Splunk Search

Community Activity

Application with tables with parameters for the inline search? Hello, I am building a small splunk app and I have a dashboard that has many tables with inline searches like this: ... by feniix New Member in Splunk Search 10-14-2010 0 1	0	1
Transform to switch source field path separator from "/" to "\" I am trying to transform the source field from using Unix path separator (/) to Windows path separator (\). For exam... by mjohanne Explorer in Splunk Search 10-13-2010 1 4	1	4
Wildcards with inputs.conf I've read over documentation with inputs.conf and was wondering if I have the correct solution to this issue. On man... by gnovak Builder in Splunk Search 10-13-2010 2 11	2	11
Report all VPN accounts that are being shared by their owners Splunkers... I have dug thru the Answers Area for quite some time, and have not found what I am looking for. I am thi... by jsanio New Member in Splunk Search 10-13-2010 0 2	0	2
do you have to restart Splunk when you've added a custom search command? if i create a custom search command as described in http://www.splunk.com/base/Documentation/latest/SearchReference/... by piebob Splunk Employee in Splunk Search 10-13-2010 4 4	4	4
Custom Event Renderer I'm trying to write a custom event renderer for an event type. I want to change the event display to a single field o... by wollinet Path Finder in Splunk Search 10-13-2010 1 2	1	2
Counting repeating fields in events How do I properly count fields which repeat in each event? Here is a sample event: 2885136 2010-10-04 03:55:35.997 ... by mjtung Explorer in Splunk Search 10-12-2010 1 5	1	5
Splunk throughtput Here is a question from our customer. It is how many Events can splunk eat per second. I read the manual book which ... by wys2010 New Member in Splunk Search 10-12-2010 0 3	0	3
The default theme of search apps I'v just replaced the default theme of search apps with the desert theme downloading from the splunk web site, but i ... by hjwang Contributor in Splunk Search 10-12-2010 0 1	0	1
how to override date, use filename instead of extracted value from record? I have a logfile with two different date formats for entries. Unfortunately, the dates written to the logfile are "u... by alange Explorer in Splunk Search 10-11-2010 1 1	1	1
Sorting by TimeStamps in events with Multiple TimeStamps Hi, So I have a flat log file that i am indexing that has two timestamps in the same format. I don't care which one ... by cramasta Builder in Splunk Search 10-11-2010 1 1	1	1
How can I export the events that are the result of a search? How can I export the results of a search? I run a search and I get 922 events. I would like to export (or produce a... by steveirogers Communicator in Splunk Search 10-11-2010 1 2	1	2
Search Help for Failed Logins Hello, I have this search string: source="WinEventLog:Security" EventCode="4625" OR EventCode="539" OR (EventCode>=... by kholleran Communicator in Splunk Search 10-11-2010 0 2	0	2
Search within last 5 minutes Please help I am trying to make a search for a string in the past five minutes and if there are over 100 I want an em... by Infinity8 New Member in Splunk Search 10-11-2010 0 2	0	2
Help with sorting a date Sorry for spamming this board (or so it feels like) but I have one more question before the weekend. This may not be ... by cfortune Explorer in Splunk Search 10-11-2010 0 4	0	4
stats count by _time stats count by _time Hi all, I've a query where i count by _time but if in a day there aren't events it is not sho... by pinzer Path Finder in Splunk Search 10-11-2010 0 1	0	1
Subsearches (and custom fields?) I could be doing something wrong, but I can't seem to get subsearches to behave like I expect. I can get something l... by rickschultz New Member in Splunk Search 10-08-2010 0 3	0	3
need help with regex for Transforms.conf I am new to both Splunk and REGEX. I am trying to filter out syslog data from a single src address. I have the fol... by rhuss Engager in Splunk Search 10-08-2010 1 2	1	2
Nearest Event of Type=X How can I take an event with a given key(a)/value(b) pair and find the temporally nearest event with key(c)/value(d)?... by blurblebot Communicator in Splunk Search 10-08-2010 1 2	1	2
Regex - find second match? Was hoping I could get some help with extracting a field. I have a line that looks like: "2010-10-08 16:04:10 0.0.0... by cfortune Explorer in Splunk Search 10-08-2010 1 2	1	2
How do I return the time of the first event from a specific host in the main index? Need to determine the date and time of when a specific host first logged to Splunk ... by MikeyG Explorer in Splunk Search 10-08-2010 0 2	0	2
rangemap command Hello I have a question about the rangemap command In this example, I can define colors for various alert values \|... by RobertRi Communicator in Splunk Search 10-08-2010 1 1	1	1
How can I keep only n% of results from a search? I have a set of web page performance measurements spanning quite some time, generated by an external monitoring provi... by nonspecialist New Member in Splunk Search 10-08-2010 0 2	0	2
How do I localize date_mday? When I use chart using date_mday as a parameter, it is in GMT. Is there any way to make this the date for my local ti... by zzztimbo Engager in Splunk Search 10-07-2010 1 2	1	2
How do I convert my hex/oct field into a decimal value? I have a bunch of hexadecimal and/or octadecimal fields in my events. How do I convert these fields into normal deci... by Lowell Super Champion in Splunk Search 10-07-2010 2 1	2	1

Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

Splunk Search

Application with tables with parameters for the inline search?

Transform to switch source field path separator from "/" to "\"

Wildcards with inputs.conf

Report all VPN accounts that are being shared by their owners

do you have to restart Splunk when you've added a custom search command?

Custom Event Renderer

Counting repeating fields in events

Splunk throughtput

The default theme of search apps

how to override date, use filename instead of extracted value from record?

Sorting by TimeStamps in events with Multiple TimeStamps

How can I export the events that are the result of a search?

Search Help for Failed Logins

Search within last 5 minutes

Help with sorting a date

stats count by _time

Subsearches (and custom fields?)

need help with regex for Transforms.conf

Nearest Event of Type=X

Regex - find second match?

How do I return the time of the first event from a specific host in the main index?

rangemap command

How can I keep only n% of results from a search?

How do I localize date_mday?

How do I convert my hex/oct field into a decimal value?

Splunk Observability for AI

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Splunk Observability as Code: From Zero to Dashboard

How can i export a list of all services in APM

Splunk Answers Content Calendar May 2025!

MLTKC how should i check jupyter notebook func in ...

ITSI thresholds: adaptive vs static

Using Machine Learning Toolkit to detect auth abus...

Splunk Search

Are you a member of the Splunk Community?