Splunk Search

Splunk Search
Community Activity
gbolcer
I have 2,894 events when I do a search for everything in my index. When a do a search for a subset of things with a...
by gbolcer Explorer in Splunk Search 01-21-2011
1 3
1
3
tpaulsen
Hello, i am trying to extract from a search some data, and split the data into two fields with values. So far i onl...
by tpaulsen Contributor in Splunk Search 01-21-2011
1 6
1
6
gnovak
I have a question regarding a search I am trying to compose. Here is a snipped from the logs: Tue Jan 18 13:50:01 U...
by gnovak Builder in Splunk Search 01-21-2011
0 1
0
1
SK110176
When running a splunk search from the cli, the maximum number of events returned is 100. How do I increase this limit...
by SK110176 Path Finder in Splunk Search 01-21-2011
1 6
1
6
babovic_netqost
Hi everybody, I tried to find solution with questions who has ever asked but I don't find my answers :=/ I want to c...
by babovic_netqost New Member in Splunk Search 01-21-2011
0 1
0
1
billbender
We have a batch search that looks for password changes on Windows boxes that happened "yesterday" and sorts the resul...
by billbender Engager in Splunk Search 01-20-2011
1 3
1
3
nbharadwaj
I am trying to trend some metrics for the first Wednesday of each month, over a time range of 6 months. I have someth...
by nbharadwaj Path Finder in Splunk Search 01-20-2011
1 2
1
2
clyde772
Hello Gurus! Here is what I am trying to do. I am trying using Simplified XML, Form to select a certain host and ti...
by clyde772 Communicator in Splunk Search 01-20-2011
0 3
0
3
tpaulsen
Hello we need to extract a lot of fields from the following log: Example deleted. What would be the best way to ex...
by tpaulsen Contributor in Splunk Search 01-20-2011
1 7
1
7
rotten
Suppose my log entries resembled: Rick ate a cheeseburger Tony ate a grape Rick ate a frenchfry Tony ate...
by rotten Communicator in Splunk Search 01-20-2011
0 4
0
4
raoul
I am trying to calculate the difference between the time of an event and the time as it exists in a field of the even...
by raoul Path Finder in Splunk Search 01-20-2011
0 6
0
6
remy06
Hi, I am trying to generate a search command to track file deletions by user.The current command that I have is: ...
by remy06 Contributor in Splunk Search 01-20-2011
0 1
0
1
approachct
We have a CSV file that we import into splunk daily. We have at least one line that is too long and is possibly co...
by approachct Path Finder in Splunk Search 01-19-2011
0 1
0
1
vbumgarn
When using distributed search across a number of hosts, the difference in performance between flashtimeline and advan...
by vbumgarn Path Finder in Splunk Search 01-19-2011
1 3
1
3
jjj0923
I am planning on installing snort of my network to gather ip traffic. I would like to use splunk to show me graphical...
by jjj0923 New Member in Splunk Search 01-19-2011
0 1
0
1
mburbidg
I cannot find in the manual how to configure search-time field extraction. I would like to define some fields that ap...
by mburbidg Explorer in Splunk Search 01-19-2011
0 3
0
3
matt
I have a search which runs an eval statement. The problem is every couple of times a day the numbers its pulling (th...
by matt Splunk Employee Splunk Employee in Splunk Search 01-19-2011
1 1
1
1
bwojciechowski
I am getting the following error Error in 'timechart' command: Span value '1m' results in too many (> 50000) bins. E...
by bwojciechowski New Member in Splunk Search 01-18-2011
0 1
0
1
jambajuice
Is it possible to make a lookup run only when the value of a field is null or some other value? Thx. Craig
by jambajuice Communicator in Splunk Search 01-18-2011
2 1
2
1
amitsehgal
I need to get average 90th percentile of my results from response time. let say if there are 200 data points; I need...
by amitsehgal Path Finder in Splunk Search 01-18-2011
1 9
1
9
BrendanMcE
If dispatch is used via Python rather than any saved search for a query and that query uses outputcsv the results are...
by BrendanMcE Path Finder in Splunk Search 01-18-2011
1 1
1
1
alfredhong
I have a defined field that I'm trying to perform searches against with wild cards, so given the texts: text2search ...
by alfredhong Engager in Splunk Search 01-18-2011
1 6
1
6
jcbrendsel
I am struggling to figure this out. Here is my situation: 1) I have a tab delimited data file. I have defined a tr...
by jcbrendsel Path Finder in Splunk Search 01-17-2011
0 4
0
4
jcbrendsel
I am trying to do the following: Define a transform 1 in ./apps/search/local/transforms.conf. This creates 4 fields...
by jcbrendsel Path Finder in Splunk Search 01-17-2011
1 3
1
3
jambajuice
I am trying to create a field extraction for events where a plugin_id field matches a range of numbers. This search ...
by jambajuice Communicator in Splunk Search 01-17-2011
1 7
1
7
Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...
Top Solution Authors