Splunk Search

Splunk Search
Community Activity
EricPartington
I have a csv file that tracks firewall rule hits. I would like to create a form that reads the csv and populates a dr...
by EricPartington Communicator in Splunk Search 09-06-2011
1 1
1
1
samiomer
Hello, I was wondering if there's a configuration somewhere in Splunk where it would make my continuous real-time se...
by samiomer Path Finder in Splunk Search 09-06-2011
0 1
0
1
hgran
Hello, We have some google map geo-visualizations setup that uses event count by location. I was wondering if it is ...
by hgran Explorer in Splunk Search 09-06-2011
1 2
1
2
matt
What is the expected outcome of the "Yesterday" time function when applied to data from multiple timezones. I have a ...
by matt Splunk Employee Splunk Employee in Splunk Search 09-05-2011
2 2
2
2
laughterjj
In the search field, I entered: source=/logs/*/*.log it matches /logs/*/*.log and /logs/*/*/*.log. I need to see on...
by laughterjj New Member in Splunk Search 09-05-2011
0 2
0
2
sumitnagal
I have a extracted value from log, puserid. now I have map that Id to a user in lookup table. now when I am applying ...
by sumitnagal Path Finder in Splunk Search 09-04-2011
0 1
0
1
laughterjj
I create a search called: "poral_app_server", I made a modification to the search string, click "save search" and ty...
by laughterjj New Member in Splunk Search 09-04-2011
0 1
0
1
swapsapar
Hi, I'm trying to understand how the Field Discovery part works by default while dealing with a multi-value string c...
by swapsapar New Member in Splunk Search 09-03-2011
0 1
0
1
maverick
I currently have some medical records in doc form that are binary text created in ms office word. I want to create d...
by maverick Splunk Employee Splunk Employee in Splunk Search 09-02-2011
0 3
0
3
tven7
I have a bunch of uris to extract and categorize. And after that i need to timechart it by category. so say the log ...
by tven7 Path Finder in Splunk Search 09-02-2011
0 1
0
1
clintla
I've got a chart that works great but just wanting to re-arrange the result. timechart eval(sum(Logical_Capacity_Bl...
by clintla Contributor in Splunk Search 09-02-2011
0 7
0
7
sscandoit
Hi All, I have the following setup in my environment: 1) light forwarder installed on the machine where logs are gen...
by sscandoit Explorer in Splunk Search 09-02-2011
0 2
0
2
Dark_Ichigo
I have a problem where I have a table that has a _time column and two other columns, I have a search that sorts that ...
by Dark_Ichigo Builder in Splunk Search 09-02-2011
1 6
1
6
jchensor
I do realize there is another thread where someone asks the same question, but he solved his problem when he checked ...
by jchensor Communicator in Splunk Search 09-01-2011
0 1
0
1
JovanMilosevic
We have a flat file that contains user data. Changes made to this file are not audited. I'd like Splunk to report o...
by JovanMilosevic Path Finder in Splunk Search 09-01-2011
1 2
1
2
cpenkert
I created a search time that works as expected when I do a search on only the sourcetype that I created the extractio...
by cpenkert Path Finder in Splunk Search 09-01-2011
1 5
1
5
cramasta
Hi, Hoping this is something simple that I'm not understanding. Example Data: Sourcetype=A Sport1=baseball SourceT...
by cramasta Builder in Splunk Search 08-31-2011
0 5
0
5
lisaac
I have an _raw event with data that I would like to break out into key value pairs. I was wondering if anyone had any...
by lisaac Path Finder in Splunk Search 08-31-2011
0 1
0
1
huaraz
Hi, I am new to splunk and heard it can do nearly every type of reporting. I have an ADSL router creating logs in th...
by huaraz Explorer in Splunk Search 08-31-2011
0 4
0
4
DTERM
I'm getting error an on piping one command into another. The result is a "Search operation 'earliest' is unknown. You...
by DTERM Contributor in Splunk Search 08-31-2011
0 3
0
3
huaraz
How can I check if my custom fields work ? How can I list the content of custom fields ? Thank you Markus
by huaraz Explorer in Splunk Search 08-31-2011
0 3
0
3
zachvida
Hello fellow Splunkers! ipc=ipc1-r6c10 Intake-Temperature=70 Exhaust-Temperature=82 Humidity=44% Amps=6 Voltage=351...
by zachvida Path Finder in Splunk Search 08-31-2011
0 2
0
2
mikefoti
I just setup my test forefront proxy server to forward logs to my test Splunk indexer. Is there a stash of existing q...
by mikefoti Communicator in Splunk Search 08-31-2011
1 6
1
6
muebel
I have blue bar notification in each view informing me that an event was received "for unconfigured/disabled index='s...
by SplunkTrust SplunkTrust in Splunk Search 08-30-2011
2 7
2
7
kkalmbach
I have a field that looks like this: key1=value1*key2=value2*key3=value3 I put in a stanza in transforms that looks ...
by kkalmbach Path Finder in Splunk Search 08-30-2011
0 3
0
3
Get Updates on the Splunk Community!

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...
Top Solution Authors