Splunk Search

Splunk Search
Community Activity
flora123
hello, i have a log like this: time,type,field1,field3,field3,field4,field5,...... 0102,A,2,3,4,1,3,... 0102,B,2,2...
by flora123 Path Finder in Splunk Search 02-06-2013
0 5
0
5
Aakanksha
I have 1 week data uploaded in SPLUNK. I a sorting it on weekly as well as daily basis. Query is as follow: ... |ch...
by Aakanksha Path Finder in Splunk Search 02-06-2013
0 3
0
3
dstonecypher
I need to search for a list of values for a specific field. How can I do this? The list needs to be dynamic.
by dstonecypher Engager in Splunk Search 02-05-2013
0 4
0
4
timpgray
I have created a query that contains a transaction and it mostly works as expected. The unexpected part is that a c...
by timpgray Path Finder in Splunk Search 02-05-2013
0 1
0
1
mmattek
trying to consolidate (only erun search once. I see some example but without my dropdown feeding the seach. Can anyon...
by mmattek Path Finder in Splunk Search 02-05-2013
0 7
0
7
disha
I need to run the search query on splunk like sourcetype="agent"|spath path="EID" output="EventID"|search EventID=3|t...
by disha Contributor in Splunk Search 02-05-2013
0 4
0
4
kyle_ross
Hello, I'm trying to write a search query that will return the number of 'IntervalReadingEvent' per deviceID. I've g...
by kyle_ross New Member in Splunk Search 02-05-2013
0 1
0
1
JensT
Hi, we have this scenario: User is login in to a system on date A. To be allowed to do so he/she has to order acces...
by JensT Communicator in Splunk Search 02-05-2013
1 1
1
1
hbakker
Problem Statement: I have a query that outputs performance percentile statistics by operation methods. Example: |ch...
by hbakker Engager in Splunk Search 02-05-2013
0 2
0
2
rakesh_498115
Hi.. I could see the option "Default app" for a role but how can we list of apps ?? say i have to give that role acc...
by rakesh_498115 Motivator in Splunk Search 02-05-2013
0 1
0
1
sportauthority
We are reporting events in a CSV format using a comma deliminated structure. Example below: ,playerID04,player01,clie...
by sportauthority New Member in Splunk Search 02-05-2013
0 5
0
5
linu1988
I want to use two lookups where the logged in user roles are input to the 1st lookup and the 2nd lookup is fed by the...
by linu1988 Champion in Splunk Search 02-05-2013
0 6
0
6
bellaed
Help me with a regular expression to include all the log details after a certain field,including newline tab etc some...
by bellaed Path Finder in Splunk Search 02-05-2013
0 2
0
2
lemikg
Hi Splunkers, this might sound stupid. I am trying to query and table host, COMMAND and USER which works fine. But i...
by lemikg Communicator in Splunk Search 02-05-2013
0 7
0
7
melonman
Hi I created a table using stats, it looks like Table A below What I am trying to do is make create Table B. Table...
by melonman Motivator in Splunk Search 02-04-2013
0 3
0
3
cosullivan66
I'm evaluating a variable called lengthofpayload. I want to separate it into 10 buckets: 0-1000, 1000-2000, etc. Each...
by cosullivan66 Explorer in Splunk Search 02-04-2013
0 4
0
4
vj8210
Hi, We have a urgent requirement to obfuscate data at search time or while extracting reports from splunk. Please h...
by vj8210 Explorer in Splunk Search 02-04-2013
0 5
0
5
agodoy
I have this regex (https?:\/\/)?(www)?(.)?([a-z\d-]{2,})?(.)?([a-z\d-]{2,})?(.)?([a-z\d-]{2,})?.[a-z]{2,4} that I wan...
by agodoy Communicator in Splunk Search 02-04-2013
0 6
0
6
marquiselee
So I'm setting up a form/dashboard so that team members can lookup file information. Right now the form can only acc...
by marquiselee Path Finder in Splunk Search 02-04-2013
1 1
1
1
matthewcanty
Hello, I hope you can help me refine the following query. So far I am successfully getting the GroupId, Description, ...
by matthewcanty Communicator in Splunk Search 02-04-2013
0 5
0
5
kumar518g
Hi , I have to remove some chars from the extracted field "UserName" values like below ValidateCcoId - svorma1 Valid...
by kumar518g Explorer in Splunk Search 02-04-2013
1 2
1
2
rakesh_498115
Hi.. I am using a APP say A , i need to clone this as APP B because indexes are common between those two apps. Can ...
by rakesh_498115 Motivator in Splunk Search 02-04-2013
0 2
0
2
RNB
I would like to trim back on the amount of disk space being used. We have decided that we would like to keep about 1...
by RNB Path Finder in Splunk Search 02-04-2013
3 2
3
2
shdu79
Hello, I am trying to come up with the splunk search command that I need to extract a number, which is not indexed. ...
by shdu79 New Member in Splunk Search 02-04-2013
0 7
0
7
kumar518g
Hi All, i have to convert an extracted field "responcetime" values like ":1389 ms",":345 ms" to number format .as the...
by kumar518g Explorer in Splunk Search 02-04-2013
0 2
0
2
Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...
Top Solution Authors