Splunk Search

Community Activity

mvfind for the last value It seems that mvfind will only return the index of the first matching value. I would like to return the index of the ... by pkashou Explorer in Splunk Search 02-20-2013 0 1	0	1
two different time modifiers in one search? The problem I'm facing is that I want a search that comes up with the possibility to set different time modifiers for... by p_splunk Engager in Splunk Search 02-20-2013 0 2	0	2
how to convert oracle function hello . i want to convert oracle function to splunk search. but i don't know this conversion . here's oracle functi... by rimururu01 New Member in Splunk Search 02-20-2013 0 5	0	5
Keeping field of subsearch How can I keep fields of a subsearch so I can add them to a table with the end result? I tried with no success ... [... by javo Explorer in Splunk Search 02-20-2013 0 5	0	5
do we have commad to trim new lines ?? HI.. I have seen the functions ltrim and rtrim to spaces ..do we have functions to trim new lines.. actually in my ... by rakesh_498115 Motivator in Splunk Search 02-20-2013 0 8	0	8
Field Extraction identification Is there a way to determine which field extraction (transforms or search rex) was used for a specific sourcetype? by mcm10285 Communicator in Splunk Search 02-20-2013 0 4	0	4
Setting a line in chart to represent as warning Hi, I want to draw two lines as warning boundaries in a line chart. The string goes "index="ong_poc_index" sourcetyp... by bhavna_jain Engager in Splunk Search 02-20-2013 0 2	0	2
Discarding specific event and keeping the rest Below is the raw data that am getting. I want to extract the events where category is Error. For this am doing this i... by pdash Path Finder in Splunk Search 02-19-2013 0 2	0	2
Display peak usage over time Hi  We are using Splunk 5.0.2 and have a requirement to show peak bandwidth usage over time. Here is the search th... by lukeh Contributor in Splunk Search 02-19-2013 0 2	0	2
Not a question, but tip for all those running 5.0.1 or 5.0.2 There is a configuration file default setting error that was made (and confirmed by Splunk support today when I calle... by tmeader Contributor in Splunk Search 02-19-2013 4 9	4	9
How to escape the first line having ‘null’ char I have a log file ( generated from the WAS server) having the first line like that : null null null null... Please h... by sumanbej New Member in Splunk Search 02-19-2013 0 3	0	3
I need help filtering search results by milliseconds - values are in a string New splunk user here so I'm not very familiar with how some of the commands work, so I apologize in advance. My sear... by rickytrumper New Member in Splunk Search 02-19-2013 0 6	0	6
Top 10 values from 10 different columns? I want top 10 values from the below query: Problem is , we have applied stats average on multiple column, so simply w... by Aakanksha Path Finder in Splunk Search 02-19-2013 0 3	0	3
Exclude Events Based on a Lookup I've written a query to find certain events in Splunk and I want to exclude any which match up with a set of values i... by paddy3883 Path Finder in Splunk Search 02-19-2013 0 2	0	2
plotting unique values using timecharts Hi, I'd like to draw a quick chart of unique instances of a given field over time. Specifically, I'd like a chart w... by chan2 Engager in Splunk Search 02-19-2013 3 2	3	2
Multiple select for dynamic dashboards Hi, I have prepared Dashboard using examples from Splunk web site and things work very well. In fact all examples I ... by xradim Explorer in Splunk Search 02-18-2013 1 2	1	2
Restrict Search Terms Conditionally Depending On The Index Being Searched I have multiple indexes to help control user access to data. Now I've run into a situation where data within an index... by jpass Contributor in Splunk Search 02-18-2013 3 3	3	3
multiply a field value by number of distinguished hosts rather than fixed number Gurus This should be simple and probably is but I can't get it to work. I have an index that captures some huge page... by stucky101 Engager in Splunk Search 02-18-2013 0 6	0	6
Using inputlookup with a field I have to REX. Hey Guys, I have a list of hostnames in a CSV file, I need to run a search in Splunk which references this list. Easy... by mrgibbon Contributor in Splunk Search 02-18-2013 0 2	0	2
new user checking submission of questions this is a test option. #include <sdtio.h> int main(int argc, char** argv) { printf("Hello tissue world"); r... by shadowme Engager in Splunk Search 02-18-2013 0 2	0	2
form as query builder sending to search app I would like to have a form for the enduser to build a query, but the result should be displayed in the normal search... by sbsbb Builder in Splunk Search 02-18-2013 0 1	0	1
Regex - Ignore Whitespace Is it possible to create a regex to ignore whitespace? Typically you can use /x to do this, but this does not seem t... by vragosta Path Finder in Splunk Search 02-18-2013 0 3	0	3
Lookup table: Show one or another output Code,Description1,Description2 0,ok,successful 1,error,failure 3,not_connected,not_found 6,unsync,network_error OK,... by javo Explorer in Splunk Search 02-18-2013 0 3	0	3
Why is msvcr80.dll, not msvcr90.dll been including in Splunk 5? According to the Release Note, version of Python in Splunk 5 is 2.7.3. Reference: http://docs.splunk.com/Documentati... by lzhang_soliton Path Finder in Splunk Search 02-18-2013 0 5	0	5
Don't want column names as values in the report Hi Team, When am putting any search command, am getting column names as one of the value, and getting displayed in r... by pramodkumar Path Finder in Splunk Search 02-17-2013 0 8	0	8

Get Updates on the Splunk Community!

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Deep insights, no barriers: Splunk Observability Cloud Free Edition

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...

Monitoring AI Agents with Splunk Observability Cloud

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...

Splunk Search

mvfind for the last value

two different time modifiers in one search?

how to convert oracle function

Keeping field of subsearch

do we have commad to trim new lines ??

Field Extraction identification

Setting a line in chart to represent as warning

Discarding specific event and keeping the rest

Display peak usage over time

Not a question, but tip for all those running 5.0.1 or 5.0.2

How to escape the first line having ‘null’ char

I need help filtering search results by milliseconds - values are in a string

Top 10 values from 10 different columns?

Exclude Events Based on a Lookup

plotting unique values using timecharts

Multiple select for dynamic dashboards

Restrict Search Terms Conditionally Depending On The Index Being Searched

multiply a field value by number of distinguished hosts rather than fixed number

Using inputlookup with a field I have to REX.

new user checking submission of questions

form as query builder sending to search app

Regex - Ignore Whitespace

Lookup table: Show one or another output

Why is msvcr80.dll, not msvcr90.dll been including in Splunk 5?

Don't want column names as values in the report

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Deep insights, no barriers: Splunk Observability Cloud Free Edition

Monitoring AI Agents with Splunk Observability Cloud

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation