Splunk Search

Splunk Search
Community Activity
keithstone
I have about 10 Windows computers using the universal forwarder to report CPU utilization, memory, disk and network c...
by keithstone New Member in Splunk Search 06-29-2012
0 2
0
2
adityapavan18
I have a situation where i dont need people to see the data in lookup file,so i want to encrypt it.Can splunk decrypt...
by adityapavan18 Contributor in Splunk Search 06-29-2012
0 1
0
1
Ikanui123
Hello, I want to search for an entry that contains UsersController#update and with the following entry that contain ...
by Ikanui123 New Member in Splunk Search 06-28-2012
0 3
0
3
nebel
hi there, with the search... `all_forwarders` | fields sourceHost ...I will get all forwarder host names. On th...
by nebel Communicator in Splunk Search 06-28-2012
0 1
0
1
responsys_cm
I'm using transaction to build a list of actions taken on behalf of our users. Is it possible to run stats to count ...
by responsys_cm Builder in Splunk Search 06-28-2012
0 1
0
1
DTERM
What is the simplest way to populate a lookup table? I started creating a cronjob. However the splunk search comman...
by DTERM Contributor in Splunk Search 06-28-2012
0 2
0
2
SarahWKarvenz
I would like to use the add column totals to get the sum of certain rows. Is there a way to specify a "by" clause in ...
by SarahWKarvenz Path Finder in Splunk Search 06-28-2012
0 1
0
1
DTERM
I've got date field in a splunk log that looks like: firstOccurrence=2012/06/27 14:55:12 Splunk does not interpret ...
by DTERM Contributor in Splunk Search 06-28-2012
0 3
0
3
splunk_zen
I'm trying to get a table showing the current daily average vs the previous month average, but I'm unsure I got the c...
by splunk_zen Builder in Splunk Search 06-28-2012
0 3
0
3
HansK
I'm trying to create a chart based on this data, the Num field changes every day: 2012-06-28 13:57:48 operator=TLFT ...
by HansK Path Finder in Splunk Search 06-28-2012
0 3
0
3
Dark_Ichigo
I want to change the percentage results of the follwoing search into decimal based Percentages, as I want the 0.5% fo...
by Dark_Ichigo Builder in Splunk Search 06-27-2012
0 2
0
2
cfortune
We have a Splunk instance here at my job that I've inherited. I rarely have to go do anything in it so my Splunk Fu i...
by cfortune Explorer in Splunk Search 06-27-2012
3 3
3
3
itrcb4
So I installed universal forwarder on my Exchange 2010 server, during install specified the splunk server's FQDN. On...
by itrcb4 New Member in Splunk Search 06-27-2012
0 7
0
7
responsys_cm
I'm trying to figure out if there is some combination of subsearches or other operations that will allow me to accomp...
by responsys_cm Builder in Splunk Search 06-27-2012
0 4
0
4
rakesh_498115
Hi , I have created a advance dashboard with the module tags and all.can i use the table tag to display my search re...
by rakesh_498115 Motivator in Splunk Search 06-27-2012
0 1
0
1
KaliBaker
I have a function where I take a number, divide it by 3, then would like to round that number down. Is that possible ...
by KaliBaker Engager in Splunk Search 06-27-2012
0 4
0
4
tobypass
Hi there Theoretical scenario: I have one search head and two indexers all on physical servers I am forwarding all s...
by tobypass New Member in Splunk Search 06-27-2012
0 1
0
1
LauraBre
hello, This is my search: source=tcp:5555 PURCH_DAY=06-14 PURCH_DATE=19 PURCH_MIN>44 | stats count by ID_CARDHOLDE...
by LauraBre Communicator in Splunk Search 06-27-2012
0 3
0
3
monicato
I'm trying to search two different fields and I'm trying to combine the search with "AND" but it doesn't seem to work...
by monicato Path Finder in Splunk Search 06-26-2012
0 2
0
2
aferone
Hello to all, I am using the search in the link below to find hosts that haven't logged in a certain amount of time:...
by aferone Builder in Splunk Search 06-26-2012
0 2
0
2
balavenkatachal
Scenario: I need to get a single dashboard out of 3 different sourcetype by passing a unique ID using the form view....
by balavenkatachal New Member in Splunk Search 06-26-2012
0 2
0
2
rakesh_498115
Hi , Actually i have two events in the output like this... event 1 ...... ... ...... User Message ...... .... .....
by rakesh_498115 Motivator in Splunk Search 06-26-2012
0 2
0
2
rakesh_498115
Hi, Assume i have some 4 search Queries like Q1,Q2,Q3 and Q4 . These Four Queries were no realted to each other and ...
by rakesh_498115 Motivator in Splunk Search 06-26-2012
0 1
0
1
sg5258
I working on a query to pinpoint a login attempt failure on a particular network address.. hence i use a count stat o...
by sg5258 Explorer in Splunk Search 06-26-2012
0 5
0
5
MrWh1t3
I am trying to create a regex that will parse a portion of a sentence within a Windows Log event. As an example, Eve...
by MrWh1t3 Path Finder in Splunk Search 06-25-2012
0 4
0
4
Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them.    As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...