| HI, I try to define a field name using the below statement in the search column, however I do not get this filed sto... by tailesley New Member in Splunk Search 08-24-2011 0 1 | 0 | 1 | ||
| I have two files test1.csv and test2.csv. I indexed them in Splunk and then use them as lookup. These two files are r... by desi New Member in Splunk Search 08-24-2011 0 1 | 0 | 1 | ||
| I have some data that looks like this: priority=INFO thread= location= line= field1=OK,field2=OK,field3=OK....fie... by sf_user_199 Path Finder in Splunk Search 08-24-2011 1 3 | 1 | 3 | ||
| I've something of a challenge: How to best generate a single event in a summary index that is based on a transaction ... by David Splunk Employee 0 11 | 0 | 11 | ||
| Hi all, I may be going at this in the completely wrong way, but I'm looking at extracting information from traps sen... by jduraes Explorer in Splunk Search 08-23-2011 1 5 | 1 | 5 | ||
| Hello, i am trying to run add oneshot from cli but keep getting following error: C:\Program Files\Splunk\bin>splunk ... by desi New Member in Splunk Search 08-23-2011 0 2 | 0 | 2 | ||
| EventsViewers doesn't support Drilldown. How can modify default click actions? If I click on a segmentation, I would ... by houxiaoxiao Engager in Splunk Search 08-23-2011 0 1 | 0 | 1 | ||
| Hello everyone. The scenario: I create a saved search using Splunk webI want to use the search to populate a lookup... by noahzstahl Engager in Splunk Search 08-23-2011 0 2 | 0 | 2 | ||
| HI, Im very new to Splunk, i still learning to get splunk work to provide a high level report to the management to r... by tailesley New Member in Splunk Search 08-23-2011 0 1 | 0 | 1 | ||
| I'm was missing something really simple when trying to set up a new datasource, so i put these steps together as i fo... by agthurber Explorer in Splunk Search 08-22-2011 7 1 | 7 | 1 | ||
| I'm creating a simple table to show the success rate of an event. I've got the following statement in my splunk sear... by dang Path Finder in Splunk Search 08-22-2011 0 3 | 0 | 3 | ||
| Hi everyone, I got three Dashboards to list my different sourcetypes. ALL, test, production ALL: | metadata type=s... by matze4matze Engager in Splunk Search 08-22-2011 0 1 | 0 | 1 | ||
| How can I calculate a graph where: For each point plotted on the graph, the y-axis is a count of the number of disti... by wtanaka Explorer in Splunk Search 08-19-2011 0 2 | 0 | 2 | ||
| I have a log where each event can be given a boolean field with: | eval myfield=case(n > 0, "A", n=0, "B") So some ... by wtanaka Explorer in Splunk Search 08-19-2011 2 2 | 2 | 2 | ||
| We've got an XML file that is being parsed correctly (and easily - just piped into xmlkv) but one of the fields is nu... by mikeely Path Finder in Splunk Search 08-19-2011 0 2 | 0 | 2 | ||
| How can I format the output from a Splunk query? For example I have three fields extracted, A, B, C. I'd like to out... by timbCFCA Path Finder in Splunk Search 08-19-2011 0 3 | 0 | 3 | ||
| Hello, I was wondering if it's possible to schedule a search to run in increments less than 1 minute? Thanks by samiomer Path Finder in Splunk Search 08-18-2011 2 3 | 2 | 3 | ||
| All, I have a search that is looking for two specific events. One is for new 2008 OS's and up, the other is 2003 OS... by jcrensh Explorer in Splunk Search 08-18-2011 0 1 | 0 | 1 | ||
| I have a field like this: ... group="Group One,Group2,Some Other Group" ... Using 'makemv delim="," group' is eas... by mw Splunk Employee 0 4 | 0 | 4 | ||
| If I use the metadata command it only gives me keys for the main index, can I call it for other indexes? For example ... by Marinus Communicator in Splunk Search 08-18-2011 0 2 | 0 | 2 | ||
| I have the following two queries: index=MyApp earliest=-30d@d-2h latest=-1d@d+10h | bucket _time span=24h | stats su... by DTERM Contributor in Splunk Search 08-17-2011 1 6 | 1 | 6 | ||
| I'm new to all of this and can mainly do nothing but some simple searches. But if I wanted to create a graph showing... by jcott28 Explorer in Splunk Search 08-17-2011 0 4 | 0 | 4 | ||
| Hey everyone. I'm having a dumb moment, so please be gentle. I have a number of records, and each one has an ID to id... by msarro Builder in Splunk Search 08-17-2011 1 2 | 1 | 2 | ||
| We have set up many alerts to trigger based on a count threshold for a specific event over a set period of time. Give... by agthurber Explorer in Splunk Search 08-17-2011 1 2 | 1 | 2 | ||
| I installed splunk 4.2.3 and I want to monitor statistics of BIND 9.7.2 (DNS) queries through it. I used SPLUNK FOR B... by sdsajjadi New Member in Splunk Search 08-16-2011 0 3 | 0 | 3 |