| I just did a clean installation of splunk on my windows7 64bit workstation. why is search history not showing up whi... by aviadr1 Explorer in Splunk Search 10-27-2011 0 3 | 0 | 3 | ||
| using the opsec lea app and noticed that two of the default kv extract key/value pairs werent working for me. The log... by EricPartington Communicator in Splunk Search 10-27-2011 1 2 | 1 | 2 | ||
| Now, I am collecting a disk space log by using a WMI. I want to make a stacked bar chart about disk space. How can I ... by lanying Explorer in Splunk Search 10-27-2011 0 4 | 0 | 4 | ||
| Hi... Pls forgive me, I have not used Regular Expressions in quite a while, and the following one really threw me. ... by mfeeny1 Path Finder in Splunk Search 10-26-2011 0 2 | 0 | 2 | ||
| Hi all, I am mainly asking this here as it's a little past my knowledge with Splunk. Basically, I'm after a way of c... by aaronnicoli Path Finder in Splunk Search 10-26-2011 0 5 | 0 | 5 | ||
| We have a wireless controller that provides logs. I am trying to construct a search that would provide the number of... by jodros Builder in Splunk Search 10-26-2011 1 8 | 1 | 8 | ||
| hi. We are splunking this dhcp service we have and we had a problem id like to narrow down with a smart search : I ha... by dragmore88 New Member in Splunk Search 10-26-2011 0 3 | 0 | 3 | ||
| Env: Windows 2008 R2, Splunk 4.2.2 For the last month or so most of the Splunk search screens have not been completi... by rnadler Engager in Splunk Search 10-26-2011 0 1 | 0 | 1 | ||
| I have two hosts, one named lower case 'server01', the other named upper case 'SERVER01'. When I do a search such as ... by blee_i365 Explorer in Splunk Search 10-25-2011 0 1 | 0 | 1 | ||
| Hi, I'm trying to create a Search view that only searches on the index I specify. But I don't seem to figure out how... by mplacido Explorer in Splunk Search 10-25-2011 1 3 | 1 | 3 | ||
| I would like to display the average time Oracle is taking to perform a check point. I have filtered out the following... by john_kennan Engager in Splunk Search 10-24-2011 0 1 | 0 | 1 | ||
| Hi, I am trying to do a timechart which shows the amount of sessions opened/closed. Where the Opened and Closed are ... by venterdaniel Engager in Splunk Search 10-24-2011 0 2 | 0 | 2 | ||
| We have some timecharts that display information collected by Server_IP, using searches similar to this ... | timech... by beaumaris Communicator in Splunk Search 10-22-2011 1 4 | 1 | 4 | ||
| I currently am using a lookup table to match Host Names with a "grouping" category. However, there are a ton of entr... by jchensor Communicator in Splunk Search 10-21-2011 2 3 | 2 | 3 | ||
| I have 3 data sources. Data source 1 "Request": the Format of this data source is XML. The Fields are: id, MAC, time... by lpolo Motivator in Splunk Search 10-21-2011 0 1 | 0 | 1 | ||
| I'd like to have a stacked column chart showing the number of successful and failed requests to URLs over time. Follo... by jon New Member in Splunk Search 10-21-2011 0 4 | 0 | 4 | ||
| Is it possible to view the most recent list of searches and queries executed in Splunk? If so, how? by suhprano Path Finder in Splunk Search 10-20-2011 0 1 | 0 | 1 | ||
| Is it possible to view the most recent list of searches and queries executed in Splunk? If so, how? by suhprano Path Finder in Splunk Search 10-20-2011 0 1 | 0 | 1 | ||
| Hi, I have a novice question, but is it possible to have more than one sourcetype for a given source? by Samslara Explorer in Splunk Search 10-20-2011 0 1 | 0 | 1 | ||
| I was collecting windows event logs using agent less Splunk server through remote WMI calls and the "sourcetype=WMI:W... by hartfoml Motivator in Splunk Search 10-20-2011 0 5 | 0 | 5 | ||
| Hello, I've figured out how to start a real-time search job. I'm wondering if there's any way to trigger a shell co... by mknowles Engager in Splunk Search 10-20-2011 2 7 | 2 | 7 | ||
| Hi, I have a log where the, app logs the various steps for a unique opertaion id (id below) -> ...... ts=13188618399... by anshumishra New Member in Splunk Search 10-19-2011 0 3 | 0 | 3 | ||
| The transaction command matches only the first instance of the specified endswith, however it's possible and likely t... by lisa_1 Explorer in Splunk Search 10-19-2011 2 4 | 2 | 4 | ||
| Hi, I have 2 search queries. sourcetype="zzz" Accepted | stats count as SuccessCases sourcetype="zzz" Rejected | s... by adityapavan18 Contributor in Splunk Search 10-19-2011 0 7 | 0 | 7 | ||
| I have this regex expresion: REGEX = (?m)^EventCode=(4674)|(ServerName\$) This works great to identify the two cond... by hartfoml Motivator in Splunk Search 10-19-2011 0 10 | 0 | 10 |