Splunk Search

Community Activity

extend a field value hello, i want to extend a number field to a defined length like: 1324 to 001234 45678 to 045678 How could i do that... by Oti47 Path Finder in Splunk Search 06-13-2013 0 2	0	2
I'm thinking index corruption, right? Search = index=index_root*\| stats first(_time) as latest last(_time) as earliest count(index) by index \| convert tim... by grijhwani Motivator in Splunk Search 06-12-2013 0 2	0	2
Add commas to Exchange Table Splunkers, I have been trying to add commas to all the default charts on the Exchange app. A few particular searches... by I-Man Communicator in Splunk Search 06-12-2013 0 1	0	1
Establishing a direction for a connection I have a table output that has a Source Address and a Destination Address. I would like to add a column to the table... by Akita881 New Member in Splunk Search 06-12-2013 0 3	0	3
bug with eval + isnull and field name with a numeric first character? hi, not sure if this is a bug or i am doing something wrong, I think it has something to do with a fieldname starting... by brettcave Builder in Splunk Search 06-12-2013 0 2	0	2
Mimicing groupby & join behavior to get group aggregates Referring to table below, If it started with only Col1 and Col2. In a relational DB I would do a groupby followed by ... by leecaf Explorer in Splunk Search 06-12-2013 0 8	0	8
Converting log time into a usable format I am trying to use Splunk to determine if there is a delay in processing from one of the logs being consumed. The de... by bcarr12 Path Finder in Splunk Search 06-12-2013 0 4	0	4
Is splunk counting key/value in referer too? Assuming I have an access log file with referer If I have 111.111.111.111 - - [.......] "GET /cart.do?action=check... by mplungjan Path Finder in Splunk Search 06-12-2013 0 4	0	4
Host state change We have 4 servers running. 2 active and 2 as offline. Doing a search similar to "hostname="MyServers*" sourcetype="... by rmorlen Splunk Employee in Splunk Search 06-12-2013 0 4	0	4
Historical Lookups Hi, I am encountering a problem in lookups. The problem is that whenever the lookup file gets updated with new data,... by saad_siddiqi Path Finder in Splunk Search 06-11-2013 0 2	0	2
how can i format the number field? Hi, Is it possible to format the output of the count field ?? sourcety="x" \| stats count as REQ REQ 11000 100 13... by rakesh_498115 Motivator in Splunk Search 06-11-2013 0 2	0	2
I want to see a table of the hosts that are in the first search but not in the second. We have firewalls sending SYSLOG into us. We also get traffic logs from the firewalls. What Im trying to do is first ... by ehastings1982 Explorer in Splunk Search 06-11-2013 0 5	0	5
End transaction somewhere in the middle. I have 20 records in a transaction. Each of those records has a status. Possible status are created, opened, closed,... by vanaepi Explorer in Splunk Search 06-11-2013 0 2	0	2
Transaction displaying multivalued fields alphabetically, not chronologically I'm creating a transaction that is displayed in the following table: table _time,src_ip,accountname,username,attack,... by responsys_cm Builder in Splunk Search 06-11-2013 1 2	1	2
how to obfuscate some text inside a python lookup script? Hi, in my App I have a python lookup script that do a connection with an external service. Into this script I create ... by RiccardoV Communicator in Splunk Search 06-11-2013 0 1	0	1
TIME FORMAT Hi, I have got a CDR file having entires as under, and I am trying to set the RECORD_DATE as the time stamp of event... by saad_siddiqi Path Finder in Splunk Search 06-10-2013 0 4	0	4
Splunk V5 - PDF generation of Dashboards Hi All, I'm new to Splunk and im exploring on Dashboards. When i generate the PDF using "Generate PDF" button, the ... by ppurokit Path Finder in Splunk Search 06-10-2013 1 4	1	4
Subsearch results differ from execution by itself Got 2 searches that searches in MAC address data exported daily: (1) Get the everyday count of unique MAC addresses ... by ww9rivers Contributor in Splunk Search 06-10-2013 0 5	0	5
Stats function per IP over time hey all, I'm trying to grab stats on firewall denied IPs per minute over a time frame (adjustable but standard at 15m... by twistedsixty4 Path Finder in Splunk Search 06-10-2013 0 1	0	1
Y-axis label using sideview utils Hi, By default, sideview displays stat(field) as legend and Y-axis label. We want to show just field as legend. We a... by strive Influencer in Splunk Search 06-10-2013 1 3	1	3
Checkpoint logs in splunk requirements Hi, I've been asked to configure this in our environment and I was hoping to get a quick answer in these questions: ... by clymbouris Path Finder in Splunk Search 06-10-2013 1 1	1	1
How do I specify results from a log where fields repeat with different values? I am trying to create a visualization of a search that I am performing which brings up Security Audit log files that ... by BlackZao Explorer in Splunk Search 06-10-2013 0 3	0	3
Results from two different index I have internal logs (index=loghistory) that have a field for unique users, I need to list the IP addresses from each... by JoeSco27 Communicator in Splunk Search 06-10-2013 0 2	0	2
Nested Transaction Time Due to various cross references, I am forced to use nested transactions. In other words, I group several events into ... by vanaepi Explorer in Splunk Search 06-10-2013 1 2	1	2
Change search app visualization library Due to some limitations in regards to the number of printable events in the built-in charts I want to use D3 or maybe... by user456 Engager in Splunk Search 06-10-2013 0 1	0	1