Splunk Search

Community Activity

How to show count of events per day dbconnect Hi, here's my search, which includes a conversion from epoch time to a Y-d-m time format: \| dbquery "DBNAME" "SELECT... by kbcuait Explorer in Splunk Search 05-07-2013 0 1	0	1
Splunk Search I am new to splunk . I am trying to search some events in splunk,What I want is get all results which have field "c... by revatiy New Member in Splunk Search 05-07-2013 0 2	0	2
relating AD logs with DHCP Hi, I am trying to add a IP address hint to the Active Directory logs. I know it isn't completely reliable, but it i... by krugger Communicator in Splunk Search 05-07-2013 0 2	0	2
is there a way to get the number of events per transaction Hi, is there a way to get the number of events per transaction? by xvxt006 Contributor in Splunk Search 05-07-2013 0 1	0	1
how to create sourcetype based on raw field in splunk Hi, In my case, Splunk is getting data in by tcp port. I configure the TCP port with sourcetype="myagent". the json f... by disha Contributor in Splunk Search 05-07-2013 0 1	0	1
field extraction from raw data Hi There, I have below data that i will like to extract as key-value pair from a custom event source i have created.... by jatin_patel Path Finder in Splunk Search 05-07-2013 0 5	0	5
I would like group result I have this request : sourcetype="accouting" fichier="*.log" \| stats count by fichier Here is the result : fichie... by dieusplunk Engager in Splunk Search 05-07-2013 1 1	1	1
How can group age? Dear All, I have data like age count 23 76 24 154 25 168 26 140 27 132 28 156 29 152 30 167 31 144 32 133... by gajananh999 Contributor in Splunk Search 05-07-2013 0 5	0	5
User Agent regex I'm trying to create a regex to match the user agent from the following logs. Beginning with "Mozilla/*" and ending a... by dewald13 Path Finder in Splunk Search 05-07-2013 0 7	0	7
Search Language variable for search duration Hello, I was curious if there was a way to reference a search duration for use within the search? Primarily for use i... by aputz Path Finder in Splunk Search 05-07-2013 2 2	2	2
Extracting File Names from URL String Hello All, Having some trouble coming up with a way to extract a file with three random characters and a .jnlp exten... by TucoRameriz Explorer in Splunk Search 05-07-2013 0 7	0	7
Preventing format from being called on a subsearch Hello, I have a macro (a subsearch enclosed in square brackets) that I use to filter my initial search. I would lik... by cphair Builder in Splunk Search 05-07-2013 0 7	0	7
Where to put extract statement Hi, I am processing some logs on a universal forwarder, which then sends the data to some indexers, which are search... by a212830 Champion in Splunk Search 05-06-2013 0 1	0	1
I have summary data in the logs from a custom application, I would like to further aggregate my data an make it compatible with sistats output I need to take already summarized data in the logs, aggregate it from a large group of servers, and build an si-type ... by bmorgan Explorer in Splunk Search 05-06-2013 0 4	0	4
Extracting File Type Hi Everyone, Trying to extract the File Type from Files (ex: pst, xml, etc). I have tried to split it: eval split =... by behymejt2012 Path Finder in Splunk Search 05-06-2013 0 3	0	3
transforms.conf – supporting alternatives in REGEX and numbering the alternative-groups in the FORMAT lines In the transforms.conf file, how do I support the alternatives on the REGEX line with the corresponding FORMAT line ... by SonnyB Explorer in Splunk Search 05-06-2013 3 10	3	10
How do i Map out data on Google Maps Hi everyone, I am very new to splunk and im trying to map out some car park relevant data on Google Maps app but to n... by nlfatin New Member in Splunk Search 05-06-2013 0 1	0	1
Real time dashboard data not refreshing. I've created a the following search that returns results when first run using 5 minute real time from the time picker... by richnavis Contributor in Splunk Search 05-06-2013 0 1	0	1
Limit search universe to certain search peer Hi, Is there a parameter to limit the search universe to a particular search peer when executing the search in the se... by shangshin Builder in Splunk Search 05-06-2013 0 1	0	1
Help needed with Search to correlate Event Logs with Active Directory OU Hello. I would like to create an alert anytime a privileged user account logs in to our domain. I can do separate s... by moulinjs New Member in Splunk Search 05-06-2013 0 2	0	2
Looking for a way to create better tables for large file sourcetype="AAA_CDR" bob.com Total_Bytes > 0 \| convert timeformat="%j" ctime(Event_Time) AS day \| table User, day, To... by bcarlson New Member in Splunk Search 05-06-2013 0 4	0	4
Whether splunk saves a copy of the log files in their server side For security reason , in our project we want that the log files (audit logs,developer's logs etc) should not go outsi... by baisakhiroy New Member in Splunk Search 05-05-2013 0 5	0	5
Up Down status from a Pre Defined List Hi All, Below is my requiremnt , I have a CSV file which is quite big but in the belwo format Ips,Name 10.10.10.1,I... by rosha16 New Member in Splunk Search 05-04-2013 0 2	0	2
Lookup table challenges Tried experimenting with the Http Status codes example in the documentation for lookup tables. This is the error. C... by Voltaire Communicator in Splunk Search 05-03-2013 0 3	0	3
Display last 20 lines from search query I'm searching for a particular keyword in Splunk & now that I found the results in Splunk, I need to see last 20 line... by freephoneid Path Finder in Splunk Search 05-03-2013 0 2	0	2

Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious! We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community, What’s the best part of hearing how our customers use Splunk? Easy: the positive ...

Splunk Search

How to show count of events per day dbconnect

Splunk Search

relating AD logs with DHCP

is there a way to get the number of events per transaction

how to create sourcetype based on raw field in splunk

field extraction from raw data

I would like group result

How can group age?

User Agent regex

Search Language variable for search duration

Extracting File Names from URL String

Preventing format from being called on a subsearch

Where to put extract statement

I have summary data in the logs from a custom application, I would like to further aggregate my data an make it compatible with sistats output

Extracting File Type

transforms.conf – supporting alternatives in REGEX and numbering the alternative-groups in the FORMAT lines

How do i Map out data on Google Maps

Real time dashboard data not refreshing.

Limit search universe to certain search peer

Help needed with Search to correlate Event Logs with Active Directory OU

Looking for a way to create better tables for large file

Whether splunk saves a copy of the log files in their server side

Up Down status from a Pre Defined List

Lookup table challenges

Display last 20 lines from search query

Index This | Why did the turkey cross the road?

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

Feel the Splunk Love: Real Stories from Real Customers

How to process BOTS data?

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Answers Content Calendar May 2025!

MLTKC how should i check jupyter notebook func in ...

Splunk Search

Are you a member of the Splunk Community?