Splunk Search

Community Activity

Combine two regular expressions into one I want to combine two regular expressions.Please help me. \b(2013)[- /.](0[1-9]\|1[012])[- /.](0[1-9]\|[12][0-9]\|3[01]... by dangerdx New Member in Splunk Search 01-02-2014 0 7	0	7
Onetime regex search Hi, I'm struggling with doing a regex search. I want to search the whole log files for credit card information. Sin... by Avarion New Member in Splunk Search 01-02-2014 0 4	0	4
Real Time Searches Any disadvantages if we are running real time searches and alerting using those, currently we are testing few functio... by nikhilmehra79 Path Finder in Splunk Search 12-31-2013 0 2	0	2
fieldformat not working? I'm using fieldformat (Splunk 5.0.5, search head in a cluster, if that matters) in order to change how the time is di... by bojanz Communicator in Splunk Search 12-31-2013 0 4	0	4
change lookup macth_type Hi I have a list of words in a lookup table and i would like to return the events of a search that match any of the ... by jonthanze Explorer in Splunk Search 12-31-2013 0 2	0	2
Alt key to add NOT no longer works on fields in V6 We've just upgraded to V6, and one of the first things I've noticed is that you can't use the Alt-Click to add the NO... by ashleyherbert Communicator in Splunk Search 12-30-2013 5 1	5	1
Conversion from string to date I am having a field deliveryExpiry (String type) in my log and I want to compare whether the expiry is before the cur... by c_sahil New Member in Splunk Search 12-30-2013 0 4	0	4
Creating a multivalue field from a result? Hey everyone, So this feels like something I should be able to do with the standard search language, but I am failin... by dshpritz SplunkTrust in Splunk Search 12-27-2013 3 4	3	4
searchmatch with macro expansion Hello & merry xmas to all, I would like to create a macro-expansion using searchmatch (eval-command) such that the a... by klee310 Communicator in Splunk Search 12-27-2013 0 2	0	2
Conflicting Event count in Search App based upon time range I executed this search on my data, over two different time ranges: "malware" \| timechart count The time ranges wer... by rahulgopal Explorer in Splunk Search 12-27-2013 0 4	0	4
Javascript or HTML5 in app setup pages? Someone just asked me if it was possible to have something like a slider on the app setup page for entry of data. So... by phoenixdigital Builder in Splunk Search 12-26-2013 0 1	0	1
Using lookup tables and searching it twice We have a user lookup table that contains information such as username, email, and managername. I can do a lookup to... by rmorlen Splunk Employee in Splunk Search 12-26-2013 0 2	0	2
How to add percentage on statistic field? Hello, My search: index=test sourcetype=traffic \| stats sum(A) as A sum(B) as B sum(C) as C sum(D) as D \| transpose ... by appleman Contributor in Splunk Search 12-25-2013 0 2	0	2
Subsearch results display in different columns with same field by differenet timerange sourcetype=xxx earliest=-1d@d latest=-0d@d \| stats count by host \| append [search earliest=-2d@d latest=-1d@d \| stats... by rossikwan Path Finder in Splunk Search 12-25-2013 0 4	0	4
How to get index time in subseconds ? Hi Splunkers, I want to know the index time lag in subsecond order by following command. index=main \| eval index_la... by sunrise Contributor in Splunk Search 12-25-2013 0 2	0	2
What is pulldown_type? Hi! I would like to know what pulldown_type option (props.conf) affects in splunk. Are there any description in the ... by yuwtennis Communicator in Splunk Search 12-25-2013 1 1	1	1
V6 free splash page display bug Demonstrated below: Black text on dark grey background - totally useless from an accessibility perspective. What ha... by grijhwani Motivator in Splunk Search 12-24-2013 0 4	0	4
How do you 'Tag' based on a search? I'm almost certian I used the wrong lingo but I'd like to essentially create a field based on search or regex, but I ... by andrewkenth Communicator in Splunk Search 12-23-2013 0 1	0	1
Getting top values from two fields I have a index that contains both destination and source countries in each entry. I would like to get a list over top... by kennethp Engager in Splunk Search 12-23-2013 1 1	1	1
How to identify session from log based on request timestamp Hi Guys, My log message looks like below, Time message 10:00 AM “log message 1” 10:10 AM “log message... by moohkhol New Member in Splunk Search 12-23-2013 0 1	0	1
Formatting the digits Hi! I would like to do something similar to sprintf of perl. Which would be like, sprintf("%02d) put a 0 in front... by yuwtennis Communicator in Splunk Search 12-23-2013 0 2	0	2
Inhibiting alerts from saved searches that had search errors Is there a way to inhibit alerts from saved searches that had errors? Saved searches will sometimes fail with errors... by teedilo Path Finder in Splunk Search 12-23-2013 3 10	3	10
Display results only above a certain number Hi all, I am having trouble displaying search results when I specify that the returned results must be greater than ... by Snazter57 New Member in Splunk Search 12-23-2013 0 5	0	5
Predict: Can I show only the predicted events in the future? I like the predict clause, but how can I show only the prediction of the 'future'. For example: index=prd_stats earl... by mkelderm Path Finder in Splunk Search 12-23-2013 0 2	0	2
How to get the Source from one query and search specific variable in that source?? Hi, I have a sourcetype = ALLXMLDATA, where I have added multiple XML files as data inputs such XMLfile1, XMLfile2 a... by harshal_chakran Builder in Splunk Search 12-22-2013 0 3	0	3