Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk Search
Splunk Search
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | I have my DNS and DHCP logs in one file and I would like to set "TZ = UTC" on the sourcetype. My problem is what wou... by hartfoml Motivator in Splunk Search 09-11-2013 0 3 | 0 | 3 | |
 | Hello Splunkers, I'm trying to run a search against some logs that include a wild carded hostname, two error messages... by lbogle Contributor in Splunk Search 09-11-2013 0 2 | 0 | 2 | |
 | Hello, I have a dashboard for windows event viewer. There are two pulldowns which populates the relevant fields. But ... by linu1988 Champion in Splunk Search 09-11-2013 0 8 | 0 | 8 | |
| | Hi. For some reasons, I turned off SSL for Splunk REST API. Everything is fine, except the Splunk DB Connect app. j... by yitzarad Path Finder in Splunk Search 09-11-2013 4 4 | 4 | 4 | |
| | My current Splunk search looks like this: sourcetype="ContributionWebApiUat" DbResponseTime=* | chart values(DbRespo... by philallen1 Path Finder in Splunk Search 09-11-2013 0 1 | 0 | 1 | |
| | In my search I am at a stage where I have something like below. USERID EVENT STATUS 1 HELLO PASS 2 HELLO F... by theeven Explorer in Splunk Search 09-11-2013 1 9 | 1 | 9 | |
| | Due to some mistake, I am getting this messages: received event for unconfigured/disabled/deleted index='2013-03-10 ... by mkelderm Path Finder in Splunk Search 09-11-2013 0 6 | 0 | 6 | |
| | Hi, I have a transform like this - it works fine except when I need to look up a field [specialLogFile] REGEX = ^([... by mplungjan Path Finder in Splunk Search 09-11-2013 0 2 | 0 | 2 | |
| | I have syslog files that are in the directory structure of system/Hosts/year/month/day I've been able to get the ind... by pljulien New Member in Splunk Search 09-11-2013 0 1 | 0 | 1 | |
| | My query is the following index="_internal" | table host | stats values(host) output: values(host) host1 host2 I w... by ERICKWONG Explorer in Splunk Search 09-10-2013 0 6 | 0 | 6 | |
| | We have a dashboard that I would like to use tstats to generate the data, and run a search ever 2 minutes using tscol... by sf_user_199 Path Finder in Splunk Search 09-10-2013 1 2 | 1 | 2 | |
| | Is there a way to use a database lookup in the way you would using inputlookup? If I wanted to just dump the contents... by rdownie Communicator in Splunk Search 09-10-2013 1 1 | 1 | 1 | |
| | Is it possible in inputs.conf in windows machine to use host=$ I tried using: host=$computername but in the inde... by parth_jec Path Finder in Splunk Search 09-10-2013 3 1 | 3 | 1 | |
 | Hi, What is the difference between last(X) and latest(X) functions for stats. I tried both in searches and i get sam... by strive Influencer in Splunk Search 09-10-2013 3 2 | 3 | 2 | |
| | Splunk Version : 4.3.4 OS : Redhat Message : SavedSplunker - Max alive instance count=1 reached for saved search_id... by joy76 Path Finder in Splunk Search 09-10-2013 1 1 | 1 | 1 | |
| | I need to have a search that uses: index="pt_app_siebel" SWEMethod="ReconfigureCXProd" starttime=9/6/2013:00:00:00 l... by TiagoMatos Path Finder in Splunk Search 09-10-2013 0 5 | 0 | 5 | |
| | Hello everyone, I have a table like the below example: || Protocol || Count || || TCP || 500 || || UDP || 200 || ... by ppurokit Path Finder in Splunk Search 09-10-2013 0 1 | 0 | 1 | |
| | Hi, I am planning to capture all the URIs with word chaser (case in sensitive). I have used this | regex uri="(?i)C... by xvxt006 Contributor in Splunk Search 09-10-2013 0 6 | 0 | 6 | |
| | Hello, I have a table that returns with these fields: AvgLow and AvgLowNOW, but they appear many times, like this Av... by TiagoMatos Path Finder in Splunk Search 09-10-2013 0 6 | 0 | 6 | |
| | Good Day! Given the following data... srcdst1.2.3.49.8.7.61.2.3.49.8.7.61.2.3.49.8.7.64.3.2.16.7.8.91.2.3.45.6.7.8 ... by splunkhelp Explorer in Splunk Search 09-10-2013 1 1 | 1 | 1 | |
| | I have a map with Map and a SetMulitmap and I'm not really familiar with splunk at the moment. So how do I search i... by mirjam_labrenz New Member in Splunk Search 09-10-2013 0 1 | 0 | 1 | |
| | I am looking for regex to capture all the URIs which includes "chaser" (case insensitive). I have used this <base s... by xvxt006 Contributor in Splunk Search 09-09-2013 0 2 | 0 | 2 | |
| | I'm pretty new to Splunk, so hopefully this is an easy question. I've looked all over the community questions and I ... by whathuh New Member in Splunk Search 09-09-2013 0 2 | 0 | 2 | |
| | Greetings, My journey continues. Now I would like to have a lookup match either the source or destination IP to an ... by ccsfdave Builder in Splunk Search 09-09-2013 0 3 | 0 | 3 | |
| | The following gives me exactly what I want host=****** Failed_Reason minutesago=15 | rex "\>(?<Failed_Reason>.*?)\<"... by ebailey Communicator in Splunk Search 09-09-2013 0 4 | 0 | 4 |
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Become An Expert
Top Labels
-
administration
3 -
alert action
3 -
alert condition
2 -
Analytics Workspace
2 -
authentication
1 -
chart
946 -
Classic dashboard
1 -
configuration
2 -
correlation search
1 -
count
1,006 -
Dashboard Studio
3 -
data
3 -
data model
1 -
development
6 -
distributed search
1 -
drilldown
1 -
email
1 -
eval
2,614 -
field extraction
2,021 -
fields
2,063 -
host
1 -
index
4 -
indexer
2 -
inputs.conf
1 -
intermediate forwarder
1 -
introduction
5 -
join
1,060 -
JSON
2 -
Linux
2 -
login
1 -
lookup
1,566 -
metadata
309 -
monitoring console
2 -
other
177 -
panel
2 -
PDF
1 -
Python
1 -
regex
1,499 -
report acceleration
2 -
rex
1,250 -
SAML
1 -
saved search
5 -
scheduled search
4 -
scripted input
1 -
search
2 -
search head
3 -
search job inspector
683 -
search peer
1 -
simple XML
1 -
source
1 -
sourcetype
4 -
Splunk Web Framework
1 -
splunk-assist
1 -
splunkd
1 -
stats
3,565 -
subsearch
1,729 -
summary indexing
4 -
table
1,754 -
time
1 -
timechart
1,158 -
transaction
452 -
transforms.conf
1 -
troubleshooting
8 -
tstats
569 -
universal forwarder
5 -
using Splunk Cloud
2 -
using Splunk Enterprise
13 -
Windows
3
- « Previous
- Next »
Get Updates on the Splunk Community!
May 2026 Splunk Expert Sessions: Security & Observability
Level Up Your Operations: May 2026 Splunk Expert Sessions
Whether you are refining your security posture or ...
Network to App: Observability Unlocked [May & June Series]
In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...
SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...
Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...
