Splunk Search

Community Activity

A more efficient query ? One of our users has beought forth the following question: I would like to be able to determine if IP Addresses from... by ddebevec New Member in Splunk Search 12-03-2012 0 3	0	3
How can I set up a case insensitive lookup instead of tags? I have a lot of variation in my hostnames - some are upper case, some are lower case. I want my users to be able to e... by lguinn2 Legend in Splunk Search 12-03-2012 1 1	1	1
How do I convert my decimal field to a hex value? Very similar to http://splunk-base.splunk.com/answers/7688/how-do-i-convert-my-hexoct-field-into-a-decimal-value... b... by anssntaco Path Finder in Splunk Search 12-03-2012 1 2	1	2
I want to modify Lookup file directly through the dashboard Hi, Nice to Meet you. I am junior Splunk Developer. Please Help me for my Hard Work.. The contents are as follow be... by qkwltk Path Finder in Splunk Search 12-03-2012 3 9	3	9
calculate time during this is my log 11:01:36 OUT: "cadstar_silver" changpeggy@T1-PCB-PEGGY 10:55:07 IN: "cadstar_silver" changpeggy@T1-PC... by ypfbkg Explorer in Splunk Search 12-03-2012 0 1	0	1
Indexing multiple .CSV files 4 questions. Here's my situation. I have automated a SQL lookup on a database and output a .csv file every 10 minutes with field ... by ocallender Explorer in Splunk Search 12-02-2012 1 2	1	2
inputlookup question I cant seem to get my inputlookup setup correctly when I try to do a join on a field called module from syslog and a ... by asarolkar Builder in Splunk Search 12-02-2012 0 2	0	2
Question about lookups Hi, hopefully someone can give me an advise. On the one hand I am having a lookup file which contains only simple s... by nebel Communicator in Splunk Search 12-02-2012 0 1	0	1
Using eval with table I have a log by the name of auditlog, which logs accountNumber AND accountCreateDt accountCreateDt = %Y-%m-%d for... by asarolkar Builder in Splunk Search 11-30-2012 0 2	0	2
How do I create Fields for MacAddress and UserName? I have a syslog look like this and I would like to create Fields for MadAddress and UserName. Any idea? thanks, Nov... by jimzzhou Engager in Splunk Search 11-30-2012 0 1	0	1
field value to a variable Hi, I have tried assigning the field value to a variable using text box and dropdown box. Is it possible to directly... by smolcj Builder in Splunk Search 11-30-2012 1 4	1	4
table export displays different date format Hi All, If I create a custom report using a table, the date displays and outputs in the browser fine: 11/1/11 5:35:2... by voltaireb New Member in Splunk Search 11-30-2012 0 2	0	2
field extractor question with regex I'm trying to use the field extractor for this to prevent having to do a restart and putting in props.conf 2012-11-2... by gnovak Builder in Splunk Search 11-30-2012 0 9	0	9
libpcre.so.0 error of bloom command Installed Splunk 5.0.1 on Gentoo Linux (x64). Execute "/opt/splunk/bin/bloom" and get the error message: /opt/splunk... by takol Explorer in Splunk Search 11-30-2012 0 10	0	10
Dashboard Question I have a request to create a dashboard that among other things has a panel that text can be input into and written to... by menkurau Path Finder in Splunk Search 11-30-2012 0 2	0	2
Having trouble writing a group by query Here's the issue, my data is in JSON Format (see example below). Each event that I have is associated with a user_... by haqkap New Member in Splunk Search 11-29-2012 0 1	0	1
Additional field in search results Hi, A field OTHER is getting displayed in search results. My Log is: FieldA FieldB FieldC event 123 123 234 ... by strive Influencer in Splunk Search 11-29-2012 0 4	0	4
timechart with each line defined by multiple fields my search is something like ... \| stats avg(weight) by color, shape which results in : color shape ... by benobviate Explorer in Splunk Search 11-29-2012 0 3	0	3
Field Extraction from Regex So I am relatively new to extracting fields in Splunk, but I have some knowledge of regex, and I'm attempting to appl... by tmarlette Motivator in Splunk Search 11-29-2012 2 6	2	6
Creating a status graph - 0 or 1 - based only on "started" and "ended" messages I have a very similar question to this one: I have a dataset that tells me when a service starts (such as index=_int... by Jason Motivator in Splunk Search 11-29-2012 0 2	0	2
How to sum output of table command Hi I have a output of the table command as below : dataset datacount corp_zero 32 ebz_europe 6 icm 362 mbs ... by ashu_g50 Path Finder in Splunk Search 11-29-2012 0 12	0	12
top command with values I want top 10 values for a field based on the timer control. mysearch \| top 10 E_Time above command return top 10 r... by jangid Builder in Splunk Search 11-29-2012 1 5	1	5
eval & coalesce I'm trying to normalize various user fields within Windows logs. The fields I'm trying to combine are users Users and... by hagjos43 Contributor in Splunk Search 11-29-2012 1 3	1	3
unit along with fieldname Hi all is there any option in splunk, so that we can list the table contents and their units along with the table nam... by smolcj Builder in Splunk Search 11-29-2012 0 3	0	3
イベントから任意の文字列を置換する方法は？データを取り込んだ後に、イベントの中の文字を置換したり追加・削除することは可能ですか。例えば、イベント中に含まれるすべての"(ダブルクオート）を外してから検索を行う、など。 by Splunk_Shinobi Splunk Employee in Splunk Search 11-28-2012 0 1	0	1