Splunk Search

Community Activity

Does increasing time_before_close in splunk have any performance side effects ? We have jvm gc logs which are pausing while writing loglines for more than a minute. So are thinking of increasing th... by sfmandmdev Path Finder in Splunk Search 09-30-2012 0 1	0	1
configuring field extraction Hi, I want to enable automatic field extraction from header. My file looks like this format emp\|age\|place 12345\|28\|... by Tridi123 New Member in Splunk Search 09-30-2012 0 4	0	4
splunk add oneshot completion status Hello, We are using the splunk add oneshot feature to index some files that we are not indexed all the time. (This i... by egrignon Explorer in Splunk Search 09-30-2012 1 1	1	1
Single value visualization on mutliple-series result I have a search using the rangemap command which generates a table with three fields, e.g.: domain \| uptime \| range ... by Simon Contributor in Splunk Search 09-29-2012 0 2	0	2
can i configure milliseconds in splunk for the incomin events ?? HI. In my events i have the timestamp like HH:MM:SS seconds..So splunk is defaultly taking this timestamp.but i need... by rakesh_498115 Motivator in Splunk Search 09-29-2012 0 6	0	6
join with subsearch that has different field name, and so efficiently I would like to join search results with subsearch results, but I need to rename or define a new field name in order ... by myudkowsky Communicator in Splunk Search 09-28-2012 0 4	0	4
Receiving error for external lookup (MySQL Connector) Using the latest version (1.0) of MySQL Connector app for an external lookup. I can connect to the database, through ... by splunkIT Splunk Employee in Splunk Search 09-28-2012 0 1	0	1
MajorLabelStyle defaultTextFormat I am trying to modify flashChart label font sizes and weights using charting.axisLabels.majorLabelStyle.defaultTextFo... by chrmcq Explorer in Splunk Search 09-28-2012 0 1	0	1
Split log entries from fixed number of characters Hi, I want to find results after timestamp in below results i.e. to separate "[2012-09-28 08:46:22,410]" & the messa... by nowornever2 New Member in Splunk Search 09-28-2012 0 7	0	7
Search with two "join" Hi everyone ! I try to get some values from different searches using "join". Here is my search command : host="yvas... by MaximeM Explorer in Splunk Search 09-28-2012 0 3	0	3
regex Field Extraction Hi, I have a data to be extracted. Below is the example data : Add Content Menu Sections (confluence.menu.add, Versi... by es2464 New Member in Splunk Search 09-28-2012 0 3	0	3
Using Stats and Eval (and adding timestamps) I am monitoring myserver logs file created by BEA using a universal forwarder on the BEA instance. I want to create... by asarolkar Builder in Splunk Search 09-27-2012 0 5	0	5
How to change the row colors based on the field value using CSS in splunk I am getting the result data in the form of table from the view's SimpleResultsTable. In result data I have the field... by disha Contributor in Splunk Search 09-27-2012 0 2	0	2
Correlate field from earlier event with error I have a user who has a need to look for exceptions in a log file, and then figure out what order the error pertained... by mfrost8 Builder in Splunk Search 09-27-2012 2 4	2	4
Distributed Search times out when trying to add a peer I get the following error after I add a search peer - times out. The port is open in our firewall & sending to an in... by yazapage Explorer in Splunk Search 09-27-2012 0 2	0	2
Create a new variable within a search Hi, I'd like to use the top command in my search. The problem is, that the fields which I want to top can change if ... by nebel Communicator in Splunk Search 09-27-2012 0 5	0	5
How to get certain fields from the logs Hi, I am brand new to splunk, sorry if i am asking very basic questions. i have data in the below format (I have put ... by xvxt006 Contributor in Splunk Search 09-27-2012 0 5	0	5
Replacing an IP with a set of usernames in a complex search I'm putting together a search which needs to cross correlate two data sources as well as run a nested search in order... by timbCFCA Path Finder in Splunk Search 09-27-2012 0 1	0	1
Chart showing additonal info Hi, I am trying to create a chart on the basis of difference of two fields same time on the right side it should sho... by john Communicator in Splunk Search 09-27-2012 0 3	0	3
how to calculate uptime based on below result, (total no of up events)*100/(total no of events) 8/27/12 10:24:04.000 AM server=Test and status=Up host=test1 8/27/12 10:24:04.000 AM server=test1 and status=Up host... by ajaysingh3 Explorer in Splunk Search 09-27-2012 1 8	1	8
Custom parsing I am rookie here. I have a log of type "2e 00000008 M 2050 nodemgr 09/10/21 20:01:11.860361 NODEMGR: Successfully ... by yhemaraj Engager in Splunk Search 09-26-2012 0 1	0	1
To use subsearch result in outersearch for > and < comparisons. I have a subsearch which is returning two fields and I am succesfully able to use that in the outer search for the eq... by asingla Communicator in Splunk Search 09-26-2012 1 6	1	6
show proper rate of a continually increasing value I have a script which collects the ldap stats of a series of ldap hosts and forward the values to splunk. Now natura... by dominiquevocat SplunkTrust in Splunk Search 09-26-2012 1 8	1	8
Counting a field for number of messages per unique value I have transactions being logged to Splunk, but I get multiple messages per transaction. We are in the middle tier an... by sysprg1 Explorer in Splunk Search 09-26-2012 0 2	0	2
why is addinfo not working in my search? I asked a few weeks ago how to get the total duration of my search timeframe and was told to use addinfo. Got it work... by auntyem Explorer in Splunk Search 09-25-2012 0 1	0	1