Splunk Search

Splunk Search
Community Activity
splunknovice
We have following entries in our app log: 2013-12-06 09:09:23,918 Level=INFO Thread=http-apr-45082-exec-2 Logger=c....
by splunknovice Engager in Splunk Search 02-04-2014
0 2
0
2
sushma7
Hi, When I run a search query and save the job for 7 days by editing under job settings. Will the results for those...
by sushma7 Path Finder in Splunk Search 02-04-2014
0 1
0
1
rjahrling
Here's my query in Search: host=kpidata source="*avail*" | eval Time = _time | eval days_in_month = round((relative_...
by rjahrling New Member in Splunk Search 02-04-2014
0 3
0
3
robertlabrie
My dataset has multiple events for a single _time. Batches get loaded whenever it's sent by a 3rd party. I have 25 un...
by robertlabrie Path Finder in Splunk Search 02-04-2014
0 4
0
4
tkwaller
Hello index=tt Reserve OrderIntegration | transaction dye maxspan=30s maxpause=10s startswith="Begin Reserve" endsw...
by tkwaller Builder in Splunk Search 02-04-2014
1 8
1
8
vmishra
Need help extracting "test" out of - http_request="POST /rest/api/test/*" Thanks,
by vmishra Engager in Splunk Search 02-04-2014
0 3
0
3
tyronetv
I have a unique ID (RID) for a each client click. A single click can execute between 3 and, sometimes, over 100 log ...
by tyronetv Communicator in Splunk Search 02-04-2014
0 3
0
3
AlexMcDuffMille
Hello, I have data that shows the number of items I'm counting by item number. Is there a way to count when I have ...
by AlexMcDuffMille Communicator in Splunk Search 02-04-2014
1 5
1
5
mtmoore
I have been racking my brains over this for most of the day so i'm hoping someone will put me out of my misery! I wa...
by mtmoore Explorer in Splunk Search 02-04-2014
0 3
0
3
r999
How do i combine these stats commands? 1) | stats count by user host creates table: user host count 2) | s...
by r999 Path Finder in Splunk Search 02-04-2014
2 1
2
1
sdorich
So first I'm wondering what my error in the following search is: eventtype=sis_daily | join _time [search eventtype=...
by sdorich Communicator in Splunk Search 02-04-2014
0 2
0
2
aelliott
When upgrading from 1.1.0 to 1.1.1 DB Connect, I had to change all my fields from being written with capitalization t...
by aelliott Motivator in Splunk Search 02-03-2014
5 4
5
4
dfigurello
Hello Splunkers, I Have syslog log in my splunk index, for example: 2014-01-13 23:59:59 Local7.Error 172.16.80....
by dfigurello Communicator in Splunk Search 02-03-2014
0 2
0
2
kjonzeatgmaildo
I am sending events into Splunk using a tool that has a notification engine. The notification engine only allows me t...
by kjonzeatgmaildo New Member in Splunk Search 02-03-2014
0 6
0
6
harshal_chakran
Hi, I want to change the color of selected Splunk header tab. as it is very difficult to see the highlighted secti...
by harshal_chakran Builder in Splunk Search 02-03-2014
0 1
0
1
jsmith39
How would you search an application log for the absence of one or more specific events in a given time period? I'm l...
by jsmith39 Path Finder in Splunk Search 02-03-2014
0 6
0
6
echojacques
Hello, How can I get a trend of total events by sourcetype in a graph over a week? My indexing volume dropped signi...
by echojacques Builder in Splunk Search 02-03-2014
0 1
0
1
kmcconnell
All database connections quit working at the same time. I have checked the splunkd.log, dbx.log, and the jbridge.log...
by kmcconnell Path Finder in Splunk Search 02-03-2014
0 9
0
9
kavyatim
Hi , I have data in the following format: NOT_HOMOLOGATED-(UNKNOWN) HOMOLOGATED-(Thomson SpeedTouch ST510 V6 versao 6...
by kavyatim Path Finder in Splunk Search 02-03-2014
0 1
0
1
leon24
Hi all, I have a log file that briefly logs file in this pattern. For e.g. Available 12-01-2014 03:03:44 So if...
by leon24 Explorer in Splunk Search 02-02-2014
0 5
0
5
treyka
I have multiple indexes setup. Most user queries go to my default index however my users typically execute a search o...
by treyka Path Finder in Splunk Search 02-02-2014
0 3
0
3
iTechEvent
Here is a simplified version of my issue. I have csv file as below named Q.csv Q1avg, Q2avg100 , ...
by iTechEvent Explorer in Splunk Search 02-02-2014
0 2
0
2
iTechEvent
I have a query Q1 which is used to collect avg over 10 days.Say the average is AvgQ1 100. I have another query Q2 whi...
by iTechEvent Explorer in Splunk Search 02-02-2014
1 3
1
3
iTechEvent
| savedquery Q1 -> this runs okay | savedquery Q1 | savedquery Q2 -> not okay. splunk error. | savedquery Q1, Q2...
by iTechEvent Explorer in Splunk Search 02-01-2014
0 5
0
5
ramanjain1983
Hi Guys, I am trying to do this scenario where a subsearch is called to retrieve 2 fields using regex out of which o...
by ramanjain1983 Path Finder in Splunk Search 02-01-2014
1 4
1
4
Get Updates on the Splunk Community!

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...

span_metrics: The OpenTelemetry-Idiomatic Way to See Inside Your Services

You open a trace in Splunk Observability Cloud and everything looks fine. One root span, order-pipeline, with ...
Top Solution Authors