Splunk Search

Community Activity

How do I list all active input stanzas in all apps? Is it possible to get an list of all input stanzas currently configured? I am currently looking in to performance is... by andyk Path Finder in Splunk Search 02-02-2011 0 1	0	1
search every day in last week at specific times hello again. I have a search where I'd like to go back 1 week and then search the same time on each day during that ... by gnovak Builder in Splunk Search 02-02-2011 0 7	0	7
Results of Saved Search included in email but since 4.1.6. gets cut off In Splunk 4.1.4 we had a scheduled search running that delivered hourly a Top 1000 result list via email + RSS feed. ... by tpaulsen Contributor in Splunk Search 02-02-2011 0 2	0	2
How do I disable the free version's reminder that the search scheduler is disabled? I have been trialling the Enterprise version and tweaking so I could fit under the 500MB/day limit (we're a startup, ... by magu Engager in Splunk Search 02-02-2011 1 4	1	4
Windows Events Log Hello list, i have a requirement where i imported Windows Event log (CSV format) into splunk, and now i need to extr... by ashishv Explorer in Splunk Search 02-02-2011 0 5	0	5
How to Parse Results? I am interested in seeing only pieces of a message in the results. I would like to be able to run a search and retur... by jfolland New Member in Splunk Search 02-01-2011 0 2	0	2
Splunk Support Python 2.7 ??? Wondering if Splunk latest version support Python 2.7 otherwise user community has compatability issues by bansi Path Finder in Splunk Search 02-01-2011 0 2	0	2
Count by grouping on a string in the results? I have a bunch of log entries that all come from the same host as far as Splunk is concerned, but contain the name of... by Kyle_Brandt Path Finder in Splunk Search 02-01-2011 0 3	0	3
Search XML data inside Text File The Log file fed to splunk is a *.txt i.e. Text file but it has XML data inside it as shown below 2010-11-17 12:59... by bansi Path Finder in Splunk Search 02-01-2011 1 4	1	4
Intermediate forwarder problems / timestamping / transforms Hi we have a rather complicated setup, part of which uses an intermediate forwarder (full wf) to pass events from a s... by pl123 Path Finder in Splunk Search 02-01-2011 1 4	1	4
Logon session time I am trying to gather average login session times for a server given multiple users logon and logoff log entries. I a... by ghnwmlguy Explorer in Splunk Search 02-01-2011 0 4	0	4
Search within sub-time range I am trying to collect stats from login events from evening hours. I would like to run reports for any time range (l... by ghnwmlguy Explorer in Splunk Search 02-01-2011 0 1	0	1
Need to treat multiple lines in log file as a single unit, joined by an element I need to index the logs for a web service. For each end-user's interactions with the system, a collection of web se... by jarrowwx New Member in Splunk Search 01-31-2011 0 1	0	1
Boolean operators, searches, and simplification? Hi, all. I'd like to know if I've been wasting time over the last few years by using an overly formal grammar for pe... by spencers Explorer in Splunk Search 01-31-2011 0 2	0	2
Correlate _internal metrics per_host_thruput and per_index_thruput logs Is there an easy way to correlate per_index_thruput with per_host_thruput in the internal logs? Essentially, I have ... by pj Contributor in Splunk Search 01-31-2011 1 2	1	2
Show average response time of top 20 URLs Hey Guys, I thought this would be simple, but doesn't seem so. From our HTTP logs, I want to get a list of the top 20... by herbie Path Finder in Splunk Search 01-31-2011 1 4	1	4
Beginner Question ! - reporting ps output I have setup a splunk server and one lightforwarder client. This is configured to send the output of ps every 30 seco... by ritemple New Member in Splunk Search 01-30-2011 0 1	0	1
State Search Help Hi I have a logfile which looks like this: %Date %Time %Server %Application %State ("State UP" or "State DOWN") If... by RobertRi Communicator in Splunk Search 01-29-2011 0 4	0	4
Forcing LWF to send events from a file I have a system configured with a separate search head, indexer and LWF. In order to validate our processing and ref... by beaumaris Communicator in Splunk Search 01-29-2011 1 2	1	2
How can I programatically generate list of "OR" terms in a search? I am trying to figure out some method of using something like a scripted lookup to programmatically generate a set of... by dwaddle SplunkTrust in Splunk Search 01-28-2011 4 2	4	2
Using variables in mvfilter with match or how to get an mvdistinctcount(var) Hi everyone We would like to be able to find out if a certain field which occurs several times in a transaction chan... by chris Motivator in Splunk Search 01-28-2011 2 3	2	3
How to typecast an integer as a string literal Is there any way to explicitly typecast a number in Splunk so that it is interpreted as a string literal rather than ... by jcbrendsel Path Finder in Splunk Search 01-28-2011 1 1	1	1
Help with transaction search Hello, I have a file that looks like the following: date1 node1 seq_13 seq13_total_time date1 node1 seq_1... by briang67 Communicator in Splunk Search 01-28-2011 0 1	0	1
Need help with a rex field extraction I have some data that is displaying line breaks as "\n". I'm having problems writing rex commands in searches to str... by jambajuice Communicator in Splunk Search 01-28-2011 1 4	1	4
Alerting on Failed Login Events I would like to be able to generate an alert whenever there is a failed login using the same account from the same IP... by snowmizer Communicator in Splunk Search 01-28-2011 0 2	0	2