Thread Info | |||||
---|---|---|---|---|---|
Spluk is indexing records from DNS Debug logs just fine, but I'd like to extract and transform the domain names in th...
by
meatago
Explorer
in
Splunk Search
07-10-2010
|
2
|
5
| |||
I've been trying variations of this: /opt/splunk/bin/splunk search "10.3.16.31" -latest_time '-4h@h' but it doesn't l...
by
glsplunk
New Member
in
Splunk Search
07-22-2013
|
0
|
2
| |||
I'm attempting to figure out the average reboot times of a server with the following search:
index=main host=MYSER...
by
dang
Path Finder
in
Splunk Search
07-11-2013
|
1
|
2
| |||
I have two lookup tables.The first is a list of all New York Customers and looks like the first listing below. The se...
by
kmattern
Builder
in
Splunk Search
07-12-2013
|
0
|
3
| |||
We have a system that produces several GB of logs per day. Of that there is only maybe a few MB that contains informa...
by
jameshgibson
Path Finder
in
Splunk Search
07-22-2013
|
0
|
2
| |||
Hi,
I have events of the form
----
name
----
Drive: C:
Free Space: 894.1 GB
Total Space: 953.1 GB
Drive: D:
Fr...
by
gelica
Communicator
in
Splunk Search
07-17-2013
|
0
|
4
| |||
I want to work with splunk in linux environment. I am using splunk version 5.0.3 and i have installed splunk app for ...
by
labani
Explorer
in
Splunk Search
07-20-2013
|
0
|
3
| |||
I've been thinking alot lately about the possibility of changing the Linux scheduler for the filesystems on my hot & ...
by
mikelanghorst
Motivator
in
Splunk Search
01-28-2013
|
1
|
2
| |||
I had a x-axis displayed over date_hour. 00,01,02... Is is possible to change it to display on a 3hour basis (00,03,0...
by
HelpMePlease
Explorer
in
Splunk Search
07-20-2013
|
1
|
5
| |||
Hi!
I need some help, to build an app.
How can I generate an event from search (or dashboard) and put it in spe...
by
szaboszilard
Path Finder
in
Splunk Search
05-15-2013
|
0
|
1
| |||
I have a firewall log and I would like to get the top 10 ports of a unique field named SPT(source port). After retrie...
by
cheukkay
Engager
in
Splunk Search
07-21-2013
|
0
|
2
| |||
Hi,
Please take a look at my table below which i came up with using this search command
sourcetype="json_onema...
by
sbnoobbb
Path Finder
in
Splunk Search
07-17-2013
|
1
|
3
| |||
So I have a bunch of data and somoene has decided they'd like to know the average turn around time for events.
I c...
by
eulalie
New Member
in
Splunk Search
07-19-2013
|
0
|
1
| |||
Hi.
i have field input_source_file and I need to make it a comma separated field so that I can group by that and s...
by
trkalva
Engager
in
Splunk Search
07-20-2013
|
0
|
1
| |||
Hi ,
Can we replace space in multi-value filed with comma ..?
Ex :
field : host current Values : server1 ser...
by
Ravan
Path Finder
in
Splunk Search
03-12-2013
|
0
|
2
| |||
I've created a lookup table that has three fields, nessus_id,osvdb_id,cve_id. The osvdb_id and cve_id fields are mult...
by
jambajuice
Communicator
in
Splunk Search
01-17-2011
|
2
|
1
| |||
I am looking at firewall logs. The destination port appears twice in some log lines. I want a search that will show m...
by
jalfrey
Communicator
in
Splunk Search
07-19-2013
|
0
|
3
| |||
What is the best method for managing a list of fields that will be used to populate (at least, but not limited to) a ...
by
aholzer
Motivator
in
Splunk Search
07-18-2013
|
0
|
6
| |||
From the url http://blogs.splunk.com/2009/09/14/enriching-data-with-db-lookups-part-2/
i read the following excerp...
by
bansi
Path Finder
in
Splunk Search
01-25-2011
|
0
|
1
| |||
I have a dashboard with pulldown menu and I want to call different saved searches depending upon the selection. Is th...
by
gpanicker
Explorer
in
Splunk Search
02-05-2013
|
1
|
8
| |||
While creating a saved search or a custom dashboard through one of the apps, is there a way to make sure that the nam...
by
spiketide
Engager
in
Splunk Search
06-13-2013
|
0
|
1
| |||
Though "| eval myfield=entropy(somefield)" would be awesome, it doesn't exist (yet?). Is there a known method for thi...
by
rshoward
Path Finder
in
Splunk Search
04-07-2011
|
4
|
7
| |||
I have Ubuntu 10.10 running Asterisk 1.6.
I want to use Splunk to index the Asterisk CDRs. It's one of the automat...
by
haonanzhang98
New Member
in
Splunk Search
12-13-2010
|
0
|
1
| |||
Hi,
I upgraded splunk version from 4.3.1 to 5.0.3 and I noticed indexes are moved to frozen state.
And after Up...
by
gudavasr
Path Finder
in
Splunk Search
07-18-2013
|
1
|
2
| |||
A transaction log format as follows:
------Procedure[xxx]'s input paramaters:
journalNo = 111111
custormerId = 222...
by
snowye
Engager
in
Splunk Search
11-23-2012
|
0
|
6
|