Splunk Search

Community Activity

xml convert csv I have a xml file which I want to convert to a csv, but do not work regular expressions. > inputs.conf > [monitor:\\... by klychnikov Explorer in Splunk Search 12-06-2012 0 3	0	3
problem while lookup I am getting the following error while doing lookup please suggest me : Error 'Could not find all of the specified l... by abhayneilam Contributor in Splunk Search 12-06-2012 0 1	0	1
Using Fields Efficiently I'm trying to get a search to run as efficiently as possible and a couple of the guys on my team have been going back... by peasead Path Finder in Splunk Search 12-06-2012 1 2	1	2
How to get average page size from access logs Hi, From the access logs, i am getting the commands (part of URI) and their execution count in a tabular format. I wa... by xvxt006 Contributor in Splunk Search 12-06-2012 0 6	0	6
How do I make table header sort able? I want to sort the data when I click to header for respective column? How do I ? by jangid Builder in Splunk Search 12-06-2012 0 5	0	5
source selection Hi all, i have an doubt please clarify me .. in the search panel ..is it possible to give two source and get the ou... by splunkpoornima Communicator in Splunk Search 12-06-2012 0 3	0	3
events between a specific time hi all, how can i query , so that i could be able to get events between a specific time.t the time willbe dynamic so ... by smolcj Builder in Splunk Search 12-06-2012 0 11	0	11
Frequency distribution with timechart Hi all, I have a timechart that gets created based on the value for a particular threshold sourcetype="syslog" \| ti... by asarolkar Builder in Splunk Search 12-05-2012 0 1	0	1
Counting multiple values in a single query Newbie to Splunk. From a server farm of web servers, I'd like to get the total of sc_bytes (bytes from server to c... by umiotoko New Member in Splunk Search 12-05-2012 0 1	0	1
subsearch help Not sure how to accomplish this.... First search: index="airtight" message=quarantined eventtype="airtight_intrusio... by mcbradford Contributor in Splunk Search 12-05-2012 0 1	0	1
Is an index-time extraction right for my situation? I know this has been asked many times, and answered in splunkbase and in the documentation -- yet here I am, not sure... by walkeran Explorer in Splunk Search 12-05-2012 4 9	4	9
Translating SQL Query into Splunk Search Query: "LAG(...) OVER (...)" Hi, I got stuck in translating the following SQL query into Splunk Search Query: "LAG ( BCOLLDT, 1) OVER ( PARTITION... by syusjk6 Engager in Splunk Search 12-05-2012 0 2	0	2
Dynamic lookups? Log stream looks like this: session=1234567 client=acme start sltsession=abcdef continuing page=1 sltsession=abcdef ... by twinspop Influencer in Splunk Search 12-05-2012 0 3	0	3
How do I add dot or square markers on my line chart (timeline)? Hi I have a simple XML dashboard with 1 panel as line chart showing the following search result: * \| timechart sp... by melonman Motivator in Splunk Search 12-05-2012 1 2	1	2
summary index without using si-commands Hi Folks, Can i create summary without using sistats, sicharts etc. My search outputs a table as i don't require to ... by amitsehgal Path Finder in Splunk Search 12-04-2012 0 1	0	1
how to use Extracting fields from Microsoft Internet Authentication Service (IAS) APP? Since there is no documentation how to use this APP, I would like to know how to set it up and getting data in? Do I ... by jimzzhou Engager in Splunk Search 12-04-2012 0 5	0	5
Deleting several saved searches in one call Hi, I am using Splunk REST API to delete saved searches in my java program. I would like to delete several saved sea... by strive Influencer in Splunk Search 12-04-2012 1 2	1	2
AddTotals for time I have a column called LoadTime that displays the amount of time it took for a transaction to take place. I'd like t... by gnovak Builder in Splunk Search 12-04-2012 0 5	0	5
convert FILETIME to human readable Does anyone know of a command/formula that for converting FILETIME date/time format to something more human readable? by cramasta Builder in Splunk Search 12-04-2012 0 1	0	1
drill down with drop down output and clicked chart value hi all, i have a dropdown box populating sources and a chart displaying severity of the source, as i used eval comman... by smolcj Builder in Splunk Search 12-04-2012 0 5	0	5
How do I show more than 10 field values in a timechart? Hi, I have a field "host" that contain more than 10 values. When I issue "... \| timechart count by host", timechart ... by melonman Motivator in Splunk Search 12-04-2012 5 1	5	1
Flashtimeline not showing when searching with a groupby i.e. "\| stats count by" Hiya, It seems that since upgrading splunk to v5, any searches which are grouped by a count. e.g.: “test” \| stats c... by benjwarner Explorer in Splunk Search 12-03-2012 0 1	0	1
A more efficient query ? One of our users has beought forth the following question: I would like to be able to determine if IP Addresses from... by ddebevec New Member in Splunk Search 12-03-2012 0 3	0	3
How can I set up a case insensitive lookup instead of tags? I have a lot of variation in my hostnames - some are upper case, some are lower case. I want my users to be able to e... by lguinn2 Legend in Splunk Search 12-03-2012 1 1	1	1
How do I convert my decimal field to a hex value? Very similar to http://splunk-base.splunk.com/answers/7688/how-do-i-convert-my-hexoct-field-into-a-decimal-value... b... by anssntaco Path Finder in Splunk Search 12-03-2012 1 2	1	2