Splunk Search

Community Activity

Count client IP access to Web Server Hi All, I want to count how many IP access to my Web Server in a period ? I really don't know Please show me sample ... by goldarrow New Member in Splunk Search 05-25-2011 0 1	0	1
Best Way to search using a lookup table? I'm running a search across a bunch of data, say syslogs, that has a lot of different source_IPs. I make a lookup ta... by gohar Explorer in Splunk Search 05-25-2011 0 9	0	9
Average duration What is the syntax to obtain the average duration for each severity type in a query? A field exists called app_durati... by DTERM Contributor in Splunk Search 05-24-2011 1 1	1	1
query summary What is a the search string that will provide "severity counts by SupportGroup"? TIA by DTERM Contributor in Splunk Search 05-24-2011 0 1	0	1
How do I search for the = character? In many of our web proxy logs we see the equal sign (=) included in many URLs. I'm searching for certain patterns th... by castle1126 Communicator in Splunk Search 05-24-2011 1 5	1	5
splunk URL query Is there a method for Splunk to generate a search if another application passes Splunk a URL? For this example, let’... by DTERM Contributor in Splunk Search 05-24-2011 0 2	0	2
Unwanted characters in time stamp I have a log with a timestamp that looks like this: <135>May 24 03:20:33 I'm no regexp expert so I am asking, what ... by Oakley Explorer in Splunk Search 05-24-2011 0 2	0	2
How to redirect from one view to another Hi, I have one view with Line graph and i am using timechart for drawing it. I want to redirect to another view whil... by geetanjali Path Finder in Splunk Search 05-23-2011 1 1	1	1
Dynamic Stats Counting I want to take data I am receiving from snmp from my Cisco devices about their inventory and perform a count. The da... by jaoui Path Finder in Splunk Search 05-23-2011 3 3	3	3
Get the first occurrence of a value \| results limit problem? Hi there, We need to know when is the first occurrence of a certain value, and show a list of items that appeared las... by hbazan Path Finder in Splunk Search 05-23-2011 0 6	0	6
Ignoring Case on field values Im extracting values on a field with this Reg ex: <technology[^>]*>(?P<Technology>[^<]+) It returns different valu... by DotTest37 Path Finder in Splunk Search 05-23-2011 0 2	0	2
Displaying 'Unknown' when Lookup fail to find a match I have an Automatic Lookup working just fine. Some of the values Im matching doesn't exist yet on the CSV table (they... by DotTest37 Path Finder in Splunk Search 05-23-2011 1 1	1	1
Match the value in same fieldname on different log Hi All, I need to match two value from different logs but same field name. How can I do that? Example I have Ironpor... by marendra Explorer in Splunk Search 05-23-2011 0 2	0	2
Getting "Series filtering is disabled if a split-by field is used in conjunction with multiple data" warning I have shown time-chart for 2 fields. The Query is as follows: timechart max(input_error) , max(output_error) by ho... by tkadale Path Finder in Splunk Search 05-22-2011 2 2	2	2
How do I do lookups based on many forms of regex/event? I'm having no success making sense of lookups. Some work, some don't, and I can't figure out why. Let's take an obv... by jblaine Explorer in Splunk Search 05-22-2011 0 4	0	4
Two saved searches throwing errors When I attempt to run the searches "Cisco Firewall - Denies Over Last 24 Hours" or "Cisco Firewall - Accepts Over Las... by mwtimken New Member in Splunk Search 05-21-2011 0 2	0	2
Why does my 'accept rate' stay at 0%? My accept rate stays at 0% even though I have 3 out of 5 questions where I accepted an answer. Looks like there's a b... by zsimic Path Finder in Splunk Search 05-21-2011 2 2	2	2
combining delta/where searches These searches: index=foo \| delta a as a_delta \| where a_delta < 0 index=foo \| delta b as b_delta \| where b_d... by tedder Communicator in Splunk Search 05-20-2011 0 1	0	1
top n by servicename I have a splunk instance with many serviceName's in the logs. Is there a query where I can extract the top 15 of each... by DTERM Contributor in Splunk Search 05-20-2011 0 2	0	2
Best way to correlate two sources Hey everyone. We have a number of different sources. Each needs to be correlated with the others using either an ingr... by msarro Builder in Splunk Search 05-20-2011 0 1	0	1
real-time search and field extraction/transformation I used to have an index-time field extraction on one of my source types in order to get the error code of the message... by alexiri Communicator in Splunk Search 05-20-2011 0 4	0	4
calculating average Need some help on search string to calculate 10 minute average and generate alert. say for example Virtual memory usa... by pmr Explorer in Splunk Search 05-20-2011 0 3	0	3
Populate initial realtime chart with historical data. Hi All, I understand that real time charting works on data as it arrives so you will not see anything on the chart u... by phoenixdigital Builder in Splunk Search 05-19-2011 2 4	2	4
How to restrict a search to match a full word? How to search for a whole word? I try searching for something like "something", but I get matches for many things sta... by zsimic Path Finder in Splunk Search 05-19-2011 1 2	1	2
Regex Question - empty field? Hey everyone. I am working on trying to assemble a regular expression to pull fields out of a set of CSV files. The i... by msarro Builder in Splunk Search 05-19-2011 0 11	0	11

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Splunk Search

Count client IP access to Web Server

Best Way to search using a lookup table?

Average duration

query summary

How do I search for the = character?

splunk URL query

Unwanted characters in time stamp

How to redirect from one view to another

Dynamic Stats Counting

Get the first occurrence of a value | results limit problem?

Ignoring Case on field values

Displaying 'Unknown' when Lookup fail to find a match

Match the value in same fieldname on different log

Getting "Series filtering is disabled if a split-by field is used in conjunction with multiple data" warning

How do I do lookups based on many forms of regex/event?

Two saved searches throwing errors

Why does my 'accept rate' stay at 0%?

combining delta/where searches

top n by servicename

Best way to correlate two sources

real-time search and field extraction/transformation

calculating average

Populate initial realtime chart with historical data.

How to restrict a search to match a full word?

Regex Question - empty field?

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Event Series: Telemetry Pipeline Management

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation