Splunk Search

Community Activity

Question regarding Search Jobs What is meant by creating new search job that runs "search error" ? by misteryuku Communicator in Splunk Search 03-08-2012 0 4	0	4
problem in query I am using this query to get the Percentage CPU Utilization. index=os sourcetype="cpu" minutesago=15 \| eval human_re... by kuldeepsingh99 New Member in Splunk Search 03-08-2012 0 5	0	5
searching for disk and network commands Does anyone know how do I perform a search on the "top 10 processes by disk" which consists of the names as well as ... by HY Explorer in Splunk Search 03-08-2012 0 2	0	2
\|dbinspect returns No results When I try to run dbinspect, it returns no results: \| dbinspect index=_internal span=1d I have a single search head ... by mikelanghorst Motivator in Splunk Search 03-08-2012 3 1	3	1
Count number of users who logged in every hour for last 15 days Hi, My log contains entries as shown below: [2012-03-07 23:57:49:107 GMT+00:00][12321312332432545435435543.http-808... by freephoneid Path Finder in Splunk Search 03-08-2012 0 7	0	7
Top Results After Timechart I don't really know how to explain this so I will do my best. I have a bunch of data that I want to analyze. Each li... by rhum_defintel New Member in Splunk Search 03-08-2012 0 3	0	3
How to find max value of multiple fields in one record? I have a record that shows multiple temperature readings of a device in a single record. Each "temp" has it's own un... by paganom New Member in Splunk Search 03-08-2012 0 2	0	2
Creating a search job. To create a search job one has to 1.use the REST endpoint '/services/search/jobs'. 2.Use the POST method and inclu... by misteryuku Communicator in Splunk Search 03-08-2012 0 1	0	1
Lead\ Lag in splunk? Hi, when I work with SQL I find the "Lead\ Lag" function very crutial. I'm using it mostly between dates. Does splun... by Yarsa Path Finder in Splunk Search 03-07-2012 0 3	0	3
How to search for results using Java splunk api How do i call the Java splunk api to search using the splunk search language from the Splunk search endpoint? by misteryuku Communicator in Splunk Search 03-07-2012 0 1	0	1
find max of averaged field over a month of daily data I've got a very basic query which computes an average of some daily attempts to do something like this: index=monito... by dang Path Finder in Splunk Search 03-07-2012 0 1	0	1
find max of two averaged fields over a month of daily data I've got a very basic query which computes an average of some daily attempts to do something like this: index=monito... by dang Path Finder in Splunk Search 03-07-2012 0 2	0	2
Unable to get viewstate information;formatting may not be correct From time to time when moving an application from development to production we get the following view start error. "U... by fresned Path Finder in Splunk Search 03-07-2012 0 1	0	1
Reformat a field My logs contain mac addresses. Sometimes they have colons and sometimes dots. I want to build a view where the user ... by fk319 Builder in Splunk Search 03-07-2012 0 5	0	5
timechart without a split clause not showing all results I have a search showing 288 results but the chart is not showing them all I know timechart has a "limit" switch but ... by hartfoml Motivator in Splunk Search 03-07-2012 0 8	0	8
Top Values of 2 fields Hi, I'm trying to create a search that would show the following data Top unique field1 Top field2 E.g. (Userna... by mcm10285 Communicator in Splunk Search 03-07-2012 3 5	3	5
Getting "error code 1" messages when trying to do an external lookup 4.3 In 4.3 Getting "error code 1" messages when trying to do an external lookup with a Python Script. Script runs ok sta... by davecroto Splunk Employee in Splunk Search 03-07-2012 0 2	0	2
multiple output rex with a directory sometimes exists Hi I have a question about a rex with multiple outputs. I use rex to get two fields out of the source-path to fill t... by fritzsplunk Engager in Splunk Search 03-07-2012 0 1	0	1
splunk 4.3 - searchPostProcess on chart component not working After upgrading to 4.3 our custom forms with a chart component started to show up the following error: Search did ... by chusi New Member in Splunk Search 03-06-2012 0 8	0	8
Join or something better? I'm new to splunk, here's my issue. I have a log file which contains the extracted fields below: task_id task_duratio... by tb582 Explorer in Splunk Search 03-06-2012 0 6	0	6
Dotted Line chart with Multiple Lines A while back I posted this question: http://splunk-base.splunk.com/answers/29015/dotted-line-chart The answer gave m... by Dark_Ichigo Builder in Splunk Search 03-06-2012 0 4	0	4
Help with a STRPTIME So when Splunk admon changed from 4.1.5 to 4.1.6 they also changed how it exacted a timestamp field from AD 4.1.5 ha... by cramasta Builder in Splunk Search 03-06-2012 0 2	0	2
Run "splunk test" in Windows command line I used windows version Splunk 4.3. I was trying to run the following line command in window shell: splunk test sourc... by myli12 Path Finder in Splunk Search 03-06-2012 3 1	3	1
Human Redable Legend text without using case Hi, My log snippet is as shown below: productid=12 email=abc@gg.com productid=13 email=pqr@aa.com productid=14 em... by freephoneid Path Finder in Splunk Search 03-06-2012 0 1	0	1
Pick latest event Hi, I want only return the latest event The following seems to work so far. It is correct? No entirely sure what the... by aleem SplunkTrust in Splunk Search 03-06-2012 0 1	0	1