currently the query contains t...
by Jananee_iNautix Path Finder in Splunk Search 01-24-2014
0 5
0
5
shariinPH
Hi Splunkers! Is there an issue in making configurations using windows (7) platform. can someone help me in editing c...
by shariinPH Contributor in Splunk Search 01-24-2014
0 2
0
2
ndkhoiits
I need a statistic which show latest 50 events in the log, can we do this with splunk?
by ndkhoiits Explorer in Splunk Search 01-24-2014
0 1
0
1
togmolodon
Splunk newbie here. I need to extract fields from our JSON logs, sample _raw output below: 2014-01-22 21:25:33,802 ...
by togmolodon Explorer in Splunk Search 01-23-2014
0 2
0
2
theoneNeo
Hi, I got the ff script working but putting in more rex field hangs splunk index=xxx | rex field=_raw "tel:001001(?9...
by theoneNeo New Member in Splunk Search 01-23-2014
0 8
0
8
sieutruc
Hello, I have a csv-liked file as: test.txt "Equipment","LNKEQP","METAST","METSER","MODSTA","METEOD" "HLL_POS_00098...
by sieutruc Contributor in Splunk Search 01-23-2014
1 5
1
5
sideview
Sometimes I want to run reports calculating things about timebuckets that have no data in them. the timechart comma...
by SplunkTrust SplunkTrust in Splunk Search 01-23-2014
1 3
1
3
bckq
Is there any way to hide that information from the top of splunk screen? "The system is approaching the maximum numb...
by bckq Path Finder in Splunk Search 01-23-2014
1 3
1
3
yuwtennis
Hi! Is it possible to exit during the search ? For example, search index=xxx [ search xxxxx format ] If above sub...
by yuwtennis Communicator in Splunk Search 01-23-2014
0 2
0
2
_gkollias
Hi All, I'm using a query to get the total count of individual fields. Here is the search and chart being displayed:...
by _gkollias Builder in Splunk Search 01-22-2014
1 4
1
4
a212830
Hi, I need to route specific messages that come into Splunk to another destination via syslog. I have the props/tra...
by a212830 Champion in Splunk Search 01-22-2014
0 1
0
1
echojacques
Hello, The iplocation command has the City and Country fields, for example: sourcetype="IPS" | iplocation src_ip | ...
by echojacques Builder in Splunk Search 01-22-2014
0 1
0
1
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...