Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk Search
Splunk Search
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Hi all,Is it currently possible to somehow create a conditional macro expansion?For example, I have different list of...
by
shubs
Engager
in
Splunk Search
03-20-2023
|
0
|
2
| ||
|
|
Below two events
Start event
Index= x source= xtype | spath application | search application= x app " saved n...
by
Sekhar
Explorer
in
Splunk Search
04-17-2023
|
0
|
3
| ||
|
|
There are two types of raw data. What is the regular expression to get the value between the /* special symbol and th...
by
chanhee1
Loves-to-Learn Lots
in
Splunk Search
04-17-2023
|
0
|
3
| ||
|
|
I have two events one is calculate the SLA percentage from below querys
Start event query
Index=x source...
by
Sekhar
Explorer
in
Splunk Search
04-15-2023
|
0
|
12
| ||
|
|
can we setup an alert based on data from current time stamp & based on information on past 15mins ?say at T1, got a l...
by
kdineshreddy009
New Member
in
Splunk Search
04-17-2023
|
0
|
3
| ||
|
|
Hi, I have many concurrent saved searches running due to which search delayed health indicator is always red. How to ...
by
bhagyashriyan
Explorer
in
Splunk Search
04-17-2023
|
0
|
1
| ||
|
|
Hi,
We have a data source containing File Path's from both Windows and Linux formats. Applying regex separately w...
by
att35
Builder
in
Splunk Search
04-17-2023
|
0
|
4
| ||
|
Hi Splunkers,
I need your assistance to create a search that provides the following:SPL query I will use it to loo...
by
muradgh
Path Finder
in
Splunk Search
04-17-2023
|
0
|
2
| ||
|
|
We have two events
Start event
Index= x source= xtype | spath application | search application= x app " saved ...
by
Sekhar
Explorer
in
Splunk Search
04-17-2023
|
0
|
3
| ||
|
Hi All,
I have an issue which i am unable to resolve. I have a lookup with two columns:
Process_Command_Line, s...
by
becksyboy
Contributor
in
Splunk Search
04-17-2023
|
0
|
6
| ||
|
|
We have splunk event having field "eventdateTime" in format mentioned below.
for example
eventdateTime
2023...
by
Abhineet
Loves-to-Learn Everything
in
Splunk Search
04-17-2023
|
0
|
2
| ||
|
I am new to Regex expressions and trying to figure them out.
I am trying to extract two sections of the following ...
by
kmhanson
Explorer
in
Splunk Search
04-13-2023
|
0
|
14
| ||
|
|
Hi,
Sorry if my question is repeated or too naive.
I have a text input field accepting "Module name". It works ...
by
shrirangphadke
Path Finder
in
Splunk Search
07-14-2015
|
3
|
8
| ||
|
|
I am scheduling this at 9.00 AM everyday using splunk DB connect .When i see the sourcetype nextday at 9.00 AM g...
by
Keerthi
Path Finder
in
Splunk Search
04-17-2023
|
0
|
3
| ||
|
I have a multiselect for software version (version is just yyyy.mm.dd or an alphanumeric string).
If the user selec...
by
jonvijay1993
Explorer
in
Splunk Search
04-13-2023
|
0
|
4
| ||
|
|
We have two events query
Start event
Index=x source type= xx "String" extacted fields s like manid,actionid,bat...
by
Sekhar
Explorer
in
Splunk Search
04-16-2023
|
0
|
3
| ||
|
|
Hi Legends
How do I give bit more meaningful names for fields last_sum and first_sum in below query?
i.e. somet...
by
dvg06
Path Finder
in
Splunk Search
04-16-2023
|
1
|
1
| ||
|
|
I have a requirement where I have been asked to monitor for new users getting added to Sudoer. Are there specific ac...
by
GarzaREG
New Member
in
Splunk Search
04-14-2023
|
0
|
2
| ||
|
|
Hi All, I am facing some issue in using lookup command. Need your suggestions here please..
I have a lookup file a...
by
RanjiRaje
Explorer
in
Splunk Search
04-13-2023
|
0
|
7
| ||
|
|
Hello,Trying to complete a search that uses metrics to monitor when a device has not been connected for the last 90 d...
by
willsy
Communicator
in
Splunk Search
04-14-2023
|
0
|
2
| ||
|
I have a search that returns unique visitors query over 30 days' worth of logs :
Using dc() it was a lot slower. H...
by
khourihan_splun
Splunk Employee
in
Splunk Search
08-07-2013
|
5
|
3
| ||
|
|
I have a 2015 log that I need to analyze
I have a 2015 Aruba log I need to analyze. The log does not have the ye...
by
Macphisto
Loves-to-Learn Lots
in
Splunk Search
04-14-2023
|
0
|
7
| ||
|
|
Hello Everyone,
Below is the set of the log response pattern:
"message":{"input":"999.111.000.999 - - [06/Apr/2...
by
super_edition
Path Finder
in
Splunk Search
04-14-2023
|
0
|
10
| ||
|
|
I have noticed that the event_ids that I cannot find documentation for are associated with two eventtypes together. H...
by
yoshileigh66
Explorer
in
Splunk Search
04-14-2023
|
0
|
2
| ||
|
|
I have two events one is
Index=x source type= xx "String" extacted fields s like manid,actionid,batch I'd
2nd ...
by
Sekhar
Explorer
in
Splunk Search
04-14-2023
|
0
|
3
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Become An Expert
Top Labels
-
administration
3 -
alert action
3 -
alert condition
2 -
Analytics Workspace
2 -
authentication
1 -
chart
941 -
Classic dashboard
1 -
configuration
2 -
correlation search
1 -
count
996 -
Dashboard Studio
3 -
data
3 -
data model
1 -
development
6 -
distributed search
1 -
drilldown
1 -
email
1 -
eval
2,587 -
field extraction
1,996 -
fields
2,037 -
host
1 -
index
4 -
indexer
2 -
inputs.conf
1 -
intermediate forwarder
1 -
introduction
5 -
join
1,050 -
JSON
2 -
Linux
2 -
login
1 -
lookup
1,538 -
metadata
304 -
monitoring console
2 -
other
67 -
panel
2 -
PDF
1 -
Python
1 -
regex
1,489 -
report acceleration
2 -
rex
1,241 -
SAML
1 -
saved search
5 -
scheduled search
4 -
scripted input
1 -
search
1 -
search head
3 -
search job inspector
670 -
search peer
1 -
simple XML
1 -
source
1 -
sourcetype
4 -
Splunk Web Framework
1 -
splunk-assist
1 -
splunkd
1 -
stats
3,521 -
subsearch
1,703 -
summary indexing
4 -
table
1,732 -
time
1 -
timechart
1,149 -
transaction
449 -
transforms.conf
1 -
troubleshooting
8 -
tstats
561 -
universal forwarder
5 -
using Splunk Cloud
2 -
using Splunk Enterprise
13 -
Windows
3
- « Previous
- Next »
Get Updates on the Splunk Community!
Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 3)
Welcome back to Splunk Classroom Chronicles, our ongoing blog series that pulls back the curtain on Splunk ...
Operationalizing TDIR: Building a More Resilient, Scalable SOC
Optimizing SOC workflows with a unified, risk-based approach to Threat Detection, Investigation, and Response ...
Almost Too Eventful Assurance: Part 1
Modern IT and Network teams still struggle with too many alerts and isolating issues before they are notified. ...
