Splunk Search

Community Activity

Transaction trace- application performance monitoring I remember seeing an app - "Application management" Operational visibility for transaction tracing and application pe... by 1234testtest Path Finder in Splunk Search 09-17-2012 0 1	0	1
Symantec Endpoint Reporting App (SEP) Installation Hello, I'm new to Splunk and I'm having some difficulty getting the SEP app working correctly. (replace the dashes b... by hcorbett_ New Member in Splunk Search 09-17-2012 0 4	0	4
Comparing last year to this year Hi, I have 3 single values displaying YTD, MTD and Today's figures. What I'd like to do is have another 3 single va... by JovanMilosevic Path Finder in Splunk Search 09-17-2012 0 3	0	3
Timechart variation Hello, Lets say we have time period from Jan 2011 till Jan 2012. Is it possible to build a timechart that count even... by iKate Builder in Splunk Search 09-17-2012 1 7	1	7
Timechart Orders Per Second I have a query which gives me the count of orders per minute. Real time is set to 1 minute. sourcetype="XXX" Orders... by commondoubts New Member in Splunk Search 09-17-2012 0 1	0	1
Fields Creation Problem ?? Hi I have created a Field Called "DESTINATION" in this field i have the values like this.. Banglore Bombay Karanta... by rakesh_498115 Motivator in Splunk Search 09-16-2012 0 3	0	3
Field extractions, data types and convert() Hi -- I'm having some trouble with search-time field extractions that I've set up in the Splunk Manager. My tab-sep... by cmurtaugh Engager in Splunk Search 09-14-2012 1 5	1	5
Can I access the search timeframe within the search? I want to get at the duration of the search timeframe within the search itself. So if I set the search to look at th... by auntyem Explorer in Splunk Search 09-14-2012 2 8	2	8
Separate chart legend on dashboard Hello, I've got several charts on the same row that use the same legend. This particular dashboard is intended to be ... by rereeser Explorer in Splunk Search 09-14-2012 0 2	0	2
Subsearch with different date range Script sends VM configuration information into splunk daily. Trying to get a list of events that existed more than 3 ... by jkcouch Explorer in Splunk Search 09-14-2012 1 3	1	3
Colored table based on content I was wondering how to set the color of a table row based on a presence of word.for example i have an event that says... by ritazreiby New Member in Splunk Search 09-14-2012 0 1	0	1
The latest event for each IP address i have a list of events , sorted by ip addresses , i would like to see only the latest event for each ip, i tried usi... by ritazreiby New Member in Splunk Search 09-14-2012 0 2	0	2
Trying to find events greater than the average wtih streamstats Hi Guru's. I am trying to find events greater than the average of the last 10. I also want to display my results i... by pp_mills New Member in Splunk Search 09-13-2012 0 2	0	2
Problems with timechart I have a saved search that runs every hour and saves a count of events into a summary index. A chart on a dashboard ... by responsys_cm Builder in Splunk Search 09-13-2012 0 1	0	1
how to prevent specific syslog events from being collected? Hi. I am new to Splunk and I am trying to prevent specific logs to be collected. I have 3 Etehrnet switches and they ... by bjork6 New Member in Splunk Search 09-13-2012 0 4	0	4
Get top 5 field values (by percent) for multiple fields in a single search or report I have a simple need that I cannot solve. For a generic search of source=whatever filter1 filter2 filterx \| I want t... by jluste Path Finder in Splunk Search 09-13-2012 1 6	1	6
Can index compression be disabled once an index has already be created and is in use ? Can we disable index compression in the /opt/splunk/etc/system/default/indexes.conf file once indexes are created ? ... by pierrem350 Engager in Splunk Search 09-13-2012 2 3	2	3
SysLog based Alert I am trying to set up an Alert for syslog (udp:514) - and this is the search condition I use: sourcetype="syslog" TC... by asarolkar Builder in Splunk Search 09-13-2012 0 2	0	2
Source Host instead of Relay Host Due to network restrictions, I needed to use a server as a relay. This relay server in turn forwards the logs to my ... by jyanga New Member in Splunk Search 09-13-2012 0 8	0	8
How to let Intermediate Forwarder redirect some events to each indexer ? Hello, I would like to add one intermediate Forwarder between UF(Universal Forwarder) and 2 indexer. For ex: i want ... by sieutruc Contributor in Splunk Search 09-13-2012 0 1	0	1
How to add ArcGis data into Splunk? I want to add ArcGis data into Splunk but I do not know how to add because Arcgis data is different from Splunk data.... by leletrung New Member in Splunk Search 09-13-2012 0 1	0	1
data format... I'm looking at importing TCPDUMP data into Splunk purely for the graph functions and for the TOP functions available ... by DTERM Contributor in Splunk Search 09-12-2012 0 4	0	4
Collecting iPad activity data Has anyone Splunk'ed data from a iPad? Specifically, user activity data if it exists in the logs or cache? I think ... by pcjunkie Explorer in Splunk Search 09-12-2012 0 1	0	1
plot numeric value in a field on a google map Hi I am trying to plot numeric value in a field on a google map. I can show the count of a field, but can not figur... by melonman Motivator in Splunk Search 09-12-2012 0 2	0	2
How do I exclude everything but certain events at my heavy forwarder? At my HF I want to exclude everything BUT three websites. I have been playing with this for days now, that's what she... by dewald13 Path Finder in Splunk Search 09-12-2012 1 12	1	12