Splunk Search

Splunk Search
Community Activity
wrangler2x
I created a search that is part of a view called dhcp-MAC-lookup. When you pull up this view you are prompted to ent...
by wrangler2x Motivator in Splunk Search 09-18-2012
3 8
3
8
a212830
Hi, I noticed a whole bunch of these in my S.O.S. Not sure what they mean - the filesystems are fine. Is somebody ru...
by a212830 Champion in Splunk Search 09-18-2012
2 4
2
4
paul_hignutt
I have a customer that we did an extended PoC for on an old small server (3 months+). That customer purchased Splunk>...
by paul_hignutt Engager in Splunk Search 09-18-2012
1 1
1
1
bobjacks
Hi Everyone, I'm new to Splunk and am having difficulty making a simple(ish) query. I'd like to display select field...
by bobjacks New Member in Splunk Search 09-18-2012
0 2
0
2
Branden
Hello! Given an event like this: PSMONITORSRV.32876010 (0) [09/15/12 09:16:20](3) PSJNI: Created a Java VM instanc...
by Branden Builder in Splunk Search 09-18-2012
1 7
1
7
bjalex80
Splunk 4.2.1 (98164). I have some eventtypes that are not behaving as expected. One such eventtype is named "E-Triag...
by bjalex80 Explorer in Splunk Search 09-18-2012
2 1
2
1
chizops
I'm trying to do a search that looks for a Tag and lists all tags by number of events but also shows the number of so...
by chizops Path Finder in Splunk Search 09-18-2012
0 7
0
7
freephoneid
Hi, My log snippet is shown below: [2012-09-01 11:02:27:405 GMT+00:00][Timer-1][com.abc.myprog] INFO email sent to ...
by freephoneid Path Finder in Splunk Search 09-17-2012
0 4
0
4
graidelak
Hi I want to know how can i group my log from my firewall by source ip, or dest_ip or type, because i want to make a ...
by graidelak New Member in Splunk Search 09-17-2012
0 6
0
6
brownd92
Hi there, I would like to merge multiple searches into one pie chart. Examples of searches would be: sourcetype="Bus...
by brownd92 New Member in Splunk Search 09-17-2012
0 9
0
9
iKate
Let's say there's saved lookup table that looks like this: month number1 number2 2012.05 10 40 2012.06 ...
by iKate Builder in Splunk Search 09-17-2012
1 7
1
7
Wilf
Trying to see what this app provides as the description does not tell me anything. The app Loads OK but do not know ...
by Wilf Explorer in Splunk Search 09-17-2012
0 1
0
1
beaumygod
If I have several terms I am searching for such as: john OR frank OR mary OR jim OR jeff How would I then create a ...
by beaumygod New Member in Splunk Search 09-17-2012
0 1
0
1
1234testtest
I remember seeing an app - "Application management" Operational visibility for transaction tracing and application pe...
by 1234testtest Path Finder in Splunk Search 09-17-2012
0 1
0
1
hcorbett_
Hello, I'm new to Splunk and I'm having some difficulty getting the SEP app working correctly. (replace the dashes b...
by hcorbett_ New Member in Splunk Search 09-17-2012
0 4
0
4
JovanMilosevic
Hi, I have 3 single values displaying YTD, MTD and Today's figures. What I'd like to do is have another 3 single va...
by JovanMilosevic Path Finder in Splunk Search 09-17-2012
0 3
0
3
iKate
Hello, Lets say we have time period from Jan 2011 till Jan 2012. Is it possible to build a timechart that count even...
by iKate Builder in Splunk Search 09-17-2012
1 7
1
7
commondoubts
I have a query which gives me the count of orders per minute. Real time is set to 1 minute. sourcetype="XXX" Orders...
by commondoubts New Member in Splunk Search 09-17-2012
0 1
0
1
rakesh_498115
Hi I have created a Field Called "DESTINATION" in this field i have the values like this.. Banglore Bombay Karanta...
by rakesh_498115 Motivator in Splunk Search 09-16-2012
0 3
0
3
cmurtaugh
Hi -- I'm having some trouble with search-time field extractions that I've set up in the Splunk Manager. My tab-sep...
by cmurtaugh Engager in Splunk Search 09-14-2012
1 5
1
5
auntyem
I want to get at the duration of the search timeframe within the search itself. So if I set the search to look at th...
by auntyem Explorer in Splunk Search 09-14-2012
2 8
2
8
rereeser
Hello, I've got several charts on the same row that use the same legend. This particular dashboard is intended to be ...
by rereeser Explorer in Splunk Search 09-14-2012
0 2
0
2
jkcouch
Script sends VM configuration information into splunk daily. Trying to get a list of events that existed more than 3 ...
by jkcouch Explorer in Splunk Search 09-14-2012
1 3
1
3
ritazreiby
I was wondering how to set the color of a table row based on a presence of word.for example i have an event that says...
by ritazreiby New Member in Splunk Search 09-14-2012
0 1
0
1
ritazreiby
i have a list of events , sorted by ip addresses , i would like to see only the latest event for each ip, i tried usi...
by ritazreiby New Member in Splunk Search 09-14-2012
0 2
0
2
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

Data Management Digest – May 2026

Welcome to the May 2026 edition of Data Management Digest!   As your trusted partner in data innovation, the ...