Splunk Search

Community Activity

Extracting field from JSON and XML response Depending on the content-type, the response that is logged is either in JSON or XML. I want to create a single query ... by dbautist Explorer in Splunk Search 02-25-2013 0 3	0	3
creating nested tables Hi , my search is like specified below, Index=main source=file.txt xxx=*\| stats values(a) values(b) values(c) by xxx ... by smolcj Builder in Splunk Search 02-25-2013 0 6	0	6
Extracting selected hosts with regex / Regex hosts with exceptions Hi Splunkers, I am trying to extract the hosts via regex. host="*" \| regex host="([a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a... by lemikg Communicator in Splunk Search 02-25-2013 1 4	1	4
How to generate Bubbles in advance xml? using CDR data,I want to display no of call drops occuring in each base station in the form of bubbles or (any visual... by renuka13 Explorer in Splunk Search 02-25-2013 0 1	0	1
How to derive logged application's name? I have several enterprise applications which are split up into multiple services and tiers, all of which are being Sp... by bsayatovic Path Finder in Splunk Search 02-25-2013 0 4	0	4
Extract Multiple Values From A Monitored File Hey Everyone, I don't know if I'm doing this correctly. I have a text file that contains data I want to index. So w... by barne_dn Explorer in Splunk Search 02-25-2013 0 9	0	9
Organizing "Searches and Reports" and "Views" What's the best way to organize "Searches and Reports" and "Views"? I'm trying to figure out some type of structure ... by davidc Engager in Splunk Search 02-25-2013 2 3	2	3
Not able to create a custom field from the manager pages I am trying to create a custom field using Field-Extraction and Field-Transformation pages of Manager. I am providing... by nageshreddy81 New Member in Splunk Search 02-25-2013 0 3	0	3
help search I'm bringing data from a database every 1 minuite. Data is three kinds. Data type is 1. 2013-02-01 13:12:01;i;OS000... by khyoung7410 Communicator in Splunk Search 02-25-2013 0 1	0	1
db connect with lookup only returning first value it finds in lookup when feed by dbquery If I use: \|dbquery mydb "select userid from mydb.people where username = 'jsmith' \| rename userid as UID \| lookup myd... by rdownie Communicator in Splunk Search 02-24-2013 0 5	0	5
Whitelisting using lookups Hi, I don't know if this is the right way to do it, but I have a list of COMMANDS which I have associated a Classifi... by lemikg Communicator in Splunk Search 02-24-2013 1 3	1	3
Regex - match all ocurances of a character Hi guys, I have been playing around trying to match multiple ocurances of a pattern and replace it with a regex in t... by kenchisho Path Finder in Splunk Search 02-22-2013 0 2	0	2
Get counts of more than one field in same event Let's say I have log records that look like this Field 1 Field 2 ABC XYZ ABC KLM XYZ ABC... by tnkoehn Path Finder in Splunk Search 02-22-2013 0 1	0	1
Using Splunk to Find Unused Firewall Policies We run a report every week that counts how many times a firewall policy was used. (A firewall policy is represented ... by aferone Builder in Splunk Search 02-22-2013 0 5	0	5
Evaluate a combination of sourcetypes Hi Everyone, I am doing the following search sourcetype="a" OR sourcetype="b" OR sourcetype="c" CPU_IDLE<40 \| tim... by dannux Path Finder in Splunk Search 02-22-2013 0 2	0	2
Regexes and the replace function Hello, I'm wondering if there's a way to trim characters from an unknown field value during search. I'm tracking pe... by cphair Builder in Splunk Search 02-22-2013 4 4	4	4
cannot eval a field obtained from rex and i am pretty sure the field is only digits I cannot seem to "eval" a field obtained from a "rex" and i am pretty sure the field is only digits... this is simili... by kingsizebk Path Finder in Splunk Search 02-22-2013 0 3	0	3
Cleaning raw data at index time or search time? I have raw data that looks like this: (4)example(3)domain(3)com(0). In my search, I've been using a macro that looks ... by aapittts Path Finder in Splunk Search 02-22-2013 0 1	0	1
How to integrate separate graphs into one board Hi Splunkers I have two searches I want to compare, but unfortunately can't find my way around it. First is: CPU lo... by lemikg Communicator in Splunk Search 02-22-2013 0 2	0	2
Lookup Can't Find File I am in a clustered indexer environment and some but not all of my indexers are showing this error "The lookup table... by hartfoml Motivator in Splunk Search 02-22-2013 0 4	0	4
Complex subsearch: Need to extract value of field and pipe into another search So I’m trying to link a couple different fields together to get the data I’m looking for, but it involves a couple st... by whateverman Explorer in Splunk Search 02-21-2013 2 2	2	2
Use of "NOT" vs "!=" I'm working on a search which should return all events, except those where the "User_Name" or the "Account_Name" fiel... by rtadams89 Contributor in Splunk Search 02-21-2013 2 4	2	4
To remove a specific field from the pull-down list, what should I do? I found a field, b1, c1, d1, e1 a1 to the search field. What if you want to view the rest of the fields except for e1... by qfjp Explorer in Splunk Search 02-21-2013 0 1	0	1
How to detect if logs stopped from regular source Hi Support team, I just wanna check with you guys on how to detect if logs stopped from regular source? Best regard... by WilliamF Engager in Splunk Search 02-21-2013 0 1	0	1
subsearch returning an empty set causes unexpected results I am using a subsearch to qualify an outer search. Simplified, it looks something like this: Index =AAAA [index=AAA... by timpgray Path Finder in Splunk Search 02-21-2013 1 3	1	3

Get Updates on the Splunk Community!

Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance

Maintaining data integrity across security and analytics pipelines is an ongoing challenge. Data ...

[Puzzles] Solve, Learn, Repeat: Family Trees

This puzzle (first published here is based on finding grandparents and grandchildren (inspired by a question ...

Break the Build: Inside the KubeDoom Lounge at .conf26

You step up to the machine. The pixelated corridors of a certain 1993 FPS load in front of you, EMP Pulse ...

Splunk Search

Extracting field from JSON and XML response

creating nested tables

Extracting selected hosts with regex / Regex hosts with exceptions

How to generate Bubbles in advance xml?

How to derive logged application's name?

Extract Multiple Values From A Monitored File

Organizing "Searches and Reports" and "Views"

Not able to create a custom field from the manager pages

help search

db connect with lookup only returning first value it finds in lookup when feed by dbquery

Whitelisting using lookups

Regex - match all ocurances of a character

Get counts of more than one field in same event

Using Splunk to Find Unused Firewall Policies

Evaluate a combination of sourcetypes

Regexes and the replace function

cannot eval a field obtained from rex and i am pretty sure the field is only digits

Cleaning raw data at index time or search time?

How to integrate separate graphs into one board

Lookup Can't Find File

Complex subsearch: Need to extract value of field and pipe into another search

Use of "NOT" vs "!="

To remove a specific field from the pull-down list, what should I do?

How to detect if logs stopped from regular source

subsearch returning an empty set causes unexpected results

Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance

[Puzzles] Solve, Learn, Repeat: Family Trees

Break the Build: Inside the KubeDoom Lounge at .conf26

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation