Splunk Search

Splunk Search
Community Activity
xxhavok1xx
Hi, every night my server team brings down specific groups of servers and performs maintenance on them. Sometime late...
by xxhavok1xx Explorer in Splunk Search 06-16-2013
0 2
0
2
adomila
Hi, Basically, I'm trying to correlate 2 datasources with 2 fields. For example, I have datasource1 and datasource2 t...
by adomila Explorer in Splunk Search 06-16-2013
0 11
0
11
ssorlie
I'm using Splunk to interrogate web logs. Users of our site can select one or more parameters in their data requests...
by ssorlie New Member in Splunk Search 06-16-2013
0 2
0
2
stokecoll
Guys, apologies if this has already been asked before and there is a KB article for this. We are looking to archive ...
by stokecoll New Member in Splunk Search 06-14-2013
0 1
0
1
tomwahab
Hello, Can Splunk search client machines System log that has Event ID 7? We need to scan and retrieve hostnames that...
by tomwahab New Member in Splunk Search 06-14-2013
0 5
0
5
Jordan_Brough
I'd like to select the earliest events broken down by category. i.e. I would like to see something like this: error...
by Jordan_Brough Path Finder in Splunk Search 06-14-2013
0 3
0
3
allan_newton
I have two sourcetypes src_type_data and src_type_scale. src_type_data contains two fields -----------------------...
by allan_newton Path Finder in Splunk Search 06-14-2013
0 1
0
1
hartfoml
so I can grep the look-up table to find an entry I can see the contents of the look-up table by doing this | inp...
by hartfoml Motivator in Splunk Search 06-14-2013
1 1
1
1
David
How can I specify the default index to use for a specific app? I have an App with a few inputs defined that put all ...
by David Splunk Employee Splunk Employee in Splunk Search 06-14-2013
4 7
4
7
erikross
Hey, was here yesterday, made minor improvements... I have a set of data where each message sent corresponds to an i...
by erikross Explorer in Splunk Search 06-14-2013
0 3
0
3
twistedsixty4
hey all, im working on a network overview dashboard. what i currently have is a saved search showing the last 7 days ...
by twistedsixty4 Path Finder in Splunk Search 06-14-2013
0 3
0
3
hartfoml
I need to search my firewall logs for the past year and find unique source names I can do this search index=firewall...
by hartfoml Motivator in Splunk Search 06-14-2013
0 2
0
2
agodoy
Is it possible to do a search with a join and the events from the join search be relative to the time of the events o...
by agodoy Communicator in Splunk Search 06-14-2013
0 4
0
4
BDAS
Hi everyone! I would like to display several areas (stacked) or columns in a specific order. Here is my charting com...
by BDAS Explorer in Splunk Search 06-14-2013
1 3
1
3
Ak_C
I'm new to the Splunk Search and trying to learn it. I am not from Scripting BG so need help here. I have extraction ...
by Ak_C New Member in Splunk Search 06-14-2013
0 1
0
1
lain179
Hi, I have log lines that looks like this Fetching documents "FileName1.doc", "FileName2.xls", "FileName10.jpg", ...
by lain179 Communicator in Splunk Search 06-13-2013
0 1
0
1
jangid
when I search with below query sourcetype=my_log UUID="3fc5e6c2-57b4-4e59-a3c0-8115f5ec74a1" search result will a...
by jangid Builder in Splunk Search 06-13-2013
0 5
0
5
mflamerich
I have an input value that changes steadily (at constant rate, either increasing or decreasing), and Splunk is captur...
by mflamerich Explorer in Splunk Search 06-13-2013
1 1
1
1
Loscil
For a game, my logs log two times, a login event and a logoff event. What I want to do is calculate the total online ...
by Loscil Explorer in Splunk Search 06-13-2013
0 2
0
2
rahuljayz
I am new to SPL. I want to get all mongo queries from my mongo logs which take more than 5 ms to execute. My mongo lo...
by rahuljayz New Member in Splunk Search 06-13-2013
0 2
0
2
bojanz
Hi, I'm having some issues with the nullValueMode with FlashChart. It appears (at least with 4.3.3, have to test if...
by bojanz Communicator in Splunk Search 06-13-2013
1 10
1
10
pero1234
How to set non clickable columns audittrail, linux_audit and scheduler in drill down table like for column OTHER in p...
by pero1234 Path Finder in Splunk Search 06-13-2013
0 2
0
2
Oti47
hello, i want to extend a number field to a defined length like: 1324 to 001234 45678 to 045678 How could i do that...
by Oti47 Path Finder in Splunk Search 06-13-2013
0 2
0
2
grijhwani
Search = index=index_root*| stats first(_time) as latest last(_time) as earliest count(index) by index | convert tim...
by grijhwani Motivator in Splunk Search 06-12-2013
0 2
0
2
I-Man
Splunkers, I have been trying to add commas to all the default charts on the Exchange app. A few particular searches...
by I-Man Communicator in Splunk Search 06-12-2013
0 1
0
1
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...