Splunk Search

Community Activity

Need help with conditions I Have a db query that returns data as below. Now i want 1. to get a search result where all the rows where rank <1... by kavekon New Member in Splunk Search 10-08-2013 0 4	0	4
No fields to display for this search in GUI Customer reportsthat thet are running a search via the GUI. After displaying the results, they are seeing problems w... by dshakespeare_sp Splunk Employee in Splunk Search 10-07-2013 3 7	3	7
Are you extracting the controller field? I do not see it in the props.conf by aalapsharma Engager in Splunk Search 10-07-2013 0 3	0	3
Finding all instances of a field greater than the avg of that field during a 15 minute span Hi All, I have a field "TotalResponse" which is the total response time for a web request. I'm attempting to determi... by kultar Engager in Splunk Search 10-07-2013 0 4	0	4
replace found data with "fix" and no data with "NULL" I'm trying to perform a search where if there is data found in a specific field , then I want the report to replace t... by CharterBT Explorer in Splunk Search 10-07-2013 0 13	0	13
eval with mathematical calculations? I'm trying to do something a little wonky here, so please bear with me. The code below is the logical flow of what I'... by tfitzgerald15 Explorer in Splunk Search 10-07-2013 0 3	0	3
Convert seconds to MM:SS.ms Hi I am trying to convert seconds.milliseconds for ex 4.6566, 0.55,1.2 to Minutes:Second.milliseconds format I tried... by splunk_learner Explorer in Splunk Search 10-07-2013 1 6	1	6
Concatenate subsequent values of a field within a transaction I have a log with requests with an ordernumber and a response. The response is: 100 - success or 1400,1401,1402 - var... by uxYcF New Member in Splunk Search 10-07-2013 0 1	0	1
Use "Data Model" definitions to extract fields in Search I've already created a lot of field extractions in my Data Model definition to create Pivot views. Is there a way to... by FRoth Contributor in Splunk Search 10-07-2013 2 2	2	2
Search latest indexed file for different sourcetype Hi, I have 3 sources from which the files are loaded into Splunk, the time of arrival of files and frequency is diff... by meenal901 Communicator in Splunk Search 10-07-2013 0 1	0	1
Unidimensional histogram (chart without "by" clause) I have difficulties to create a simple, unidimentional histogram. Suppose you have a log similar to this: host=host1 ... by yoho Contributor in Splunk Search 10-07-2013 2 4	2	4
Exception when running a search in Hunk I see the following exception in search.log when running a Hunk search against my cluster: Exception in thread "main... by Ledion_Bitincka Splunk Employee in Splunk Search 10-06-2013 0 1	0	1
How to change the text box layout (not panel layout)? Hi Splunkers, I have a question about text box layout in dashboard or view. In simple XML, we can look at text box i... by sunrise Contributor in Splunk Search 10-06-2013 0 3	0	3
Create a table in my search when I enable/disable account but not when I create account. Hello guys, I have a question about a query search. I have two queries associated with Windows. My first query is... by dfigurello Communicator in Splunk Search 10-06-2013 1 2	1	2
Substitute a value in the search result I have a search result which returns me the following Username,TimeOnVPN user1,185.25 user2,1920.25 ... ... ... user... by ppurokit Path Finder in Splunk Search 10-06-2013 0 2	0	2
Count number of Transaction every hour 2013-09-20 16:53:04,723 INFO[Thread-3]EndTime=20/09/2013 16:53:04 TransactionID=A, Event=completed, Result=sent 2013... by thinksplunk Engager in Splunk Search 10-04-2013 0 2	0	2
Help for timechart display hi this is mt search index=tm_idx host="server" "finished executing normally" \| rex field=_raw "(?i)Process\s\"(?<P... by ChhayaV Communicator in Splunk Search 10-04-2013 0 4	0	4
insert the earliest and latest in the DBquery Hello I'm breaking my brain for make one thing. I recovery the data from External database, in this point no problem... by radomo Explorer in Splunk Search 10-03-2013 0 2	0	2
How to limit primary search based on time interval from subsearch -- dynamic time interval ; time delta In order to query from an external firewall log that contains say "badwebsite.com" and join those results back throug... by TobiasBoone Communicator in Splunk Search 10-03-2013 3 6	3	6
Splunk web not showing login fields JAVAscript enabled Not able to see login fields when launching splunk web ... Javascript enabled in browser and no iptables issue etc ... by Mag2sub Path Finder in Splunk Search 10-03-2013 1 16	1	16
rex mode=sed syntax I apolagize for the simplicity of this question. I have scowered all over splunk answers and could find or make sense... by cschafer1 New Member in Splunk Search 10-03-2013 0 3	0	3
Data Discovery of Index Fields Does anyone know how to generate a report listing all fields (from an index) and their respective info (example follo... by aportela_work Explorer in Splunk Search 10-03-2013 0 3	0	3
"Write access to the proxy endpoint is disabled. " for any searches after upgrading from 5.0.4 to 6.0 I get the following error for all of my searches after upgrading from 5.0.4 to 6.0: Write access to the proxy endpoi... by DaClyde Contributor in Splunk Search 10-03-2013 0 7	0	7
Function results and evaluating them Soo - I got this great search to show how many hosts at each location we are getting logs from. I want to only disp... by rudy_dom Engager in Splunk Search 10-03-2013 0 1	0	1
eval macro with a case statement errors source="PerfMetrics" "OPEN PLAN" OSArch=64-bit PlanMode=Server \| transaction Guid startswith="OPEN PLAN START" endsw... by RVDowning Contributor in Splunk Search 10-03-2013 0 2	0	2