Splunk Search

Community Activity

	Subquery - How can I modify format with multiple conditions? Hello,The default format of my subsearch result looks like: (( Host_Name="srv1" AND icid="va1_icid1" AND mid="val_mid... by emilep Explorer in Splunk Search 05-02-2023 0 5	0	5
	How can I get the latest result? my spl base search \|transaction ID \| table date field1 field2 ID my result Date field1 fiel2 ... by abi2023 Path Finder in Splunk Search 05-01-2023 0 2	0	2
	How can I lookup update field value question? I have sanitized the index names-I have users that have propagated a lookup command in dashboards that is now a major... by Dallastek1 Path Finder in Splunk Search 05-01-2023 0 2	0	2
	How to match my lookup table? my lookup table is history data for the search I am running. from my search and my lookup table I have command field ... by abi2023 Path Finder in Splunk Search 05-01-2023 0 1	0	1
	How do I search for outdated data in the index and delete it, retaining only the latest information? Hello, I'm working on IOC but unfortunately, keeping them in a lookup table is already getting messy and we have to i... by wvpony Engager in Splunk Search 05-01-2023 0 2	0	2
	Can I have a rex ending with "/" or "?" ? index="va_tools_oit-salesforce" source="sfdc_event_log://EventLog_va_my_salesforce_com_eventlog_va" sourcetype="sfd... by naujla85 Explorer in Splunk Search 05-01-2023 0 3	0	3
	Why is there no link between the two data points in Splunk trendline line chart? So i have a trendline like below: I dont know why is there no link between the two data points between april and may... by CodingMaestro Path Finder in Splunk Search 05-01-2023 0 2	0	2
	What's the best way to find out events that have field values that DO NOT match? I have two lookups: one is the scan results from the current week and the other is historical lookup of scan results ... by atebysandwich Path Finder in Splunk Search 05-01-2023 0 3	0	3
	How to include quote within LIKE keyword in Dbxquery? how to include quote within LIKE keyword in Dbxquery?For example: There are 10k people in the DB and I would like ... by LearningGuy Motivator in Splunk Search 05-01-2023 0 1	0	1
	How to parse json into rows? Hi, I have issue similar to: https://community.splunk.com/t5/Getting-Data-In/how-to-split-the-json-array-into-multipl... by maayan Path Finder in Splunk Search 05-01-2023 0 3	0	3
	Splunk display a value when no logs are found Hi ,I have a field which has 3 values i.e., 0 , 1 & 2.0 for Green , 1 for Blue and 2 for Red. I'm using this values t... by Dayalss Engager in Splunk Search 04-30-2023 0 3	0	3
	How to find records based on input from user date? I have set of records where the data has time column in it.Eg: Here I will have an input from user where user will e... by agupta13 Engager in Splunk Search 04-29-2023 0 2	0	2
	How to get the ingest bytes for internal logs? I know how to get the ingest bytes for non-internal logs using this ... index=_internal source="*license_usage.log"... by fredclown Builder in Splunk Search 04-29-2023 0 10	0	10
	Longer time frame does not return results? When I run the following query: "com.server" \| table id uri statusCode _time \| join type=inner saga_id [search "Secon... by yk010123 Path Finder in Splunk Search 04-28-2023 0 3	0	3
	How to create a search for Hosts that failed Authentication this week but were successful last? I have a table that has the following fields: IPHost_Auth _time The _time field shows the time the host was authenti... by atebysandwich Path Finder in Splunk Search 04-28-2023 0 8	0	8
	How to use MV expand to extract a data grouped by itself? Hi splunk community I am currently trying to break up a log. It is in this format after converting to a json Each... by Spunk_user89 New Member in Splunk Search 04-28-2023 0 4	0	4
	Splunk Custom Search Commands: How can I write the generator.py script so that it calls the script.py? Hi everyone,I have a script.py which requires one argument to run normally, for eg. script.py D:\Downloads\12-Dec-202... by siu Loves-to-Learn Everything in Splunk Search 04-28-2023 0 5	0	5
	How to create a custom generating search command? So I have a python script called Analysis.py And normally I would run it locally like this Analysis.py <filepath>, s... by siu Loves-to-Learn Everything in Splunk Search 04-28-2023 0 6	0	6
	How to display two result count in value visualization? Hi community, I have the follow search that return two number for today and yesterday device count per index xyz but... by Roberto-P Explorer in Splunk Search 04-28-2023 0 3	0	3
	How to find traffic change from a search? I have a search and resultant output like shown below:search is --> eventtype=cacti:mirage host=onl-cacti-02 rrdn=tra... by phularah Communicator in Splunk Search 04-28-2023 0 1	0	1
	Why does chart remove the empty x-values made with \|makecontinuous? I want to make an evenly spaced x-axis in a dataset with gaps in it and then use chart to make a trellis view based o... by HrCivilingeniør New Member in Splunk Search 04-28-2023 0 0	0	0
	Is there a way to move Saved Search results (CSV) obtained via PowerShell to a windows directory? I have spent a LOT of time searching for a way to do this. I have saved searches within Splunk Enterprise 9.x (the ... by NHD86 Loves-to-Learn Lots in Splunk Search 04-28-2023 0 0	0	0
	Why are Splunk Field alias created from Ui not visible? So I have an application that runs as a docker container in AWS ECS Fargate, and in log configurations for the contai... by Yashprime07 Explorer in Splunk Search 04-27-2023 0 7	0	7
	Why are values are missing and incorrect when I used stats values() in chart? I had a tabular chart which has component, basket and age column. But the problem was I had same component with diffe... by Vish Explorer in Splunk Search 04-27-2023 0 2	0	2
	How to search use stats count filter two fields? Hi All, I am doing a search for src_ip and DestAdd in a database within a 1 minute time frame. I need to look for src... by longmen Path Finder in Splunk Search 04-27-2023 0 1	0	1