Splunk Search

Community Activity

How can we filter our query in days like Monday to Friday and calculate their average value? How can we filter our query in days like Monday to Friday and calculate their average value. For eg, I am getting dat... by sabasiddiqui Loves-to-Learn in Splunk Search 05-10-2023 0 6	0	6
How to filter time which starts from Jan 01-23? I have added a Time filter for my charts in splunk but i want the default to be from 01-JAN-23, But the issue is when... by Vish Explorer in Splunk Search 05-10-2023 0 4	0	4
How to merge search from two different hosts? Hello I have a list of host pairs e.g. hostA1 and hostA2, hostB1 and hostB2, etc. I'm currently trying to search for ... by kimsplunk Observer in Splunk Search 05-10-2023 0 3	0	3
How to achieve timechart query group by multiple fields? Hi, I am trying to create a line graph where I want to show job status overtime. So I want 1 line for failed and anot... by splunkuser320 Path Finder in Splunk Search 05-10-2023 0 2	0	2
Help with extracting specific symbols/text from raw log Hi All,Can anyone help me create a regex to extract the bolded parts from the following _raw log, please?some text - ... by DanAlexander Communicator in Splunk Search 05-10-2023 0 5	0	5
What exactly are the rules/requirements for using "\|tstats append=t"? I must join some exceedingly large DM datasets but I cannot get \|tstats prestats=t append=t to work consistently in a... by woodcock Esteemed Legend in Splunk Search 05-10-2023 4 10	4	10
How to find individual averages of each stages{}.duration by stages.name{} in Splunk for Jenkins app? I have some SPL that generates a table that looks like this for several builds of a job: Prepare1.003Execute Test44.5... by joelwizard Explorer in Splunk Search 05-10-2023 0 6	0	6
Which version of dedup is better? A colleague of mine uses the following dedup version:\| strcat entity "-" IP "-" QID "-" Port "-" Tracking_Method "-" ... by danielbb Motivator in Splunk Search 05-10-2023 0 3	0	3
How to sort values from append search? Hi, Kindly help on sorting the values from append query as below: index=* source=*\|stats sum(Tot) sum(in_prog) sum(su... by Lavender Loves-to-Learn Everything in Splunk Search 05-10-2023 0 3	0	3
How do I write a search that can match a word from two different lookup files? Hello, I have 2 different files names lookup1.csv and lookup2.csv, which have column A and column B in both. Ho... by satyaallaparthi Communicator in Splunk Search 05-10-2023 0 3	0	3
How to group multiple methods responsetime into intervals and obtain count? Hi All,I have a requirement where I need to group count of methods responsetime into different time intervals.Below i... by Splunk_321 Path Finder in Splunk Search 05-09-2023 0 2	0	2
Working with the NOT command So I am trying to search through some results and I am trying to display the results that ExitStatus=0 which means it... by jialiu907 Path Finder in Splunk Search 05-09-2023 0 1	0	1
How to make timeline drilldown time parameters? I'm trying to do a drilldown of a timechart where the Y-axis field is Domain and the value is a count, X-axis is time... by michaeler Communicator in Splunk Search 05-09-2023 0 1	0	1
How to create strcat field names with spaces? I'm working with two similar, but not quite the same datasets and I want to create a table which displays data from e... by jlaska Engager in Splunk Search 05-09-2023 0 2	0	2
How to write events within 2 minutes of the first event for the same host? I am working on a query to report on events generated within 2 minutes of the first event for the same host. In the f... by Splunk77 Explorer in Splunk Search 05-09-2023 0 2	0	2
How do we separate the multiple columns of fields? Hi all, I'm looking for the search how we can seperate the multiple columns in to single column Ex: Host sca... by Raj Builder in Splunk Search 05-09-2023 0 1	0	1
How to use streamstats and identify consecutive events? Hi, We have applications Availability data in splunk.With below SPL, I got this data. Base_SPL..\| streamstats reset_o... by gvk_us Explorer in Splunk Search 05-09-2023 0 7	0	7
How to list out the field in tabular format? Hi All, How do we list out the fields in tabular format..Eg: hostname action windows allowed ... by Raj Builder in Splunk Search 05-09-2023 0 1	0	1
How to get higher up value for the columns in my chart when ceil isn't working? In the below chart if u can see i have used round and avg to first_response and closure time. But my values are not a... by Vish Explorer in Splunk Search 05-09-2023 0 4	0	4
How to append results to dropdown? I have a dashboard that has a dropdown which takes in the values from a csv file. Is there a way I can add on to the ... by thenormalone Path Finder in Splunk Search 05-08-2023 0 3	0	3
Add a number of hours to a search field? I have a field returned with some search data that contains a date and time in UTC. I would like to be able to add 1... by balcv Contributor in Splunk Search 05-07-2023 0 2	0	2
How to transfer decimal value into ASCII code in text string? Hi all, I have a field named as item_description which is an array of decimal value, which represents the descriptio... by Jouman Path Finder in Splunk Search 05-06-2023 0 4	0	4
How do I escape single quote within DBXquery SQL like command? how do I escape single quote within DBXquery SQL like commandFor example: content = '. . . . . . src_port': 20, 'd... by LearningGuy Motivator in Splunk Search 05-06-2023 0 1	0	1
How to use a lookup in a subsearch to search raw data values to include in the main search? I would like to import a lookup table in a subsearch for a raw value search: index=i1 sourcetype=st1 [inputlookup us... by landen99 Motivator in Splunk Search 05-06-2023 2 6	2	6
How can I convert Key value into field value data? The data is in key value format instead of field value due to limitation of fields to be used. There are 10+ key valu... by srv007 Path Finder in Splunk Search 05-06-2023 0 9	0	9