Splunk Search

Community Activity

Stop Splunk charts from reporting 0 when no events have happened yet today Hi, I'm hoping someone can help me, we have some reporting setup that queries a database once a day after the query ... by stevenwilson New Member in Splunk Search 04-02-2013 0 3	0	3
Splunk distributed search between two datacenters We have two datacenters, Production and QE, each datacenter has a completely seperate AD infrastructure. Our main spl... by imacdonald2 Path Finder in Splunk Search 04-02-2013 1 2	1	2
strange report behaviour with short timespans Splunk version 5.0.1 Recently I'm getting strange results in my reports. Although the result tables shows all events... by StefNighthawk Explorer in Splunk Search 04-02-2013 0 1	0	1
Automatic Field Extraction: Hi all, I am improting data from the Hadoop Cluster using Splunk Hadoop connect, am able to get the data but Fields a... by shri_27 Path Finder in Splunk Search 04-02-2013 0 1	0	1
Splunk Split automatically 2 events when it detect two different dates in a log I have a log generated from log4j: an event of this log could be described by the following: Fri Jan 04 2013 13:05:... by royimad Builder in Splunk Search 04-02-2013 1 5	1	5
help with a REGEX I need help with a REGEX that needs to extract just fourth field in a line and nothing else. The event looks like thi... by extreme1 New Member in Splunk Search 04-02-2013 0 5	0	5
SCADA bitwise registers time on and time off search Got posed a tricky question today for a search. We are monitoring a diesel generator which generates a number of ala... by phoenixdigital Builder in Splunk Search 04-01-2013 0 12	0	12
Timechart hour span for one week isn't showing breakdown It's showing all the hours for each day but groups all activity at midnight of each day instead of through the day. ... by Scottindc Explorer in Splunk Search 04-01-2013 0 5	0	5
reformating stats and eval output as columns and rows I have the below search to output the values for response times for an application, index="summary_application_resp... by rickl New Member in Splunk Search 04-01-2013 0 2	0	2
Time-Date recognize Unix Epoch Time milliseconds Hello! I have log contains time-date in Unix Epoch format (milliseconds). One event fragments is: 04,013c5f8ecc0f,01... by ryastrebov Communicator in Splunk Search 03-31-2013 0 5	0	5
Need to summarize fields that not always have a value In my log (OS X System Log) I collect as transactions the time machine backup data. I need to summarize the amount of... by detlefschneide1 New Member in Splunk Search 03-31-2013 0 4	0	4
Windows Eventlog - Obtaining Data Information I have successfully configured a Splunk Unversal Forwarder to read the local machine's eventlog. However, Splunk does... by StephenCook Engager in Splunk Search 03-31-2013 1 1	1	1
Populate predefined field for found strings Good Day, I'm attempting to create a label for different search responses. Example: if search 'A' finds error "500"... by subtrakt Contributor in Splunk Search 03-31-2013 0 2	0	2
Contradiction of search result ? I found the search contradiction between "index=* host=splkc" and "host=splkc". Though the former search find some re... by sunrise Contributor in Splunk Search 03-31-2013 0 2	0	2
How to get an input source into a specific index? I have a server with Universal Forwarder configured to feed data files into my Splunk indexer, and I was able to crea... by Mark_Barrett Explorer in Splunk Search 03-30-2013 0 2	0	2
Search Syntax graph: Two dimensional single measurement chart Sorry to bother everyone with what may end up being a very simple question but I've been pulling out my hair trying t... by gunderjt Explorer in Splunk Search 03-30-2013 0 2	0	2
Help on regex Need a help on reg ex . My event will look like this B/ns7:Attribute I want to get the value B as my answer using ... by tmuthuk Path Finder in Splunk Search 03-30-2013 0 5	0	5
What is most efficient way to join 2 broken sources? Hi, I have 2 sources of data. One contains visitor statistics similar to this format: visitorID="154";visitorName="... by P3P4 New Member in Splunk Search 03-30-2013 0 1	0	1
Rex and Regex Field Extraction Hello all, I am trying to extract fields (tried the dynamic extraction and manual using rex&regex) but am unable to ... by mistertj3 Engager in Splunk Search 03-30-2013 0 5	0	5
Need help with data forwarded but not indexed I setup a Universal Forwarder forwarding some CSV files to three indexers. I made the mistake of forwarding the data ... by ww9rivers Contributor in Splunk Search 03-29-2013 1 7	1	7
List of IP Excludes All, I have a list of IP addresses which is about 40 long I don't want to include in my search. Seems silly to type... by daniel333 Builder in Splunk Search 03-29-2013 1 2	1	2
Where is the bottleneck? We are having minor performance issues with our deployment and I would like an outside opinion on where the bottlenec... by rmcdougal Path Finder in Splunk Search 03-29-2013 0 1	0	1
App: limit searches done through a SearchBar Is it possible to limit searches done through a SearchBar by automatically prepending them with something like source... by MikhailArefiev Explorer in Splunk Search 03-29-2013 2 4	2	4
Do we have splunk 1.1 jar as maven dependency Hi Do we have splunk1.1 jar as maven dependency.If available,can you guys provide me the dependency tags. by bubby248 New Member in Splunk Search 03-29-2013 0 1	0	1
where can i find the log ? I installed the add-on, but I have no idea where I can find the checkpoint log. by fishlike New Member in Splunk Search 03-29-2013 0 2	0	2

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Splunk Search

Stop Splunk charts from reporting 0 when no events have happened yet today

Splunk distributed search between two datacenters

strange report behaviour with short timespans

Automatic Field Extraction:

Splunk Split automatically 2 events when it detect two different dates in a log

help with a REGEX

SCADA bitwise registers time on and time off search

Timechart hour span for one week isn't showing breakdown

reformating stats and eval output as columns and rows

Time-Date recognize Unix Epoch Time milliseconds

Need to summarize fields that not always have a value

Windows Eventlog - Obtaining Data Information

Populate predefined field for found strings

Contradiction of search result ?

How to get an input source into a specific index?

Search Syntax graph: Two dimensional single measurement chart

Help on regex

What is most efficient way to join 2 broken sources?

Rex and Regex Field Extraction

Need help with data forwarded but not indexed

List of IP Excludes

Where is the bottleneck?

App: limit searches done through a SearchBar

Do we have splunk 1.1 jar as maven dependency

where can i find the log ?

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Quick connection discovery mode for forwarders

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation