Splunk Search

Community Activity

How to compare my search table to lookup table and output the not match result to my search table? I have lookup table like Date ID Name 02/04 12547 xxx02/04 12458 xxx02/04 145... by karu0711 Communicator in Splunk Search 04-13-2023 0 3	0	3
What is the difference between a lookup search and index searches? Hi, I need your help in order to get the difference between two searches. I have a task running once a day on all my ... by fariapm1 Explorer in Splunk Search 04-13-2023 0 2	0	2
Why is the scroll is not working on a table viz? I am using Dashboard Studio, and When I create a table viz the scroll is not working, and neither is the next button.... by Anujin Loves-to-Learn in Splunk Search 04-13-2023 0 0	0	0
How to display the bar with both values even when there are no results for failed? I have a bar graph that shows the status (Success and failed). I want to display the bar with both values even when t... by splunkuser320 Path Finder in Splunk Search 04-12-2023 0 2	0	2
How to generate an accumulating total bucketed by day per user? Hello,Im trying to accumulate and analyze a persons risk score every day, once per day, and only fire when the total ... by mjones414 Contributor in Splunk Search 04-12-2023 0 1	0	1
Why is subsearch not working with regex? I'm attempting to find file downloads within a 2 minute timespan following a browser being spawned from outlook (my s... by asaphappy New Member in Splunk Search 04-12-2023 0 9	0	9
How to create a line chart with received time on Y axis and date on X axis? I'm looking to create a line chart like the attached picture. The data points would be the time a file is received, t... by Curiuu Engager in Splunk Search 04-12-2023 0 2	0	2
How to modify my search to data model search by adding a lookup table? Hi, My task involves creating a search in datamodel i.e network_traffic, below is the base search how we could conver... by balu1211 Path Finder in Splunk Search 04-12-2023 0 1	0	1
How to correlate a field from a query to a field from a lookup file? Hello. I've been watching a few lookup videos but they mostly concentrate on extracting data from a lookup file. None... by dionrivera Communicator in Splunk Search 04-12-2023 0 6	0	6
How to plot differences of values over time? hi all I have a data set like this: _time, duration, category XXX, 0.145,A XXY, 0.177,B XXZ, 0.178, A XXX, XXY,XXZ ar... by henry_chiang New Member in Splunk Search 04-12-2023 0 4	0	4
How to left join ext data to event and perform rowwise eval? I have a lookup table with an event name with min max thresholds I need to join this (left on the lookup) with the ev... by krbalaji77 Explorer in Splunk Search 04-12-2023 0 7	0	7
How to perform Lookup Using Event Field that is a List? I have an event field that is a list of "permissions" , and I want to perform a lookup for each permission in the li... by rrossetti Splunk Employee in Splunk Search 04-12-2023 0 2	0	2
Splunk Cloud: How do we extract multiple values for one field for one entry? for splunk cloud how do we extract multiple values for one field for one entry by mcristinzio New Member in Splunk Search 04-12-2023 0 1	0	1
Help with latest and earliest Hi, I would like to know if someone can help me with this issue. I am trying to add a time constraint to an SPL and I... by Diana_a Explorer in Splunk Search 04-12-2023 0 2	0	2
Why is it incorrectly showing some values as NULL? Here is the raw log { "markers": { "requestId": "RAWWyBVRjlX1wCr3JPINpZz6TLfa6FAM_09c958c6", ... by 6abhay New Member in Splunk Search 04-12-2023 0 2	0	2
How to choose color based on text value? Hi there! I need to choose the color in the dashboard based on the text results in dashboard, where the value ... by smanojkumar Contributor in Splunk Search 04-12-2023 0 14	0	14
How to create new field based on table values? Dear Experts..Looking for help with a Splunk Query...I was working on a Splunk Query to identify the Frames connectio... by satish Explorer in Splunk Search 04-12-2023 0 4	0	4
How can I compute value based on group by values in timechart? \| eval vm_unit=case(vmSize="Standard_F16s_v2",2,vmSize="Standard_F8s_v2",1,vmSize="Standard_F4s",0.5,vmSize="Standard... by Sathiya123 Explorer in Splunk Search 04-12-2023 0 5	0	5
How to convert SQL query to Splunk search? Hi, I have the following tables: asset table:asset_idsolution_idvulnerability_id solution table:solution_idsolution s... by idkgirly Loves-to-Learn in Splunk Search 04-11-2023 0 3	0	3
How to correlate nested parent child jobs? Hi,we have to monitor some jobs in which One Job could have multiple sub task. It could be nested dependency as well... by AKG11 Path Finder in Splunk Search 04-11-2023 1 10	1	10
How to search and create table report? I have a logfile with information like this - 2023-04-05 13:54:17.259 INFO [http-nio-8080-exec-117][OTPViewController... by runiyal Path Finder in Splunk Search 04-11-2023 0 3	0	3
How to include multiple fields of the same type? I would like to add all instances of a field within the same variable, named SynchronousExecution. Is there a better ... by trevor7 Engager in Splunk Search 04-11-2023 0 2	0	2
How to achieve average of first 7 vs last 7 records? Hi team,I have 14 records in the table, I want to find out average of first 7 and average of last 7 recordsHow can I... by agupta13 Engager in Splunk Search 04-11-2023 0 1	0	1
How to separate OS name and OS version values from a field having combined value? I have a column that holds OS Name along with it's version details. os_full_nameCentOS Linux release 7.1.1503 (Core)... by sh254087 Communicator in Splunk Search 04-11-2023 0 1	0	1
How to write a rex expression to pull out a specific bit of data? Hello! So I'm trying to write a rex expression to pull out a specific bit of data from this:<plugin_output>Operating ... by TorbinIT Path Finder in Splunk Search 04-11-2023 0 2	0	2