Splunk Search

Community Activity

Using rex to extract one or two character digit from string Hello I am trying to extract some digits from a string and I can't seem to get the regex to work. Here is an example ... by naydenk Path Finder in Splunk Search 10-31-2012 1 4	1	4
I just need to see a simple example of using click.value where my summary chart can be used to drill down to raw events. I've got a dashboard that renders using summarized data. When a user clicks on the chart, I want Splunk to return th... by the_wolverine Champion in Splunk Search 10-31-2012 1 4	1	4
Search for unique count of users Hi, I have a Splunk query which lets me view the frequency of visits to pages in my app. sourcetype="iis" source="*... by bnitesh Explorer in Splunk Search 10-31-2012 1 5	1	5
Splunk for Exchange 2.0 - Blank charts with 4.3.4 Hello, I just upgraded from 4.3.3 to 4.3.4 and Splunk for Exchange to 2.0, and now it seems that all the charts are ... by letienne Path Finder in Splunk Search 10-31-2012 0 6	0	6
Count By host I am using this statement below to run every hour of the day looking for the value that is 1 on multiple hosts named ... by hartfoml Motivator in Splunk Search 10-30-2012 0 1	0	1
how to avoid duplicates when a log file is read from an url using scripted input ? we are reading http logs from a weburl using the curl command the webserver log is exposed as http://host/webserver.l... by vallurupalli New Member in Splunk Search 10-30-2012 0 2	0	2
Define size up popup window in ViewRedirector module Is there any way to define the size of a popup browser window when using the ViewRedirector Module? True by jedatt01 Builder in Splunk Search 10-30-2012 2 4	2	4
My Selected Fields do not stay in the Selected Fields Area I have some saved searches and I have fields from a data source (csv file) and my fields are defined in props and tra... by ngcgoon Explorer in Splunk Search 10-30-2012 0 3	0	3
Multi-valued Index-time key extraction not working, please help! Hi all, I've been struggling with Splunk for weeks now (and had Developer training!) and I still can't get it to do ... by jonaubrey Explorer in Splunk Search 10-30-2012 1 11	1	11
Migrating from Windows to Linux Hello Splunkers, (1st post) I'm closing down one a Splunk 'test' instance we have on a Windows virtual machine and br... by lbogle Contributor in Splunk Search 10-30-2012 0 4	0	4
regular expression for XML Log I have following log in xml format <tec><items><item><name>Status</name><value>Online</value></item><item><name>Comp... by jangid Builder in Splunk Search 10-30-2012 1 1	1	1
Can't extract fields names from tab delimited source Hi. I'm new to Splunk. I've got basic import and searching working on the windows install, but I want to get the fiel... by nosignal Explorer in Splunk Search 10-29-2012 0 1	0	1
fomation in pattern matching- please help urgently I have 2 keywords and I am running query : index="maa" \| table Name Age Location \| rex field="Location" (?(?i)"kol")... by abhayneilam Contributor in Splunk Search 10-29-2012 0 9	0	9
want 0 count if keyword does not match index="usb_weekly_data" \|rex field="src_file_name" (?(?i)"presentation") \| stats count as First by key_word above qu... by abhayneilam Contributor in Splunk Search 10-29-2012 0 2	0	2
bar chart with five search I want to create a bar chart with these following search eventtype="et_system_metrics" Stage=A* \| stats count(eval... by jangid Builder in Splunk Search 10-29-2012 0 6	0	6
What's wrong in this sub search ? What is the wrong in this sub search ? Individually both are working fine. eventtype="et_system_metrics" Stage=A* A... by jangid Builder in Splunk Search 10-29-2012 0 4	0	4
docs.splunk.com wrong link to answers Dear Doc Team, if one uses the link to Answers on top of the docs.splunk.com page, you end up at docs.splunk.com/Ans... by MuS SplunkTrust in Splunk Search 10-29-2012 5 1	5	1
problem with REX I am giving the following search : index="maa" \| table Name Age Location \| rex field="Location" (?(?i)"delhi") \| eva... by abhayneilam Contributor in Splunk Search 10-29-2012 0 10	0	10
how to merge multiple rex commands Hi, I have a query as follows : index="maa" \|rex field="Location" (?(?i)"delhi") \| eval ONE=lower(ONE) \|stats count... by abhayneilam Contributor in Splunk Search 10-29-2012 0 3	0	3
Search for items not matching values from a lookup Related to http://splunk-base.splunk.com/answers/7581/best-way-to-search-using-a-lookup-table I want this inverse sc... by gohar Explorer in Splunk Search 10-27-2012 1 2	1	2
Rex in If else ladder Hi, I am running the below query and want to print 0 for the keyword that is not matched , can this be possible to g... by abhayneilam Contributor in Splunk Search 10-27-2012 0 2	0	2
Alerting based on deviation on multi dimensional data I have a challenge that I'm hoping someone can help with. There are around 24,000,000 events being indexed per 24 ho... by hirsts Path Finder in Splunk Search 10-26-2012 0 2	0	2
Unabe to get the search result in text box using javascript inside html module Hi, Just have a look at this code < module name="HiddenSearch" layoutPanel="panel_row2_col1" autoRun="True"> <... by madanashok Path Finder in Splunk Search 10-26-2012 0 2	0	2
RegEx for variable message field extraction Hello, I have logs coming in that look like the following: (Tab between columns) server1.something.com ApacheLog ... by johnebgood Path Finder in Splunk Search 10-26-2012 1 4	1	4
Can i know the results retrieved for each search query ? Hi. I have search query that query returns certains fields . these information will vary according to the realtime d... by rakesh_498115 Motivator in Splunk Search 10-26-2012 0 2	0	2