Splunk Search

Splunk Search
Community Activity
jcisha
Splunk Search results generated using Table Using DBX to enter the value of the result field (SQL input) Parameter ...
by jcisha Path Finder in Splunk Search 01-14-2013
0 1
0
1
disha
In my search I need functionality like My search...| if eventid=1 then "table a,b,c",if eventid=2 then "table c,d",i...
by disha Contributor in Splunk Search 01-14-2013
0 3
0
3
samsplunkd
My dataset is like below: 01/05/2013 23:58:00 -0800, search_name=foo, search_now=1357459200.000, info_min_time=135...
by samsplunkd Path Finder in Splunk Search 01-14-2013
1 9
1
9
casspugh
Hello, I have searched around, but I haven't found an example that has shown me the way. What I am trying to do is...
by casspugh Explorer in Splunk Search 01-14-2013
0 3
0
3
bcarr12
I am trying to create a table that shows what time two particular events occur daily (one term signifies start, anoth...
by bcarr12 Path Finder in Splunk Search 01-14-2013
0 4
0
4
Splunk_U
When executing the search "index=os source=df" it is gvng me the data for /dev/ammper/system-root and /dev/sda...is t...
by Splunk_U Path Finder in Splunk Search 01-14-2013
0 5
0
5
javo
Hello there What I'm doing is extracting fields from my log file and every entry has about 20 fields separated by co...
by javo Explorer in Splunk Search 01-14-2013
0 7
0
7
abhayneilam
Hi, I have two files and I want to co-relate based on the "Time Field". Problem is that "Time Field" is not having t...
by abhayneilam Contributor in Splunk Search 01-14-2013
0 2
0
2
omend
Hi all, I would like to create a unique chart displaying the working hours of a specific worker. The x axis should ...
by omend Path Finder in Splunk Search 01-13-2013
0 4
0
4
Splunk_U
Is there any thing wrong with the below search string????? index=os source=df |multikv fields Filesystem Avail UsePc...
by Splunk_U Path Finder in Splunk Search 01-11-2013
0 6
0
6
Splunk_U
I have a search string index=os source=vmstat | multikv fields memUsedPct memTotalMB memFreeMB | stats avg(memUsedP...
by Splunk_U Path Finder in Splunk Search 01-11-2013
0 1
0
1
lain179
I have a view with a flash column bar chart made out of a saved search. I would like to draw a horizontal threshold l...
by lain179 Communicator in Splunk Search 01-11-2013
0 1
0
1
vistasyslog
I cannot get the hostnames in place of IP's on the summary screen. I need to get it done through the .csv file option...
by vistasyslog New Member in Splunk Search 01-11-2013
0 4
0
4
kederart
I am trying to match two separate strings for one field extraction. When setup separately they would look like... (?...
by kederart Explorer in Splunk Search 01-11-2013
0 7
0
7
helge
I have an unknown number of fields with similar names, e.g. field1, field2, field3, etc. I need the average of all v...
by helge Builder in Splunk Search 01-11-2013
1 2
1
2
craigmunro
I have an issue where some users always get the message 'Show source not available for this event' when using the 'Sh...
by craigmunro Path Finder in Splunk Search 01-11-2013
1 1
1
1
meenal901
Hi, I have a flat file of this format: 0229052320112MARGARET CHODKIEWICZ APT 603-2100 SHEROBEE RD R164I00022B0A...
by meenal901 Communicator in Splunk Search 01-11-2013
0 6
0
6
skyrider1
Hi We have a search where we get the request time out of a webapplication. Of course those request times suffer duri...
by skyrider1 New Member in Splunk Search 01-11-2013
0 1
0
1
brood85
I am very new to Splunk (as in this is my 3rd day using it) and am having some issues understanding what I am doing w...
by brood85 Engager in Splunk Search 01-10-2013
0 1
0
1
johnebgood
I was able to get the input to work but it would be nice to start the tail from a specified value when the input is c...
by johnebgood Path Finder in Splunk Search 01-10-2013
1 5
1
5
asarolkar
I am trying to get records in a certain time range (11:45 AM and 1:45 PM) and I can only rely on date_ hour and date_...
by asarolkar Builder in Splunk Search 01-10-2013
1 1
1
1
opticsplanet
I have logs coming from a load balancer. Naturally, everything is in one file. There is a field for the host name. I ...
by opticsplanet Path Finder in Splunk Search 01-10-2013
1 7
1
7
scc00
Hi, I'm trying to use the Tail command for Splunk DB Connect to pull the newest logs into a Splunk Index. Unfortunat...
by scc00 Contributor in Splunk Search 01-10-2013
0 4
0
4
pdgill314
We had searched that were created and running every night and were outputting results. But lately we noticed that our...
by pdgill314 Path Finder in Splunk Search 01-10-2013
0 7
0
7
strive
Hi, I want to replace a set of characters during indexing. Say, My one log event in my log file is: 2012-05-08 12:...
by strive Influencer in Splunk Search 01-10-2013
1 2
1
2
Get Updates on the Splunk Community!

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Introducing ITSI 5.0: Unified Visibility and Actionable Insights Tuesday, July 21, 2026  |  10:00AM PT / ...

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

Inside Splunk Agent Observability:Understanding Agent Behavior, Tokens & Costs Thursday, August 06, ...

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...
Top Solution Authors