Splunk Search

Community Activity

due to subsearches i am getting this message maximum number of historical concurrent system-wide searches has been reached Hi, i have 14 panels in a vew and 5 of them have subsearches, and all these panels are single value panels . i am get... by smolcj Builder in Splunk Search 02-02-2013 0 1	0	1
Setting the starttime and endtime in an eval I wrote a macro where ReleaseInterval2013(month) evaluates starttime and endtime based on the month I select. The st... by njfrost Explorer in Splunk Search 02-01-2013 1 12	1	12
RegEx or Field Transformation ? Hello, I have an event that have this format: [13/01/31@00:14:05.269+0100] P-1770312 T-000001 1 AS -- (Procedure: '... by righettod Engager in Splunk Search 02-01-2013 0 2	0	2
HiddenPostProcess silently discarding results I am trying to use HiddenSearch and HiddenPostProcess in a few places to re-use the same result set, based on the doc... by therealdpk Path Finder in Splunk Search 02-01-2013 1 8	1	8
Multiline regex capture and newlines Kevins back with more corner cases! So, I have events that will look something like key1=value1 key2=value2 key3=va... by kevintelford Path Finder in Splunk Search 02-01-2013 1 1	1	1
Track Useragent Change Over Time So I have two searches that return the list of useragents. Search 1 Current Week: host="webserver" \| earliest=-1w ... by agodoy Communicator in Splunk Search 02-01-2013 0 2	0	2
Detect Abnormal traffic on weekend Hello, we have several customers with astaro firewalls, and we want to detect abnormal traffic (for example in time-... by stehlampe69 Explorer in Splunk Search 02-01-2013 1 2	1	2
outputlookup command not found Hello, eventually I'm missing something, but I've searched quite a lot. My Problem is that I cannot use outputlookup... by stehlampe69 Explorer in Splunk Search 02-01-2013 0 3	0	3
Removing duplicates in exported Report results I have a search like this which produces the result I want (it counts modules per account number and location - the l... by asarolkar Builder in Splunk Search 01-31-2013 0 5	0	5
Retrieve a list of all the Time and group all similar times as 1 row I would like to get a list of all the timestamps in my data. They are stored in a field called time. Normally I woul... by cmak Contributor in Splunk Search 01-31-2013 0 1	0	1
Malware when using google? when we try to connect with a google subject, the computer redirects to some other home page for some products we hav... by djmcclusk New Member in Splunk Search 01-31-2013 0 1	0	1
Give me a count of all events but give me the date of the last event? I'm generating a table of event count (same events) but I want it to also return the timestamp of the last event. I ... by the_wolverine Champion in Splunk Search 01-31-2013 0 4	0	4
Help with Search string count I am trying to extract a string, count how many times it appears and group it by host. RAW LOG: [2013-01-31T03:55:06... by D01033778 New Member in Splunk Search 01-31-2013 0 3	0	3
Problem with the counting Hi, I have a data like : Name 1 2 3 4 5 abc 0 2 5 0 18 def 3 0 10... by abhayneilam Contributor in Splunk Search 01-31-2013 0 4	0	4
getwatch list & lookup table Dave Receiving this error " The splunkd daemon cannot be reached by splunkweb. Check that were are no blocked networ... by WLOCK8 New Member in Splunk Search 01-31-2013 0 1	0	1
Count the concurrent transactions with a single log entry by transaction Question Hey there, I'm a beginner with Splunk and have questions about timechart and _time variable. Here is my ... by ypiolet Explorer in Splunk Search 01-31-2013 0 5	0	5
Problem of choosing the line number from a report Hi, I have a report generated by SPLUNK , but I want to remove the first 5 lines and rest of the lines will be my ou... by abhayneilam Contributor in Splunk Search 01-31-2013 0 7	0	7
Comparing two values Hi everybody, I am trying to compare two values which would be the network interfaces (MAC, em1, em2) and depending ... by lemikg Communicator in Splunk Search 01-31-2013 0 2	0	2
click a table using converttointention Hi All, I am creating a dashboard with a table, which when clicked will open another chart in the same dashboard de... by KarunK Contributor in Splunk Search 01-30-2013 0 7	0	7
Update lookup file just before running my search? I'm running a subsearch which updates a lookup file (using outputlookup) but it doesn't seem to work. The subsearch ... by the_wolverine Champion in Splunk Search 01-30-2013 0 7	0	7
Convert field from Unix Epoch Time to another format I have events that are being stored in large groups (say 10,000 at a time). The timestamp that they are given at inde... by cosullivan66 Explorer in Splunk Search 01-30-2013 0 1	0	1
Splunk CLI search only returns 100 events Hi, I am looking for a Splunk CLI search workaround for option (-maxout 0) which shows unlimited events instead of d... by tarunm Engager in Splunk Search 01-30-2013 1 4	1	4
Rolling over data to a a Share I have a distributed Environment consisting of 2 SH and 2 indexers. I would like to keep around 30 days of logs on my... by paul_1994 Path Finder in Splunk Search 01-30-2013 0 2	0	2
JOIN two tables in Splunk Need to extract the value of 'A' from Query 1 - Then do a JOIN to extract the value of 'A' if they occur in Query 2 ... by kthakkar New Member in Splunk Search 01-30-2013 0 2	0	2
Regular expression used in transform not performing as expected I have written a Regex to perform an extraction in transforms.conf that I've tested in multiple PCRE compliant regula... by jklumpp_splunk Splunk Employee in Splunk Search 01-30-2013 0 5	0	5

Get Updates on the Splunk Community!

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

AI is one of the biggest topics in the market today, and for security teams, its value goes far beyond the ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

[REGISTER HERE] This thread is for the Community Office Hours session on Detection Engineering Office Hours: ...

Splunk Search

due to subsearches i am getting this message maximum number of historical concurrent system-wide searches has been reached

Setting the starttime and endtime in an eval

RegEx or Field Transformation ?

HiddenPostProcess silently discarding results

Multiline regex capture and newlines

Track Useragent Change Over Time

Detect Abnormal traffic on weekend

outputlookup command not found

Removing duplicates in exported Report results

Retrieve a list of all the Time and group all similar times as 1 row

Malware when using google?

Give me a count of all events but give me the date of the last event?

Help with Search string count

Problem with the counting

getwatch list & lookup table

Count the concurrent transactions with a single log entry by transaction

Problem of choosing the line number from a report

Comparing two values

click a table using converttointention

Update lookup file just before running my search?

Convert field from Unix Epoch Time to another format

Splunk CLI search only returns 100 events

Rolling over data to a a Share

JOIN two tables in Splunk

Regular expression used in transform not performing as expected

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation