Thread Info | |||||
---|---|---|---|---|---|
In inputs.conf and props.conf, the wildcards ... and * are supported for use in the spec headers. What do they transl...
by
hulahoop
Splunk Employee
in
Splunk Search
02-19-2010
|
2
|
3
| |||
While the following extraction below works, I wanted to see if I could extract both custom fields EAR_FILE and DOMAIN...
by
Rob_Jordan
Explorer
in
Splunk Search
05-26-2010
|
2
|
2
| |||
When searching for lost forwarders a host with an all caps name is returned as lost when the same host with a lower c...
by
rgcox1
Communicator
in
Splunk Search
05-13-2010
|
0
|
3
| |||
If I have data like this:
src=1.1.1.1 dst=2.2.2.2
can I create a mvfield of ip's? like:
ips=1.1.1.1,2.2.2.2...
by
bfaber
Communicator
in
Splunk Search
05-25-2010
|
1
|
2
| |||
If I have data that looks like
(date) srcip=x.x.x.x dstip=y.y.y.y
How can I create a single list of all unique...
by
bfaber
Communicator
in
Splunk Search
05-25-2010
|
1
|
6
| |||
Is there a way to report on the position of an event relative to the rest of the events in the result set?
For exa...
by
maverick
Splunk Employee
in
Splunk Search
05-22-2010
|
0
|
2
| |||
How can I use lookups for a source CSV file that is not under the Splunk code tree?
I am using Splunk 4.0.10. CSV ...
by
nbharadwaj
Path Finder
in
Splunk Search
05-24-2010
|
1
|
1
| |||
We were on 3.4.6 and I think subsearches worked fine. We upgraded to 4.0.10 and they broke. So I upgraded to 4.1.1, a...
by
Genti
Splunk Employee
in
Splunk Search
05-21-2010
|
1
|
4
| |||
Hi all,
I've got a problem with the execution of this command from a Windows ".bat" script:
splunk.exe search "...
by
logicasrl
Explorer
in
Splunk Search
05-18-2010
|
0
|
8
| |||
Hi,
I've created the following field extraction and field transform in their respective files - props.conf and tra...
by
sidafydd
New Member
in
Splunk Search
05-21-2010
|
0
|
3
| |||
Hi All,
I am using splunk to analyse squid logs and my goal is to identify how many minutes of the day a client ip...
by
sflisher
Explorer
in
Splunk Search
05-20-2010
|
0
|
4
| |||
I have a data source where all events get logged in hour intervals. There could be several hundred thousand events pe...
by
stephanbuys
Path Finder
in
Splunk Search
05-11-2010
|
0
|
3
| |||
I have a macro that accepts 5 arguments. I was hoping to get the arguments into the macro from a previous search resu...
by
jwestberg
Splunk Employee
in
Splunk Search
05-21-2010
|
0
|
1
| |||
I have created regular expressions (regex) to extract fields and want to know what syntax style Splunk supports.
by
Simeon
Splunk Employee
in
Splunk Search
05-20-2010
|
1
|
2
| |||
Hi, my first question here so sorry if I use some stange terminology, I'll try and be as concise as I can!
To star...
by
Skippy
Explorer
in
Splunk Search
05-10-2010
|
2
|
2
| |||
Hi All
I'd like to create a search script that uses a field to do some internal calculations. The output isn't a ...
by
Marinus
Communicator
in
Splunk Search
05-19-2010
|
1
|
1
| |||
I am trying to set up a search then alert on our *nix systems SAN-LUNs storage system. I modified a default *NIX disk...
by
Voltaire
Communicator
in
Splunk Search
05-19-2010
|
2
|
2
| |||
From the Doc:
Edit existing automatic lookups or configure a new lookup to run automatically
Instead of invoki...
by
dcroteau
Splunk Employee
in
Splunk Search
05-14-2010
|
0
|
2
| |||
So this stemmed from a previous question, but i figured it warranted a new question. (hey more points for everyone)
...
by
hiddenkirby
Contributor
in
Splunk Search
05-14-2010
|
0
|
3
| |||
We want to end up with this kind of table on a dashboard.
Average GB By Host and Time
host last 24 hours ...
by
sideview
SplunkTrust
in
Splunk Search
04-13-2010
|
3
|
3
| |||
I recently restarted Splunk and found that a bunch of jobs return this error when I click on the jobs link. What happ...
by
the_wolverine
Champion
in
Splunk Search
04-08-2010
|
1
|
4
| |||
Hi
I was wondering if there was a way to search for logs that don't have a specific field in them. If I have the ...
by
sranga
Path Finder
in
Splunk Search
05-18-2010
|
0
|
1
| |||
How can I report on all of those thousands of BEA- messages in our weblogic logs?
by
Rob_Jordan
Explorer
in
Splunk Search
05-18-2010
|
0
|
1
| |||
Here's what we are trying to do with our Juniper Netscreen Firewall data for outbound denied traffic:
Find the top...
by
hulahoop
Splunk Employee
in
Splunk Search
04-30-2010
|
2
|
4
| |||
How can I process tables like below where Data is spread across multiple lines. and Top start set defines Field name ...
by
clyde772
Communicator
in
Splunk Search
05-03-2010
|
0
|
2
|