| I have 2,894 events when I do a search for everything in my index. When a do a search for a subset of things with a... by gbolcer Explorer in Splunk Search 01-21-2011 1 3 | 1 | 3 | ||
| Hello, i am trying to extract from a search some data, and split the data into two fields with values. So far i onl... by tpaulsen Contributor in Splunk Search 01-21-2011 1 6 | 1 | 6 | ||
| I have a question regarding a search I am trying to compose. Here is a snipped from the logs: Tue Jan 18 13:50:01 U... by gnovak Builder in Splunk Search 01-21-2011 0 1 | 0 | 1 | ||
| When running a splunk search from the cli, the maximum number of events returned is 100. How do I increase this limit... by SK110176 Path Finder in Splunk Search 01-21-2011 1 6 | 1 | 6 | ||
| Hi everybody, I tried to find solution with questions who has ever asked but I don't find my answers :=/ I want to c... by babovic_netqost New Member in Splunk Search 01-21-2011 0 1 | 0 | 1 | ||
| We have a batch search that looks for password changes on Windows boxes that happened "yesterday" and sorts the resul... by billbender Engager in Splunk Search 01-20-2011 1 3 | 1 | 3 | ||
| I am trying to trend some metrics for the first Wednesday of each month, over a time range of 6 months. I have someth... by nbharadwaj Path Finder in Splunk Search 01-20-2011 1 2 | 1 | 2 | ||
| Hello Gurus! Here is what I am trying to do. I am trying using Simplified XML, Form to select a certain host and ti... by clyde772 Communicator in Splunk Search 01-20-2011 0 3 | 0 | 3 | ||
| Hello we need to extract a lot of fields from the following log: Example deleted. What would be the best way to ex... by tpaulsen Contributor in Splunk Search 01-20-2011 1 7 | 1 | 7 | ||
| Suppose my log entries resembled: Rick ate a cheeseburger Tony ate a grape Rick ate a frenchfry Tony ate... by rotten Communicator in Splunk Search 01-20-2011 0 4 | 0 | 4 | ||
| I am trying to calculate the difference between the time of an event and the time as it exists in a field of the even... by raoul Path Finder in Splunk Search 01-20-2011 0 6 | 0 | 6 | ||
| Hi, I am trying to generate a search command to track file deletions by user.The current command that I have is: ... by remy06 Contributor in Splunk Search 01-20-2011 0 1 | 0 | 1 | ||
| We have a CSV file that we import into splunk daily. We have at least one line that is too long and is possibly co... by approachct Path Finder in Splunk Search 01-19-2011 0 1 | 0 | 1 | ||
| When using distributed search across a number of hosts, the difference in performance between flashtimeline and advan... by vbumgarn Path Finder in Splunk Search 01-19-2011 1 3 | 1 | 3 | ||
| I am planning on installing snort of my network to gather ip traffic. I would like to use splunk to show me graphical... by jjj0923 New Member in Splunk Search 01-19-2011 0 1 | 0 | 1 | ||
| I cannot find in the manual how to configure search-time field extraction. I would like to define some fields that ap... by mburbidg Explorer in Splunk Search 01-19-2011 0 3 | 0 | 3 | ||
| I have a search which runs an eval statement. The problem is every couple of times a day the numbers its pulling (th... by matt Splunk Employee 1 1 | 1 | 1 | ||
| I am getting the following error Error in 'timechart' command: Span value '1m' results in too many (> 50000) bins. E... by bwojciechowski New Member in Splunk Search 01-18-2011 0 1 | 0 | 1 | ||
| Is it possible to make a lookup run only when the value of a field is null or some other value? Thx. Craig by jambajuice Communicator in Splunk Search 01-18-2011 2 1 | 2 | 1 | ||
| I need to get average 90th percentile of my results from response time. let say if there are 200 data points; I need... by amitsehgal Path Finder in Splunk Search 01-18-2011 1 9 | 1 | 9 | ||
| If dispatch is used via Python rather than any saved search for a query and that query uses outputcsv the results are... by BrendanMcE Path Finder in Splunk Search 01-18-2011 1 1 | 1 | 1 | ||
| I have a defined field that I'm trying to perform searches against with wild cards, so given the texts: text2search ... by alfredhong Engager in Splunk Search 01-18-2011 1 6 | 1 | 6 | ||
| I am struggling to figure this out. Here is my situation: 1) I have a tab delimited data file. I have defined a tr... by jcbrendsel Path Finder in Splunk Search 01-17-2011 0 4 | 0 | 4 | ||
| I am trying to do the following: Define a transform 1 in ./apps/search/local/transforms.conf. This creates 4 fields... by jcbrendsel Path Finder in Splunk Search 01-17-2011 1 3 | 1 | 3 | ||
| I am trying to create a field extraction for events where a plugin_id field matches a range of numbers. This search ... by jambajuice Communicator in Splunk Search 01-17-2011 1 7 | 1 | 7 |