Splunk Search

Splunk Search
Community Activity
rmcdougal
We are having minor performance issues with our deployment and I would like an outside opinion on where the bottlenec...
by rmcdougal Path Finder in Splunk Search 03-29-2013
0 1
0
1
MikhailArefiev
Is it possible to limit searches done through a SearchBar by automatically prepending them with something like source...
by MikhailArefiev Explorer in Splunk Search 03-29-2013
2 4
2
4
bubby248
Hi Do we have splunk1.1 jar as maven dependency.If available,can you guys provide me the dependency tags.
by bubby248 New Member in Splunk Search 03-29-2013
0 1
0
1
fishlike
I installed the add-on, but I have no idea where I can find the checkpoint log.
by fishlike New Member in Splunk Search 03-29-2013
0 2
0
2
smolcj
Hi, My search query is like this : index=main source=file1.txt | stats values(wrk) as "Work Name", values(name) as "N...
by smolcj Builder in Splunk Search 03-29-2013
0 3
0
3
yinon_nadav
Hi, I currently have a fairly complicated event format (see below 2 examples): 10/09/2012 09:49:55 126.115.88.95,< ...
by yinon_nadav New Member in Splunk Search 03-29-2013
0 1
0
1
yap
Hi, I have 2 sets of logs, Log A contains username and hostname whereas Log B contains userid and hostip. In order ...
by yap Explorer in Splunk Search 03-29-2013
0 1
0
1
abhayneilam
Hi, I am getting the following error while running a lookup command with |inputlookup : [subsearch]: Subsearch prod...
by abhayneilam Contributor in Splunk Search 03-29-2013
0 3
0
3
allamiro
Can some one guide us or provoide us with the splunk data flow diagram with all the port number services etc
by allamiro Path Finder in Splunk Search 03-28-2013
1 1
1
1
Splunk_novice27
I have two events that occur often event A and event B are two different url's (both are different values stored in ...
by Splunk_novice27 New Member in Splunk Search 03-28-2013
0 3
0
3
On_fire
I have Splunk version 5.0.2, build 149561 and DB Connect 1.0.8 running on an Ubuntu server 12.10. I am trying to use...
by On_fire Engager in Splunk Search 03-28-2013
0 2
0
2
lain179
Hi, I would like to draw a chart representing number of active sessions at any given time...probably on a time chart...
by lain179 Communicator in Splunk Search 03-28-2013
0 2
0
2
mgraju
hi i have the following logs @2013-03-25 17:29:36,634||FINE|CXI|15553|Session=kksrrdica24v-2013084212936-1|CXI Diagno...
by mgraju New Member in Splunk Search 03-28-2013
0 3
0
3
dilstn
I have logs in which some events occured twice in same timestamp.......so i need to identify and eliminate those repe...
by dilstn Explorer in Splunk Search 03-28-2013
0 6
0
6
muppetlegs
I have some suricata stats logs which are in the following format: -------------------------------------------------...
by muppetlegs Engager in Splunk Search 03-28-2013
1 2
1
2
lpolo
I have the following log event but I have not been able to use spath to extract the json key=value pairs if the json ...
by lpolo Motivator in Splunk Search 03-28-2013
0 3
0
3
Ip_Man5
Hi, I would like to know how to create a lookup for translating or replacing a field result into results from a csv f...
by Ip_Man5 Explorer in Splunk Search 03-28-2013
0 5
0
5
composite
Hi, I'm looking for a way to do an equivalent of a SQL correlated subquery in Splunk. [I did look at Splunk for SQL ...
by composite Engager in Splunk Search 03-27-2013
0 1
0
1
kogane
How can I query Splunk to tell me how much space it thinks is being used in each volume? My volumes have nothing but ...
by kogane Path Finder in Splunk Search 03-27-2013
4 6
4
6
tmenagh
I want to craft an alert that will get the number of errors: sourcetype="my-thing" error | stats count and the num...
by tmenagh Explorer in Splunk Search 03-27-2013
0 3
0
3
royimad
Log content (log4j) begin with a date that i will use it as TIME_FORMAT in my props.conf file. Fri Jan 04 2013 13:05...
by royimad Builder in Splunk Search 03-27-2013
0 3
0
3
tkadale
I have indexed memory log files for windows. I have done the required the configuration in props.conf and transforms....
by tkadale Path Finder in Splunk Search 03-27-2013
0 6
0
6
wpreston
The clock on my server didn't adjust to the proper time for DST. I have updated the clock and restarted the server. ...
by wpreston Motivator in Splunk Search 03-27-2013
0 1
0
1
chaitu99
Hi, 03/22/2013 05:27:59.603 Message 1 03/22/2013 05:27:59.920 Message 1 03/22/2013 05:28:00.245 Message 1 03/22/2013...
by chaitu99 Explorer in Splunk Search 03-27-2013
0 5
0
5
dAmoTa
Please help me  I have two tables each with only one relevant column Table1.Paragraph 50,000 paragraphs of text T...
by dAmoTa New Member in Splunk Search 03-27-2013
0 5
0
5
Claim a $25 Cisco Store Gift Card
Help us improve the Splunk Community and complete our survey today!
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...