Splunk Search

Community Activity

Chart by selected fields Hi I am trying to structure some data from an outside source. In the data I get a lot of fields for each event, I wan... by vanniar New Member in Splunk Search 01-10-2014 0 6	0	6
search for a sequence of events in a transaction I have a log file that I am grouping the events using transaction command based on session ID. Within each transactio... by gundepalli Explorer in Splunk Search 01-10-2014 2 6	2	6
Query against a list of computers Hi: We have a bunch of searches that are being run against a specific set of hosts (we'll say: TV-host1, TV-host2, T... by raidercom Communicator in Splunk Search 01-10-2014 0 2	0	2
How I can chart dates in a timechart Hi I hope I can explain my issue. My logfile data looks like this Thread, Milliseconds, Command which was executed ... by RobertRi Communicator in Splunk Search 01-10-2014 0 5	0	5
subsearch help i have a two tables one is rating user_id=xxxx movie_id = zzzz rating = yyyy second is movie movie_id = kkkk name ... by changwoo Communicator in Splunk Search 01-10-2014 0 7	0	7
Errors everywhere / splunk.js SDK Hello, i am trying to start a search with the splunk-js-sdk and some own js-code. i've got several issues by program... by gaRe Explorer in Splunk Search 01-10-2014 1 4	1	4
Splunk V 6 error Search query is not fully resolved. Good Afternoon, I am new to Splunk and have a query that is working fine in the search but once saved in the Dashboar... by ericasmith411 New Member in Splunk Search 01-09-2014 0 3	0	3
Creating a lookup from comma separated data... I'm trying to do some work with qualys data. There are events that describe "asset groups", with a bunch of fields, o... by Steve_Litras Path Finder in Splunk Search 01-09-2014 0 1	0	1
Examples: How do I edit the resulting value in search query? I have dates that look like "01/09/2014 00:00:00" that I want to chart. The dates take up too much real estate so I ... by the_wolverine Champion in Splunk Search 01-09-2014 0 1	0	1
Percentage of counts (view through rates) I am looking to get percentages into a table. I have 2 separate searches that count different events. I will like to... by kramsay Engager in Splunk Search 01-09-2014 0 6	0	6
how to turn an inner join into sub-search and pass non matching values sourcetype=Account contains Id values and the AccountName sourcetype=Issue contains AccountId values but no Account... by rsennett_splunk Splunk Employee in Splunk Search 01-09-2014 1 6	1	6
Intersect, Diff and Pie Chart I have a very large number of win7 machines. I pulled a CSV file from Active Directory, AD1.csv. I then created ano... by belka Path Finder in Splunk Search 01-09-2014 0 1	0	1
Splunk Default Fields in Data What happens during indexing if my data were to have key value pairs where the key is the same as one of the default ... by fredclown Builder in Splunk Search 01-09-2014 0 2	0	2
what is the syntax for fieldname not equals regex hi, what is the syntax for fieldname not equals regex thanks, by alexl1 Path Finder in Splunk Search 01-09-2014 0 4	0	4
Problem with hyphen delimited sourcetype and spaces I've got some logs that are in a format like this 2013-12-29 08:23:21,151 - INFO - 1.1.1.1 - None - None - SERVER1 -... by jstockamp Communicator in Splunk Search 01-09-2014 0 5	0	5
I need help finding a substring and setting it to display in a new field. I am sure this is probably a noob question, but I am a noob and I have been researching this for a while this morning... by dlespron Path Finder in Splunk Search 01-09-2014 0 19	0	19
Ensure scheduled searched based alerts finish before next one kicks in We have a lot of scheduled search based alerts (mostly 10 minute schedules)....how do we ensure these jobs are comple... by Mag2sub Path Finder in Splunk Search 01-09-2014 0 5	0	5
How to compare strings and determine the newly added fields. Hello I am trying to create a report which compares users present on day x with the users present on day y.After com... by theouhuios Motivator in Splunk Search 01-09-2014 0 2	0	2
Searching Columns Hi All, I am new to splunk and when I try to search an excel file with one of the columns like id i am not getting a... by jimjohn Path Finder in Splunk Search 01-09-2014 0 2	0	2
use outputcsv and inputcsv in one query Hi, I want to write a query where, I can store a result in csv file. for e.g "outputFile" and then search through tha... by harshal_chakran Builder in Splunk Search 01-09-2014 0 2	0	2
Co related sub search in Splunk Please help in creating the below search: Select x.cn_no, (select distinct ad.CD_cd_flag from act_hist ad w... by dinesh_wadhwa Engager in Splunk Search 01-08-2014 0 5	0	5
Sorting a list Hi Splunkers! My data looks like this - it may be familiar from a recent high-profile data leak  phone number, use... by himynamesdave Contributor in Splunk Search 01-08-2014 0 1	0	1
Detection of stealthy events On security issues, there are high intensity events - scanning - and low-intensity (or stealthy) events - periodic or... by Thuan Explorer in Splunk Search 01-08-2014 0 3	0	3
local limits.conf not working for the specified span would result in too many (>50000) rows I have created a view for max transactions/second, I have a timechart with a 1 second span which counts transaction/s... by jaideep_gaikwad Engager in Splunk Search 01-08-2014 1 1	1	1
Find data in indexes with only two leters in the title I have lots of indexes All of the Organizations have there data in indexes with only two letters like index=os I wan... by hartfoml Motivator in Splunk Search 01-08-2014 0 2	0	2