Splunk Search

Community Activity

Search within last 5 minutes Please help I am trying to make a search for a string in the past five minutes and if there are over 100 I want an em... by Infinity8 New Member in Splunk Search 10-11-2010 0 2	0	2
Help with sorting a date Sorry for spamming this board (or so it feels like) but I have one more question before the weekend. This may not be ... by cfortune Explorer in Splunk Search 10-11-2010 0 4	0	4
stats count by _time stats count by _time Hi all, I've a query where i count by _time but if in a day there aren't events it is not sho... by pinzer Path Finder in Splunk Search 10-11-2010 0 1	0	1
Subsearches (and custom fields?) I could be doing something wrong, but I can't seem to get subsearches to behave like I expect. I can get something l... by rickschultz New Member in Splunk Search 10-08-2010 0 3	0	3
need help with regex for Transforms.conf I am new to both Splunk and REGEX. I am trying to filter out syslog data from a single src address. I have the fol... by rhuss Engager in Splunk Search 10-08-2010 1 2	1	2
Nearest Event of Type=X How can I take an event with a given key(a)/value(b) pair and find the temporally nearest event with key(c)/value(d)?... by blurblebot Communicator in Splunk Search 10-08-2010 1 2	1	2
Regex - find second match? Was hoping I could get some help with extracting a field. I have a line that looks like: "2010-10-08 16:04:10 0.0.0... by cfortune Explorer in Splunk Search 10-08-2010 1 2	1	2
How do I return the time of the first event from a specific host in the main index? Need to determine the date and time of when a specific host first logged to Splunk ... by MikeyG Explorer in Splunk Search 10-08-2010 0 2	0	2
rangemap command Hello I have a question about the rangemap command In this example, I can define colors for various alert values \|... by RobertRi Communicator in Splunk Search 10-08-2010 1 1	1	1
How can I keep only n% of results from a search? I have a set of web page performance measurements spanning quite some time, generated by an external monitoring provi... by nonspecialist New Member in Splunk Search 10-08-2010 0 2	0	2
How do I localize date_mday? When I use chart using date_mday as a parameter, it is in GMT. Is there any way to make this the date for my local ti... by zzztimbo Engager in Splunk Search 10-07-2010 1 2	1	2
How do I convert my hex/oct field into a decimal value? I have a bunch of hexadecimal and/or octadecimal fields in my events. How do I convert these fields into normal deci... by Lowell Super Champion in Splunk Search 10-07-2010 2 1	2	1
Converting a field value from Hexadecimal to Decimal... This may end up being a dumb question, but my regex/sed mojo is not strong today... I have 2 log files monitored tha... by Steve_Litras Path Finder in Splunk Search 10-07-2010 1 4	1	4
REGEX help on field extraction? Hi, I am trying to extract fields from events and here are the sample events: AUD_Proc user1 OK T... by remy06 Contributor in Splunk Search 10-07-2010 0 5	0	5
Unable to use results of Streamstats I'm dealing with some web logs, and have generated statistics on how long a certain user stayed on a certain page by ... by Jason Motivator in Splunk Search 10-06-2010 1 4	1	4
handling large amount of csv files as input and rename sourcetype as well as specify header I have a monitored folder on a splunk server where i place specific types of information in a subfolder where scripts... by dominiquevocat SplunkTrust in Splunk Search 10-06-2010 0 3	0	3
two lines merged in one Hi. I have 2 events merged in one, they are the only two, the rest lines are perfectly shown. The interesting thing ... by jmnicolino New Member in Splunk Search 10-06-2010 0 3	0	3
avg of number of events Hi all, i need to count the event of today and compare with the average of the last month daily count by dest. I'm us... by pinzer Path Finder in Splunk Search 10-06-2010 0 1	0	1
examples of searches to capture network thruput Do you have any examples of searches capturing network thruput? by Kendrick33 Explorer in Splunk Search 10-05-2010 0 4	0	4
Data Extraction in Search Form Here is what I have - 2010-10-05T12:37:55-05:00 xxx.xxx.xxx.xxx [lpr.info] SERVERNAME: Scan ID: 1283612407,Begin: 2... by twgtech New Member in Splunk Search 10-05-2010 0 5	0	5
Best way to search using a lookup table? I'm running a search across a bunch of data, say web logs, that has a lot of different src_ips. I make a lookup of a... by Jason Motivator in Splunk Search 10-05-2010 0 2	0	2
How do I navigate forward in the timeline? For example, the timeline is showing 07:59:00 to 08:00:00 (I'm using "reverse"). When I "zoom out" it goes in the wr... by sspalding New Member in Splunk Search 10-05-2010 0 2	0	2
Command or search to list index statistics? We've disabled the UI for our indexers so don't have access to the manager UI for them. The search head UI only show... by the_wolverine Champion in Splunk Search 10-04-2010 1 4	1	4
How do you increase the duration that a search sticks around the server? I have alerts that send email to people. These emails contain a link to the search on the splunk server. Often, whe... by muebel SplunkTrust in Splunk Search 10-04-2010 3 3	3	3
Chart count by Duration and User name I have pulled VPN logs and I'd like to report on the duration that a user has used the VPN tunnel. I have found the ... by strueblood Explorer in Splunk Search 10-04-2010 0 6	0	6

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Splunk Search

Search within last 5 minutes

Help with sorting a date

stats count by _time

Subsearches (and custom fields?)

need help with regex for Transforms.conf

Nearest Event of Type=X

Regex - find second match?

How do I return the time of the first event from a specific host in the main index?

rangemap command

How can I keep only n% of results from a search?

How do I localize date_mday?

How do I convert my hex/oct field into a decimal value?

Converting a field value from Hexadecimal to Decimal...

REGEX help on field extraction?

Unable to use results of Streamstats

handling large amount of csv files as input and rename sourcetype as well as specify header

two lines merged in one

avg of number of events

examples of searches to capture network thruput

Data Extraction in Search Form

Best way to search using a lookup table?

How do I navigate forward in the timeline?

Command or search to list index statistics?

How do you increase the duration that a search sticks around the server?

Chart count by Duration and User name

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Quick connection discovery mode for forwarders

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation