Splunk Search

Community Activity

Rails long requests get split in to 2 events Hi, I have rails requests which take more then 15 sec. Rails write to the production.log in 2 steps. It seem that sp... by aviramradai Explorer in Splunk Search 09-08-2013 0 1	0	1
Performing a join against the saved results of a scheduled saved search I have been using a complex search query (it's difficult for me to post it here without exposing internal information... by rtadams89 Contributor in Splunk Search 09-06-2013 2 4	2	4
Incorrect License Usage being returned I am attempting to setup an alert to warn me of license usage but I am receiving bogus information back. This is sea... by rmcdougal Path Finder in Splunk Search 09-06-2013 1 7	1	7
splunk search language Hi guys... I have been working on a few splunk apps during the last 6 months... in that time i have ran into a pecul... by kenchisho Path Finder in Splunk Search 09-06-2013 0 5	0	5
Meaning of .? Hi, I am extracting a field and when i have .? i am getting right value. But when i have .* it is giving unnecessar... by xvxt006 Contributor in Splunk Search 09-06-2013 0 5	0	5
Get the field name for a given value out of an event? Hi, let's say we have an event with the following information: "Network Information: Client Address: ee:fa:23:12... by fbl_itcs Path Finder in Splunk Search 09-06-2013 0 5	0	5
文字の多いイベントに対し、REGEXが正しく処理されないイベントをインデックスする前に特定のフィールドの内容を transforms.conf 内の REGEX で加工しているが、4500適度（かそれ以上）の文字のイベントに対し、REGEXで指定した正規表現が正しく処理されない。 by cwl Contributor in Splunk Search 09-05-2013 0 1	0	1
Need help with a rex extraction Hello I have a string like this a SysStatsUtilizationDiskSpace=17.60% /, SysStatsUtilizationDiskSpace=11.25% /stor... by theouhuios Motivator in Splunk Search 09-05-2013 0 1	0	1
Field extraction will not go away unable to find in manager or props.conf Hi, I have a field called UserID appearing in my searches that in two of my sourcetypes within the same index. Ive s... by jericksonpf Path Finder in Splunk Search 09-05-2013 0 9	0	9
output from both nix and win matchup issue I am looking for logon errors from both windows and nix systems and trying to get as much data to match up as proposa... by hartfoml Motivator in Splunk Search 09-05-2013 0 4	0	4
Overriding popup.js Where do I need to place a copy of the popup.js script in order to override it? Is it even possible? I have tried pl... by werz New Member in Splunk Search 09-05-2013 0 1	0	1
How do I clear my search history? I'd like to clear my search history. How do I do that? by Simon_Shelston Splunk Employee in Splunk Search 09-05-2013 10 4	10	4
use a result value, as fieldname in subsearch I have a first search, that return "system1" Then I want to use that value, to get the appropriate value out of a su... by sbsbb Builder in Splunk Search 09-05-2013 0 6	0	6
HiddenPostProcess 10000 search results limit In my advanced XML, an accelerated saved search is initially run that provides results without any limitations in ter... by Parameshwara Path Finder in Splunk Search 09-04-2013 0 1	0	1
Subsearch didn't work with starttimeu passed by variable of main search Hi, I'm trying to calculate daily time shift baseline by this query source="MySource" \| eval ReportKey="Today" \| eva... by ejpulsar Path Finder in Splunk Search 09-04-2013 0 2	0	2
transaction duration between subevents Is it possible to calculate all the duration between subevents in a transaction? For example.. Here's the search: ... by aaronkorn Splunk Employee in Splunk Search 09-04-2013 0 2	0	2
LDAP users list Hi, Does anyone know a Splunk search that when executed returns a list of all users that have access to Splunk via L... by Ant1D Motivator in Splunk Search 09-04-2013 1 1	1	1
timechart with timezone I have executed the command "timechart" and got output in the below formate. 4/1/13 12:00:00.000 AM 5/1/13 12:00:00.0... by vishal1 New Member in Splunk Search 09-04-2013 0 3	0	3
Timechart not showing all events with small spans I've got a timechart hooked up to a particular source in my indexes, generated by a script which logs events looking ... by Karunamon Explorer in Splunk Search 09-03-2013 0 1	0	1
transaction time between events Hello, We are looking at login times and how long it takes a user to login to our Citrix servers. We have the follow... by aaronkorn Splunk Employee in Splunk Search 09-03-2013 0 3	0	3
Overlapping and truncated axis labels on JS Charts I moved from Flash Charts to JS Charts for PDF generation support. The X axis (Y axis for bar charts) labels now over... by RohiniJindam Path Finder in Splunk Search 09-03-2013 0 3	0	3
Search works manually but not in dashboard This search works perfectly in our production environment but not in the new Dev environment. However it does return ... by kmattern Builder in Splunk Search 09-03-2013 0 5	0	5
Stats avg() to include zero values Hi I'm trying to calculate the average number of requests for a user, lets say user1 across the space of a week. Let... by malcolmtkelly Explorer in Splunk Search 09-03-2013 0 1	0	1
AND in If statement I have a set of logs showing order journeys between countries - I want to create a report that show the destination c... by rlautman Path Finder in Splunk Search 09-03-2013 0 4	0	4
Searching Splunk So, I have just been introduced to this tool through my work. I had a question about how to link some search criteria... by anamolous86 Engager in Splunk Search 09-02-2013 0 3	0	3