Splunk Search

Community Activity

[RESOLVED] Regex works with rex but errors in transforms.conf [RESOLVED] The extract was defined in the transforms.conf in an app which had the "Sharing for config file-only objec... by ww9rivers Contributor in Splunk Search 10-02-2013 0 3	0	3
Any way to fetch logs via ssh I have a splunk server and ssh access to a server with read-only access to logs. I can ssh from the machine on which ... by hatim New Member in Splunk Search 10-02-2013 0 2	0	2
Extracting an alphanumeric expression from a line I have a logger like below and I need to extract the alphanumeric word from this line- "My employeeID E1233244345 is... by shilpi New Member in Splunk Search 10-02-2013 0 2	0	2
Search job inspector discrepancies I have a search inputs a fairly large lookup table (150 MB). The execution costs are shown as: Execution costs Dura... by responsys_cm Builder in Splunk Search 10-02-2013 0 1	0	1
How do I search for a Term, then get the Percentage out of Total? I'm writing a search query that needs to look for a specific word SPECIFIC_WORD in the logs of host HOST_X and then d... by mkarimi Path Finder in Splunk Search 10-02-2013 0 2	0	2
Resolve IP to Host I am creating a failed login report from WMI security log entires. My temporary search command looks like: sourcety... by lain179 Communicator in Splunk Search 10-02-2013 0 5	0	5
Is it possible to order the entities on the REST API by order of date instead of alphabetically? As title. I'm using the setup.xml and the admin/passwords endpoint, though I would create a custom endpoint if needed... by ralphmct Path Finder in Splunk Search 10-02-2013 0 1	0	1
Help with regular expressions I have a syslog where I want to extract only these 3 events: 1) Engine Busy Utilization CPU Busy I/O Busy ... by javierlf Explorer in Splunk Search 10-02-2013 0 2	0	2
REGEX to discard specific event containing " Allow " but not them followad by 2 specific strings ? Hello, i need to find the REGEX to allow me to filter what splunk will index. As it is firewall Logs, it gererates ... by fgilain Engager in Splunk Search 10-02-2013 0 11	0	11
Extract second instance of a field in multiple line log In the following log I want to extract the second instance of the "Security ID" field. I have tried a few different r... by kevinshipley New Member in Splunk Search 10-02-2013 0 6	0	6
Abount splunk 6 Hi! I would like to ask question regarding to Splunk 6. Is it possible to use the configuration files(search.conf ,... by yuwtennis Communicator in Splunk Search 10-02-2013 0 2	0	2
Indexed data redirection I want to redirection the indexed data into separate index through transforms.conf Post redirection, does the data a... by soe_hlawin Explorer in Splunk Search 10-01-2013 0 2	0	2
Percentage Eval Hi All, There are a lot of percentage questions on this forum but I already know how percentages work but the Eval d... by justinfranks Path Finder in Splunk Search 10-01-2013 0 3	0	3
Group all events by same transaction 2013-09-25 23:23:34 .....TransactionID=abc 2013-09-25 14:23:34 .....TransactionID=dec 2013-09-24 05:42:53......Transa... by thinksplunk Engager in Splunk Search 10-01-2013 0 3	0	3
Using delta with events that need to be grouped by another parameter I have events that contain a counter of a number of packets sent. Each event applies only to a single port. How do I... by tomdee New Member in Splunk Search 10-01-2013 0 1	0	1
Correlation known events with all other sources So I have a search that can be run that returns 12 events over a 60 minute period from a single known source. I woul... by Cuyose Builder in Splunk Search 10-01-2013 0 6	0	6
Top to a sum Hello! I try to make the sum of a field, but then need to get the percentage occupied by each of the first 4, and% oc... by jrodriguezap Contributor in Splunk Search 10-01-2013 0 4	0	4
What version of Splunk can receive traps via SNMPv3? If yes, is there any specific documentation about configuration of Splunk for SNMPv3? Thanks by splunk_user_btr New Member in Splunk Search 10-01-2013 0 3	0	3
Running same Search for different time periods in an automated way Hi folks, We had a major issue with one of our downstream systems. Hence we have been requested to provide splunk da... by koshyk Super Champion in Splunk Search 10-01-2013 2 6	2	6
Sum until contition is met, then begin new sum Hello everybody, While doing logfile analysis, I stumbled across a problem. The important part of my logs looks like... by hRun Path Finder in Splunk Search 10-01-2013 0 2	0	2
Plotting three fields on timechart hi, hi, How can i plot value of three fields on timechart ProcessName duration(Sec) _time SaveAllData 1.2 2013-09... by ChhayaV Communicator in Splunk Search 10-01-2013 0 9	0	9
Regex from source if i need to extract "num" from source=c:/documents/app/test1/test12/controlnum34/12.log and tag as field, how to go ... by thinksplunk Engager in Splunk Search 10-01-2013 0 11	0	11
Help with timechart display hi, this is my search index=tm_idx host="server" \| rex field=msg "(?i)TM1\sserver\sload\stime\s(secs)\s=\s(?P\w+)"... by ChhayaV Communicator in Splunk Search 09-30-2013 0 6	0	6
timechart , streanstats Question sourcetype=syslog \| timechart span=1m count by Protocol \| streamstats sum() avg() The result of this query is as fo... by qfjp Explorer in Splunk Search 09-30-2013 0 3	0	3
Story of the Tread: parsing application log files Hi, new to Splunk and would like to use it to parse application logs where every log entries is in the format shown ... by JHanquetSpluk Engager in Splunk Search 09-30-2013 0 3	0	3

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Splunk Search

[RESOLVED] Regex works with rex but errors in transforms.conf

Any way to fetch logs via ssh

Extracting an alphanumeric expression from a line

Search job inspector discrepancies

How do I search for a Term, then get the Percentage out of Total?

Resolve IP to Host

Is it possible to order the entities on the REST API by order of date instead of alphabetically?

Help with regular expressions

REGEX to discard specific event containing " Allow " but not them followad by 2 specific strings ?

Extract second instance of a field in multiple line log

Abount splunk 6

Indexed data redirection

Percentage Eval

Group all events by same transaction

Using delta with events that need to be grouped by another parameter

Correlation known events with all other sources

Top to a sum

What version of Splunk can receive traps via SNMPv3?

Running same Search for different time periods in an automated way

Sum until contition is met, then begin new sum

Plotting three fields on timechart

Regex from source

Help with timechart display

timechart , streanstats Question

Story of the Tread: parsing application log files

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Event Series: Telemetry Pipeline Management

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation