Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk Search
Splunk Search
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | I would like to do this permanently but let us try it on the command line first. command: source="C:\\..." | rex "^... by mplungjan Path Finder in Splunk Search 06-03-2013 0 18 | 0 | 18 | |
| | I have been unable to find a solution that works for me, and I have a very simple and popular query. I want to simpl... by Cuyose Builder in Splunk Search 06-02-2013 0 4 | 0 | 4 | |
| | Hi, I would like to get a line chart in which I can see a line for each trace level (verbose, info, warning, error).... by avitallange Explorer in Splunk Search 06-02-2013 0 2 | 0 | 2 | |
| | Trying to run a query for the bottom 10 results. I dont see a | bottom option. anyone have a creative way to do thi... by gdavid Path Finder in Splunk Search 06-02-2013 0 3 | 0 | 3 | |
| | I want to be emailed when someone asks a question about this app. How do I do that? I see that you can subscribe to... by Lowell Super Champion in Splunk Search 06-01-2013 2 1 | 2 | 1 | |
 | Hi, I am looking to display results a certain way and want to know if this is possible in Splunk. We have proxy log... by oleg106 Explorer in Splunk Search 06-01-2013 0 3 | 0 | 3 | |
| | Hello, My SearchHead(s) Search App’s Summary Dashboard does not display any information in the All indexed data, Sou... by bmacias84 Champion in Splunk Search 05-31-2013 0 3 | 0 | 3 | |
| | I'm having a query that has a sub-search. I want to pass one time-period to outer query and another to sub-search. I... by ma_anand1984 Contributor in Splunk Search 05-31-2013 0 6 | 0 | 6 | |
| | Hello everybody, is there a way to plan searches by editing a configuration file? Usually I plan searches through sp... by The_dark_side_o Explorer in Splunk Search 05-31-2013 0 4 | 0 | 4 | |
 | Apps固有のローカライズをしようとしたが変換されませんでした。 ローカライズの設定は以下の方法で実施しました。 splunk extract i18n -app でsampleAppのストリングを抽出しmessages.potを作... by HiroshiSatoh Champion in Splunk Search 05-31-2013 0 4 | 0 | 4 | |
| | I have deleted all entries for a remote host with a splunkforwarder (linux). After restarting Splunk the host still s... by ingersolls New Member in Splunk Search 05-31-2013 0 1 | 0 | 1 | |
| | Hi, I am working to translate Splunk in French using poedit. Some messages are translated in the messages.po and mes... by cealtea Engager in Splunk Search 05-31-2013 0 2 | 0 | 2 | |
| | I'm still a noob to writing splunk searches so please bear with me. I have a search that's currently generating 3... by etienvz Explorer in Splunk Search 05-30-2013 0 3 | 0 | 3 | |
| | Hello All, I've searched Answers here and I have not really found an answer to my problem, my apologies if I missed ... by cmwhite Explorer in Splunk Search 05-30-2013 0 3 | 0 | 3 | |
| | I generate a log file with one line per server with the time of the run as the splunk date.. something like 2013-05... by robgreen Path Finder in Splunk Search 05-30-2013 0 3 | 0 | 3 | |
| | I have a lookup table that I generate as a CSV dump of one of our databases. The database contains a list of all our ... by Ricapar Communicator in Splunk Search 05-30-2013 0 1 | 0 | 1 | |
| | Hi, i would like to get all the requests that start with / and there will be few alpha numeric characters and then en... by xvxt006 Contributor in Splunk Search 05-30-2013 0 5 | 0 | 5 | |
| | Does any one know how to create folders in "Searches & Reports" drop down menu to organize the searches? by ashafiee Explorer in Splunk Search 05-30-2013 0 1 | 0 | 1 | |
| | seems that the quota for searches includes postprocess searches, can someone confirm this? If, so can I get a link to... by jguarini Path Finder in Splunk Search 05-30-2013 1 14 | 1 | 14 | |
| | Hello Splunk Community, I am attempting to restrict search results based on the return value of a subsearch. My end ... by burns498 Explorer in Splunk Search 05-30-2013 0 2 | 0 | 2 | |
| | How do I get an average count of operations during current minute using last 3 weeks, for example? I need to know how... by 0range Communicator in Splunk Search 05-30-2013 0 4 | 0 | 4 | |
| | Hi, I have a log with entries returning something such as [2013-05-29 12:29:08:893 GBT] RESULTS 200=19 400=0 401=12 ... by ctallarico20 Path Finder in Splunk Search 05-30-2013 0 1 | 0 | 1 | |
| | I am looking to strip out some text from a field in my log file and have no knowledge of regex to do it. What I woul... by richfoster Engager in Splunk Search 05-30-2013 0 1 | 0 | 1 | |
| | I was hoping that someone could help me out with a query. I am trying to correlate a DNS request to the firewall IP ... by cesaralzaga Engager in Splunk Search 05-29-2013 0 4 | 0 | 4 | |
| | GUI上でインデックスをデフォルトで作成し、インデックス内のデータ有無に関わらず以下のパターンで削除を実行した場合に挙動に違いがありました。 【インデックスの作成】「Search」app以外のappの管理画面(例：http://... by msgtrk Path Finder in Splunk Search 05-29-2013 0 4 | 0 | 4 |
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Become An Expert
Top Labels
-
administration
3 -
alert action
3 -
alert condition
2 -
Analytics Workspace
2 -
authentication
1 -
chart
946 -
Classic dashboard
1 -
configuration
2 -
correlation search
1 -
count
1,006 -
Dashboard Studio
3 -
data
3 -
data model
1 -
development
6 -
distributed search
1 -
drilldown
1 -
email
1 -
eval
2,615 -
field extraction
2,022 -
fields
2,064 -
host
1 -
index
4 -
indexer
2 -
inputs.conf
1 -
intermediate forwarder
1 -
introduction
5 -
join
1,060 -
JSON
2 -
Linux
2 -
login
1 -
lookup
1,566 -
metadata
310 -
monitoring console
2 -
other
182 -
panel
2 -
PDF
1 -
Python
1 -
regex
1,499 -
report acceleration
2 -
rex
1,250 -
SAML
1 -
saved search
5 -
scheduled search
4 -
scripted input
1 -
search
2 -
search head
3 -
search job inspector
683 -
search peer
1 -
simple XML
1 -
source
1 -
sourcetype
4 -
Splunk Web Framework
1 -
splunk-assist
1 -
splunkd
1 -
stats
3,565 -
subsearch
1,730 -
summary indexing
4 -
table
1,754 -
time
1 -
timechart
1,158 -
transaction
453 -
transforms.conf
1 -
troubleshooting
8 -
tstats
569 -
universal forwarder
5 -
using Splunk Cloud
2 -
using Splunk Enterprise
13 -
Windows
3
- « Previous
- Next »
Get Updates on the Splunk Community!
SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...
Thursday, July 9, 2026 | 11:00AM–12:00PM PDT
Duration: 1 hour (includes Q&A)
Managing can feel like a ...
Upgrade Prep for 10.4, Network Observability Deep Dives, and More from Splunk Lantern
Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...
Splunk Developer Day announcements: AI agents, MCP tools, Forecasting, and Custom ...
Splunk Developer Day was packed with product and platform updates for developers building in the AI ...
