Splunk Search

Community Activity

Processes over time Does anyone know how to get a report of server processes cpu over time? by canalesjac Path Finder in Splunk Search 11-03-2012 0 1	0	1
Supress Subsearch Warning Is there a way to hide the splunk notification message: [subsearch]: Your timerange was substituted based on your se... by slierninja Communicator in Splunk Search 11-02-2012 1 3	1	3
Trouble searching for multiple values using rex I am having trouble searching mutliple patterns using rex. I have the log files containg the following pattern lines:... by lain179 Communicator in Splunk Search 11-02-2012 0 7	0	7
Is _indextime deprecated? I'm trying to see if a clock is off on some of my servers and I want to compare the _time field with the time the eve... by responsys_cm Builder in Splunk Search 11-02-2012 3 1	3	1
Adding Servers monitored by Splunk We are going through the process of adding more servers to our fleet and monitor them with splunk. 1. Does anyone... by dina_vaghjiani New Member in Splunk Search 11-02-2012 0 4	0	4
[Beginner] timestamp in microseconds since boot Just downloaded Splunk on my laptop and am trying it out on a log file. I am at: Home » Add data » Files & directorie... by HenryVIII New Member in Splunk Search 11-02-2012 0 3	0	3
How to show output of script to Splunk without indexing it Hello Splunkers, I have a script that outputs data in tabular form to console. For exp: machine state A ON B O... by sieutruc Contributor in Splunk Search 11-02-2012 0 1	0	1
mysqlconnector Required argument name=username cannot be an empty or all white space string Trying to get the mysqlconnector working. I have the globla permissions set but when I do the explore databases, I g... by falkyre Explorer in Splunk Search 11-02-2012 0 1	0	1
Modify timespan of a subsearch Hi I’m trying to compare two days in my search, but not the whole day only e.g. from 00:00 till 13:30. index="summar... by Oti47 Path Finder in Splunk Search 11-02-2012 1 1	1	1
Problem with Lookup table Hello While using lookup table there are multiple entries coming up even when in the lookup table they have distinct... by theouhuios Motivator in Splunk Search 11-02-2012 0 4	0	4
how does splunk analyse URL？ for example： x.company1.com x.x.company2.com.cn x.x.x.company3.cn x.company4.co.jp how to extract with rex those "com... by crazyeva Contributor in Splunk Search 11-02-2012 0 1	0	1
Need help with Stats report I have hundreds of log files containing the following pattern. Basically, I need to create a report for each PROJECTN... by lain179 Communicator in Splunk Search 11-01-2012 0 2	0	2
calculating average bandwidth I've got a log that looks like the following after extraction.... RPD_MPLS_PATH_UP: MPLS path up on LSP host1 path b... by DTERM Contributor in Splunk Search 11-01-2012 0 1	0	1
Gauge to show current % usage of monthly bandwidth I am trying to produce a gauge which will display the current percentage used of my fixed monthly bandwidth of 200GB.... by stevenhorner New Member in Splunk Search 11-01-2012 0 2	0	2
Does Splunk support logback as source type? Splunk supports log4j as source type. But we use logback. Hence are there any ways for mentioning logback as source t... by santoshkumar New Member in Splunk Search 11-01-2012 0 1	0	1
Specific Page Views by Day How can I see a specific page's view count by day? For any given day, it will show the count of the number of views. ... by slierninja Communicator in Splunk Search 11-01-2012 0 2	0	2
Wrong sorting Hi everyone, We met a problem with sorting data in a table. We sort users id-s, let's say there's 350000 of them, it... by iKate Builder in Splunk Search 11-01-2012 0 5	0	5
Calculate percentage from a join query I need to calculate the percentage of products that I have searched for that exist in a specific product catalog. I ... by justjosh Explorer in Splunk Search 11-01-2012 0 1	0	1
rex extraction of multiple fields from a record (multi-line) I'm trying to extract some Oracle audit log fields on the fly. I can't seem to get my regex to match. Source: Audi... by nocostk Communicator in Splunk Search 11-01-2012 2 4	2	4
How do I get all the values. I have tried this source=/var/log/testlog "EXP" OR "Q up" OR "X listing" \| rex "(?<myword>EXP\|Q up\|X listing)" \| st... by chappe4 New Member in Splunk Search 11-01-2012 0 4	0	4
Can't replace a healthcheck string in nginx Hi, I have looked at the docs and tried to remove a line from nginx access log regarding our LB : 192.168.27.169 - ... by scalp42 New Member in Splunk Search 10-31-2012 0 4	0	4
Subsearch Realtime - Parent Search Last 5 minutes Is it possible to have a subsearch looking for a log entry in realtime, then take that field and look back the past 5... by BP9906 Builder in Splunk Search 10-31-2012 0 4	0	4
Using rex to extract one or two character digit from string Hello I am trying to extract some digits from a string and I can't seem to get the regex to work. Here is an example ... by naydenk Path Finder in Splunk Search 10-31-2012 1 4	1	4
I just need to see a simple example of using click.value where my summary chart can be used to drill down to raw events. I've got a dashboard that renders using summarized data. When a user clicks on the chart, I want Splunk to return th... by the_wolverine Champion in Splunk Search 10-31-2012 1 4	1	4
Search for unique count of users Hi, I have a Splunk query which lets me view the frequency of visits to pages in my app. sourcetype="iis" source="*... by bnitesh Explorer in Splunk Search 10-31-2012 1 5	1	5