Splunk Search

Community Activity

Filter event data and send to nullqueue - DOES NOT WORK Hi, I am running the free version 4.2 and trying to follow the instruction here http://www.splunk.com/base/Documenta... by vuong Explorer in Splunk Search 03-22-2011 2 4	2	4
search fields - OTHER Hey, By default when you run some Splunk searches, some of the results end up going under a field named OTHER. I kn... by Ant1D Motivator in Splunk Search 03-22-2011 0 3	0	3
Searches taking long? I'm not sure if I am storing the streams properly in order for the search to process optimally. How do I know if the ... by suhprano Path Finder in Splunk Search 03-22-2011 0 4	0	4
TImestamps problem Hi Im running the newest splunk, with syslog-ng fifo pipe as a source and logs are coming from around the globe, spl... by kraveruk Explorer in Splunk Search 03-22-2011 1 3	1	3
SLA monitoring: percentage of slow transactions I have selected and filtered a bunch of transactions that are part of KPI in our SLA. We define "slow" transactions ... by bowa Path Finder in Splunk Search 03-22-2011 0 4	0	4
Nested KV Pairs w/ Multiple Values per Key I'm trying to parse some input where the kv pairs are nested, but I'm also trying to cheat a little bit. Maybe. With... by blurblebot Communicator in Splunk Search 03-22-2011 0 1	0	1
Somehow combine stats data over timechart? I am attempting to report on server connection data which is polled at regular intervals (i.e. every 10 minutes). Th... by dang Path Finder in Splunk Search 03-21-2011 0 2	0	2
Single field not always extracted, but appears when piping into "extract" I have set up a search-time field extraction. The extraction extracts a bunch of fields from a URL in a log file. M... by spock_yh Path Finder in Splunk Search 03-21-2011 0 2	0	2
distributing duration time into time-span buckets I've got system uptime duration records and want to break them into hours per day. Goal is to calculate mean time to... by jrstear Path Finder in Splunk Search 03-21-2011 0 2	0	2
Create multivalued field in the search based on another field I wantto create a multivalued field bar based on the value of an existing field foo in each event. For example: if w... by hmahendrakumar Path Finder in Splunk Search 03-21-2011 0 3	0	3
Disable Field Discovery In 4.2, we have the ability to click the Field Discovery button to ask Splunk to extract only necessary fields for a ... by Ron_Naken Splunk Employee in Splunk Search 03-20-2011 3 2	3	2
Using a Static list to refine your search Hi Guys, The scenario that I am building is to use a dynamic txt or csv file to refine the search of an index full o... by b4ggio Explorer in Splunk Search 03-19-2011 0 3	0	3
save search result How to save search result in splunk by chandansingh Explorer in Splunk Search 03-19-2011 0 5	0	5
call save results from view Hi every one , i would like to call saved results of splunk in view xml.so i can show saved results to user instead o... by chandansingh Explorer in Splunk Search 03-19-2011 1 2	1	2
define custom fixed fields Is there any way to define custom fields which have a fixed size? For instance: We can have field definition as: fie... by acalvo Explorer in Splunk Search 03-18-2011 0 5	0	5
Is there max number of events per time frame in splunk? Is there a performance hit if it has a large number of events per minute? I have custom logs configured and my search... by suhprano Path Finder in Splunk Search 03-18-2011 0 5	0	5
Using a field to supply latest Greetings all. I am trying to use the earliest and latest fields to filter out some event data. This is for the purpo... by msarro Builder in Splunk Search 03-17-2011 0 1	0	1
Average of multiple fields I have three columns each containing a number. I want to have the average for each rows set of numbers. Is there a w... by msarro Builder in Splunk Search 03-17-2011 1 1	1	1
Suppress well known events Hi, we've the following scenario. A logmessage indicates that a CPU-Fan has failed Mar 17 11:00:21 h045ap 2011-03-... by kochera Communicator in Splunk Search 03-17-2011 1 7	1	7
log file rotation When splunk is watching a directory for log files will it reindex a file that gets rotated? I am trying to make sure ... by rupesh212121 Explorer in Splunk Search 03-17-2011 0 1	0	1
Problems with Regex and 3 Criteria Fields..... Hi All, I'm trying to filter our logs, however I would like for it to filter on 3 criteria - the event code, the Obj... by Scarecrowddb Explorer in Splunk Search 03-17-2011 0 5	0	5
How to filter off /var/spool events on linux? auditd is generating number of events on linux server. For eg.this event is identified by session id=1336067(auto ge... by remy06 Contributor in Splunk Search 03-16-2011 1 3	1	3
REGEX issue with multiple criteria Hi All, I'm trying to filter our file audit logs, however I would like for it to ignore any files ending in .tmp I ... by Scarecrowddb Explorer in Splunk Search 03-16-2011 0 6	0	6
Is it possible to use a transaction to group previous? Is there an equivalent of a reverse transaction search command that would look backwards in time for events when a ce... by jambajuice Communicator in Splunk Search 03-15-2011 0 1	0	1
Filter a chart? Hello - A version of the following query gives me just what I'm looking for (although a much larger chart): index="... by gbarwis Engager in Splunk Search 03-15-2011 1 2	1	2

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Splunk Search

Filter event data and send to nullqueue - DOES NOT WORK

search fields - OTHER

Searches taking long?

TImestamps problem

SLA monitoring: percentage of slow transactions

Nested KV Pairs w/ Multiple Values per Key

Somehow combine stats data over timechart?

Single field not always extracted, but appears when piping into "extract"

distributing duration time into time-span buckets

Create multivalued field in the search based on another field

Disable Field Discovery

Using a Static list to refine your search

save search result

call save results from view

define custom fixed fields

Is there max number of events per time frame in splunk?

Using a field to supply latest

Average of multiple fields

Suppress well known events

log file rotation

Problems with Regex and 3 Criteria Fields.....

How to filter off /var/spool events on linux?

REGEX issue with multiple criteria

Is it possible to use a transaction to group previous?

Filter a chart?

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Event Series: Telemetry Pipeline Management

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Drill Down Search

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

Splunk Search

Join the Conversation