Splunk Search

Community Activity

how to create sourcetype based on raw field in splunk Hi, In my case, Splunk is getting data in by tcp port. I configure the TCP port with sourcetype="myagent". the json f... by disha Contributor in Splunk Search 05-07-2013 0 1	0	1
field extraction from raw data Hi There, I have below data that i will like to extract as key-value pair from a custom event source i have created.... by jatin_patel Path Finder in Splunk Search 05-07-2013 0 5	0	5
I would like group result I have this request : sourcetype="accouting" fichier="*.log" \| stats count by fichier Here is the result : fichie... by dieusplunk Engager in Splunk Search 05-07-2013 1 1	1	1
How can group age? Dear All, I have data like age count 23 76 24 154 25 168 26 140 27 132 28 156 29 152 30 167 31 144 32 133... by gajananh999 Contributor in Splunk Search 05-07-2013 0 5	0	5
User Agent regex I'm trying to create a regex to match the user agent from the following logs. Beginning with "Mozilla/*" and ending a... by dewald13 Path Finder in Splunk Search 05-07-2013 0 7	0	7
Search Language variable for search duration Hello, I was curious if there was a way to reference a search duration for use within the search? Primarily for use i... by aputz Path Finder in Splunk Search 05-07-2013 2 2	2	2
Extracting File Names from URL String Hello All, Having some trouble coming up with a way to extract a file with three random characters and a .jnlp exten... by TucoRameriz Explorer in Splunk Search 05-07-2013 0 7	0	7
Preventing format from being called on a subsearch Hello, I have a macro (a subsearch enclosed in square brackets) that I use to filter my initial search. I would lik... by cphair Builder in Splunk Search 05-07-2013 0 7	0	7
Where to put extract statement Hi, I am processing some logs on a universal forwarder, which then sends the data to some indexers, which are search... by a212830 Champion in Splunk Search 05-06-2013 0 1	0	1
I have summary data in the logs from a custom application, I would like to further aggregate my data an make it compatible with sistats output I need to take already summarized data in the logs, aggregate it from a large group of servers, and build an si-type ... by bmorgan Explorer in Splunk Search 05-06-2013 0 4	0	4
Extracting File Type Hi Everyone, Trying to extract the File Type from Files (ex: pst, xml, etc). I have tried to split it: eval split =... by behymejt2012 Path Finder in Splunk Search 05-06-2013 0 3	0	3
transforms.conf – supporting alternatives in REGEX and numbering the alternative-groups in the FORMAT lines In the transforms.conf file, how do I support the alternatives on the REGEX line with the corresponding FORMAT line ... by SonnyB Explorer in Splunk Search 05-06-2013 3 10	3	10
How do i Map out data on Google Maps Hi everyone, I am very new to splunk and im trying to map out some car park relevant data on Google Maps app but to n... by nlfatin New Member in Splunk Search 05-06-2013 0 1	0	1
Real time dashboard data not refreshing. I've created a the following search that returns results when first run using 5 minute real time from the time picker... by richnavis Contributor in Splunk Search 05-06-2013 0 1	0	1
Limit search universe to certain search peer Hi, Is there a parameter to limit the search universe to a particular search peer when executing the search in the se... by shangshin Builder in Splunk Search 05-06-2013 0 1	0	1
Help needed with Search to correlate Event Logs with Active Directory OU Hello. I would like to create an alert anytime a privileged user account logs in to our domain. I can do separate s... by moulinjs New Member in Splunk Search 05-06-2013 0 2	0	2
Looking for a way to create better tables for large file sourcetype="AAA_CDR" bob.com Total_Bytes > 0 \| convert timeformat="%j" ctime(Event_Time) AS day \| table User, day, To... by bcarlson New Member in Splunk Search 05-06-2013 0 4	0	4
Whether splunk saves a copy of the log files in their server side For security reason , in our project we want that the log files (audit logs,developer's logs etc) should not go outsi... by baisakhiroy New Member in Splunk Search 05-05-2013 0 5	0	5
Up Down status from a Pre Defined List Hi All, Below is my requiremnt , I have a CSV file which is quite big but in the belwo format Ips,Name 10.10.10.1,I... by rosha16 New Member in Splunk Search 05-04-2013 0 2	0	2
Lookup table challenges Tried experimenting with the Http Status codes example in the documentation for lookup tables. This is the error. C... by Voltaire Communicator in Splunk Search 05-03-2013 0 3	0	3
Display last 20 lines from search query I'm searching for a particular keyword in Splunk & now that I found the results in Splunk, I need to see last 20 line... by freephoneid Path Finder in Splunk Search 05-03-2013 0 2	0	2
Temporary relocating the dispatch folder. I am trying to move a massive amount of events from the main index to a dedicated index for the sourcetype. I am tryi... by agodoy Communicator in Splunk Search 05-03-2013 0 3	0	3
matching multiple constraints in a transaction I need to find hosts on which Event B occurred within three minutes of Event A. I'm trying to use transaction, but I... by cphair Builder in Splunk Search 05-03-2013 1 2	1	2
Traffic getting to server, but not getting splunk'd. I have an ASA firewall sending data to my splunk server (syslog port 514). When I run tcpdump... tcpdump -i eth1 hos... by rblalock New Member in Splunk Search 05-03-2013 0 3	0	3
Actual Searches of Concurrent Searches I have been looking into usage metrics for my companys Splunk deployment with the aim of analysing users searches and... by rlautman Path Finder in Splunk Search 05-03-2013 1 2	1	2

Get Updates on the Splunk Community!

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Splunk Search

how to create sourcetype based on raw field in splunk

field extraction from raw data

I would like group result

How can group age?

User Agent regex

Search Language variable for search duration

Extracting File Names from URL String

Preventing format from being called on a subsearch

Where to put extract statement

I have summary data in the logs from a custom application, I would like to further aggregate my data an make it compatible with sistats output

Extracting File Type

transforms.conf – supporting alternatives in REGEX and numbering the alternative-groups in the FORMAT lines

How do i Map out data on Google Maps

Real time dashboard data not refreshing.

Limit search universe to certain search peer

Help needed with Search to correlate Event Logs with Active Directory OU

Looking for a way to create better tables for large file

Whether splunk saves a copy of the log files in their server side

Up Down status from a Pre Defined List

Lookup table challenges

Display last 20 lines from search query

Temporary relocating the dispatch folder.

matching multiple constraints in a transaction

Traffic getting to server, but not getting splunk'd.

Actual Searches of Concurrent Searches

Quick connection discovery mode for forwarders

Build and Launch AI Agents from Your Splunk Workflows

Splunk Cloud Application Management in Terraform

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation