Splunk Search

Splunk Search
Community Activity
aviadr1
I just did a clean installation of splunk on my windows7 64bit workstation. why is search history not showing up whi...
by aviadr1 Explorer in Splunk Search 10-27-2011
0 3
0
3
EricPartington
using the opsec lea app and noticed that two of the default kv extract key/value pairs werent working for me. The log...
by EricPartington Communicator in Splunk Search 10-27-2011
1 2
1
2
lanying
Now, I am collecting a disk space log by using a WMI. I want to make a stacked bar chart about disk space. How can I ...
by lanying Explorer in Splunk Search 10-27-2011
0 4
0
4
mfeeny1
Hi... Pls forgive me, I have not used Regular Expressions in quite a while, and the following one really threw me. ...
by mfeeny1 Path Finder in Splunk Search 10-26-2011
0 2
0
2
aaronnicoli
Hi all, I am mainly asking this here as it's a little past my knowledge with Splunk. Basically, I'm after a way of c...
by aaronnicoli Path Finder in Splunk Search 10-26-2011
0 5
0
5
jodros
We have a wireless controller that provides logs. I am trying to construct a search that would provide the number of...
by jodros Builder in Splunk Search 10-26-2011
1 8
1
8
dragmore88
hi. We are splunking this dhcp service we have and we had a problem id like to narrow down with a smart search : I ha...
by dragmore88 New Member in Splunk Search 10-26-2011
0 3
0
3
rnadler
Env: Windows 2008 R2, Splunk 4.2.2 For the last month or so most of the Splunk search screens have not been completi...
by rnadler Engager in Splunk Search 10-26-2011
0 1
0
1
blee_i365
I have two hosts, one named lower case 'server01', the other named upper case 'SERVER01'. When I do a search such as ...
by blee_i365 Explorer in Splunk Search 10-25-2011
0 1
0
1
mplacido
Hi, I'm trying to create a Search view that only searches on the index I specify. But I don't seem to figure out how...
by mplacido Explorer in Splunk Search 10-25-2011
1 3
1
3
john_kennan
I would like to display the average time Oracle is taking to perform a check point. I have filtered out the following...
by john_kennan Engager in Splunk Search 10-24-2011
0 1
0
1
venterdaniel
Hi, I am trying to do a timechart which shows the amount of sessions opened/closed. Where the Opened and Closed are ...
by venterdaniel Engager in Splunk Search 10-24-2011
0 2
0
2
beaumaris
We have some timecharts that display information collected by Server_IP, using searches similar to this ... | timech...
by beaumaris Communicator in Splunk Search 10-22-2011
1 4
1
4
jchensor
I currently am using a lookup table to match Host Names with a "grouping" category. However, there are a ton of entr...
by jchensor Communicator in Splunk Search 10-21-2011
2 3
2
3
lpolo
I have 3 data sources. Data source 1 "Request": the Format of this data source is XML. The Fields are: id, MAC, time...
by lpolo Motivator in Splunk Search 10-21-2011
0 1
0
1
jon
I'd like to have a stacked column chart showing the number of successful and failed requests to URLs over time. Follo...
by jon New Member in Splunk Search 10-21-2011
0 4
0
4
suhprano
Is it possible to view the most recent list of searches and queries executed in Splunk? If so, how?
by suhprano Path Finder in Splunk Search 10-20-2011
0 1
0
1
suhprano
Is it possible to view the most recent list of searches and queries executed in Splunk? If so, how?
by suhprano Path Finder in Splunk Search 10-20-2011
0 1
0
1
Samslara
Hi, I have a novice question, but is it possible to have more than one sourcetype for a given source?
by Samslara Explorer in Splunk Search 10-20-2011
0 1
0
1
hartfoml
I was collecting windows event logs using agent less Splunk server through remote WMI calls and the "sourcetype=WMI:W...
by hartfoml Motivator in Splunk Search 10-20-2011
0 5
0
5
mknowles
Hello, I've figured out how to start a real-time search job. I'm wondering if there's any way to trigger a shell co...
by mknowles Engager in Splunk Search 10-20-2011
2 7
2
7
anshumishra
Hi, I have a log where the, app logs the various steps for a unique opertaion id (id below) -> ...... ts=13188618399...
by anshumishra New Member in Splunk Search 10-19-2011
0 3
0
3
lisa_1
The transaction command matches only the first instance of the specified endswith, however it's possible and likely t...
by lisa_1 Explorer in Splunk Search 10-19-2011
2 4
2
4
adityapavan18
Hi, I have 2 search queries. sourcetype="zzz" Accepted | stats count as SuccessCases sourcetype="zzz" Rejected | s...
by adityapavan18 Contributor in Splunk Search 10-19-2011
0 7
0
7
hartfoml
I have this regex expresion: REGEX = (?m)^EventCode=(4674)|(ServerName\$) This works great to identify the two cond...
by hartfoml Motivator in Splunk Search 10-19-2011
0 10
0
10
Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...
Top Solution Authors