Splunk Search

Community Activity

	Wildcard value in condition- Does Splunk parse asterisks as actual asterisks, not a wildcard? As I want to keep my dashboards as dynamic as possible I am trying to avoid writing specific conditions where as... <... by ohlafl Communicator in Splunk Search 04-24-2023 0 5	0	5
	Unable to change bar chart to ONLY show the number of events for just the previous business quarter Hi,I currently has a barchart like this which shows the number of requests per business quarter:Here is the respectiv... by POR160893 Builder in Splunk Search 04-23-2023 0 7	0	7
	Help with Splunk rex and using it in searchmatch? Hello eveyrone, Firstly Big Thanks to @ITWhisperer for helping me in recent weeks  I have created a splunk query whi... by super_edition Path Finder in Splunk Search 04-23-2023 0 1	0	1
	How to calculate variance in an array? I would like to create a column that tells me the variance for the array \| makeresults \| eval raw="1 session1... by dtakacssplunk Explorer in Splunk Search 04-21-2023 0 3	0	3
	How to extract only first occurrence between two strings in the paragraph of string in Splunk? Extract only first occurrence between two strings in the paragraph of string in splunk index=perf-*** source=*Respons... by rpachamuthu Explorer in Splunk Search 04-21-2023 0 4	0	4
	How to achieve maximum value for "latest" time modifier? Dear fellow Splunkthusiasts! I have found out one of old scheduled searches in my installation is failing with this e... by eregon Path Finder in Splunk Search 04-21-2023 0 7	0	7
	How to summarize these search results? Hello fellow splunkers! I'm getting these results from my splunk search but struggling to find a way to summarize the... by ctsurumaki Explorer in Splunk Search 04-21-2023 0 4	0	4
	How can I create an output in such a way that columns will be "Month", "Host", "Count"? This question was asked in the interview. Index is splunk's _internal, fields are host and date_month. I want to crea... by splunkuser1 Loves-to-Learn in Splunk Search 04-21-2023 0 9	0	9
	What search can we use to check CPU usage info and process info? Hi, facing an issue in manufacturing related to high CPU usage caused by security tools. To address this issue, we ne... by smith_ Builder in Splunk Search 04-21-2023 0 3	0	3
	Why am I not able to see field alias added to attrs.labelname? I created the field alias with read access given to everyone but still I am not able to see it, could someone please ... by Yashprime07 Explorer in Splunk Search 04-20-2023 0 3	0	3
	How to calculate variance of a group leaving one ID at a time? I have the data as below: LoginID AccessDateOrganizationSectionlogCount 110thAprilO1S11.39211thAprilO2S21.76312th... by Veerendra Loves-to-Learn Lots in Splunk Search 04-20-2023 0 5	0	5
	What is the spl code to use the output of Panel_1 to other panels? Hi all, I want to implement 2 panels in one dashboard.Output of Panel_1 will be a list of ID that meet the search key... by Jouman Path Finder in Splunk Search 04-20-2023 0 3	0	3
	How can I combine two graphs into one? I have the following queries: index=myIndex app_name IN (my-app-a, my-app-b) process=end \| eval app_name = repla... by yk010123 Path Finder in Splunk Search 04-20-2023 0 3	0	3
	How to find events immediately following/preceding another event? I have to search for events I have one event let's say MIT=" step started"and another event says MIT=" step completed... by AjayTakur Loves-to-Learn Everything in Splunk Search 04-20-2023 0 3	0	3
	How to extract dates where no-traffic? Hi All, I want to extract the dates for last 1 month where there is no-traffic in my application using splunk query. ... by jp_duraimurugan Engager in Splunk Search 04-20-2023 0 3	0	3
	Having trouble with rex matching wildcards with escaped double quotes Hi there, I am having some trouble matching patterns from a search string using the rex command.I will show the messa... by weropitjpoerit Engager in Splunk Search 04-20-2023 0 2	0	2
	How to find events that haven't happened in a given amount of time? I'm looking over vulnerability scan data and have the _time field formatted as \| eval Last_Scanned = strftime(time... by atebysandwich Path Finder in Splunk Search 04-20-2023 0 6	0	6
	How to merge two different index and calculate time for start event and event end? I have two event 1 index= non prod source=test.log "recived msg" \| fields _time batchid Event 2 index =non-agent sou... by Sekhar Explorer in Splunk Search 04-20-2023 0 12	0	12
	How to exclude data from a field? Is there a way to exclude specified data from a single field. The example I have is on Destination IP addresses from ... by MR1992 Explorer in Splunk Search 04-20-2023 0 4	0	4
	How to remove double quotes from extracted field values Filed extracted like rex field = msg " student information\" : (?<studentname>.*?)," Student name getting like below"... by Sekhar Explorer in Splunk Search 04-20-2023 0 3	0	3
	Matching field from two different index and source I have two event start event having extracted fields from log managerid ,branch I'd,empname using index = emp source... by Sekhar Explorer in Splunk Search 04-20-2023 0 1	0	1
	How to remove repeated duplicate values? I am trying to remove duplicates in my result using the \|dedup command. Even though I am seeing 2 entries in my resul... by alexspunkshell Contributor in Splunk Search 04-20-2023 0 6	0	6
	How to achieve auto filed value extraction? Hi Team, I have to do auto field extraction of the fields coming inside the payload under <mTypes>....</mTypes> to th... by pm2012 Explorer in Splunk Search 04-20-2023 0 5	0	5
	How would I value map ip addresses? I have an example data on csv named invent.csv like this: f_666dhn_0-1681968677658.png I want to map ip values to h... by f_666dhn Explorer in Splunk Search 04-19-2023 0 1	0	1
	How to write this query in Splunk? This is application insight query which i need to write in splunk , can some one help me please let a=traces\| where c... by Anidy21 Engager in Splunk Search 04-19-2023 0 7	0	7