Splunk Search

Splunk Search
Community Activity
tailesley
HI, I try to define a field name using the below statement in the search column, however I do not get this filed sto...
by tailesley New Member in Splunk Search 08-24-2011
0 1
0
1
desi
I have two files test1.csv and test2.csv. I indexed them in Splunk and then use them as lookup. These two files are r...
by desi New Member in Splunk Search 08-24-2011
0 1
0
1
sf_user_199
I have some data that looks like this: priority=INFO thread= location= line= field1=OK,field2=OK,field3=OK....fie...
by sf_user_199 Path Finder in Splunk Search 08-24-2011
1 3
1
3
David
I've something of a challenge: How to best generate a single event in a summary index that is based on a transaction ...
by David Splunk Employee Splunk Employee in Splunk Search 08-23-2011
0 11
0
11
jduraes
Hi all, I may be going at this in the completely wrong way, but I'm looking at extracting information from traps sen...
by jduraes Explorer in Splunk Search 08-23-2011
1 5
1
5
desi
Hello, i am trying to run add oneshot from cli but keep getting following error: C:\Program Files\Splunk\bin>splunk ...
by desi New Member in Splunk Search 08-23-2011
0 2
0
2
houxiaoxiao
EventsViewers doesn't support Drilldown. How can modify default click actions? If I click on a segmentation, I would ...
by houxiaoxiao Engager in Splunk Search 08-23-2011
0 1
0
1
noahzstahl
Hello everyone. The scenario: I create a saved search using Splunk webI want to use the search to populate a lookup...
by noahzstahl Engager in Splunk Search 08-23-2011
0 2
0
2
tailesley
HI, Im very new to Splunk, i still learning to get splunk work to provide a high level report to the management to r...
by tailesley New Member in Splunk Search 08-23-2011
0 1
0
1
agthurber
I'm was missing something really simple when trying to set up a new datasource, so i put these steps together as i fo...
by agthurber Explorer in Splunk Search 08-22-2011
7 1
7
1
dang
I'm creating a simple table to show the success rate of an event. I've got the following statement in my splunk sear...
by dang Path Finder in Splunk Search 08-22-2011
0 3
0
3
matze4matze
Hi everyone, I got three Dashboards to list my different sourcetypes. ALL, test, production ALL: | metadata type=s...
by matze4matze Engager in Splunk Search 08-22-2011
0 1
0
1
wtanaka
How can I calculate a graph where: For each point plotted on the graph, the y-axis is a count of the number of disti...
by wtanaka Explorer in Splunk Search 08-19-2011
0 2
0
2
wtanaka
I have a log where each event can be given a boolean field with: | eval myfield=case(n > 0, "A", n=0, "B") So some ...
by wtanaka Explorer in Splunk Search 08-19-2011
2 2
2
2
mikeely
We've got an XML file that is being parsed correctly (and easily - just piped into xmlkv) but one of the fields is nu...
by mikeely Path Finder in Splunk Search 08-19-2011
0 2
0
2
timbCFCA
How can I format the output from a Splunk query? For example I have three fields extracted, A, B, C. I'd like to out...
by timbCFCA Path Finder in Splunk Search 08-19-2011
0 3
0
3
samiomer
Hello, I was wondering if it's possible to schedule a search to run in increments less than 1 minute? Thanks
by samiomer Path Finder in Splunk Search 08-18-2011
2 3
2
3
jcrensh
All, I have a search that is looking for two specific events. One is for new 2008 OS's and up, the other is 2003 OS...
by jcrensh Explorer in Splunk Search 08-18-2011
0 1
0
1
mw
I have a field like this: ... group="Group One,Group2,Some Other Group" ... Using 'makemv delim="," group' is eas...
by mw Splunk Employee Splunk Employee in Splunk Search 08-18-2011
0 4
0
4
Marinus
If I use the metadata command it only gives me keys for the main index, can I call it for other indexes? For example ...
by Marinus Communicator in Splunk Search 08-18-2011
0 2
0
2
DTERM
I have the following two queries: index=MyApp earliest=-30d@d-2h latest=-1d@d+10h | bucket _time span=24h | stats su...
by DTERM Contributor in Splunk Search 08-17-2011
1 6
1
6
jcott28
I'm new to all of this and can mainly do nothing but some simple searches. But if I wanted to create a graph showing...
by jcott28 Explorer in Splunk Search 08-17-2011
0 4
0
4
msarro
Hey everyone. I'm having a dumb moment, so please be gentle. I have a number of records, and each one has an ID to id...
by msarro Builder in Splunk Search 08-17-2011
1 2
1
2
agthurber
We have set up many alerts to trigger based on a count threshold for a specific event over a set period of time. Give...
by agthurber Explorer in Splunk Search 08-17-2011
1 2
1
2
sdsajjadi
I installed splunk 4.2.3 and I want to monitor statistics of BIND 9.7.2 (DNS) queries through it. I used SPLUNK FOR B...
by sdsajjadi New Member in Splunk Search 08-16-2011
0 3
0
3
Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...
Top Solution Authors