Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk Search
Splunk Search
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | * | rex "(?<fpc>fpc\d+) (?<ichip>ICHIP\(\d+\)):Packet drop in Ichip pktwr,rate: %\S+: \d+, total: (?<err>\d+)" How ... by vadud3 Path Finder in Splunk Search 08-12-2010 0 3 | 0 | 3 | |
| | I have a log file that looks like this: Wed Aug 11 14:27:48 GMT 2010 | Inactive Users Last 7 Days---> | 123456789 | ... by carmackd Communicator in Splunk Search 08-11-2010 0 2 | 0 | 2 | |
| | What is the best way to determine transactions per second are occurring in our application logs. I attempted using "... by kbecker Communicator in Splunk Search 08-11-2010 0 2 | 0 | 2 | |
| | I have two searches. One search returns a field (using stats count) representing the number of users logging into a w... by Justin_Grant Contributor in Splunk Search 08-10-2010 1 1 | 1 | 1 | |
| | Is it possible to use regular expressions for the whitelist/blacklist filters in serverclass.conf? For example: whit... by Peter Path Finder in Splunk Search 08-10-2010 1 3 | 1 | 3 | |
| | On splunkA I am monitoring an xml log file. It is forwarded to SplunkB in a separate index. Where should I define the... by imrago Contributor in Splunk Search 08-10-2010 0 1 | 0 | 1 | |
| | I have a search that is looking pipes through a rex. rex fields=_raw "\D(?<big_num>\d{15,16})\D" I want the UI to ... by whywhywhy Engager in Splunk Search 08-09-2010 1 2 | 1 | 2 | |
| | Here's my CLI search: SPLUNK_URI=https://splunk_search_head:8089 /opt/splunk/bin/splunk search '|savedsearch "mysav... by vcarbona Path Finder in Splunk Search 08-08-2010 2 4 | 2 | 4 | |
| | I get lots of data from various systems via syslog. One of my systems sends me data that looks like this HEADERTEXT:... by serialmonkey Path Finder in Splunk Search 08-07-2010 1 5 | 1 | 5 | |
| | Hi We have a few charts that display summary-indexed data. The charts take a couple of form inputs including _time... by sranga Path Finder in Splunk Search 08-06-2010 0 7 | 0 | 7 | |
 | (Love this forum. Didn't even know about the concurrency command before this morning. My search: SYSCODE=ezLMWeb*... by twinspop Influencer in Splunk Search 08-06-2010 0 3 | 0 | 3 | |
| | There is probably a better way to do this, but I am trying to catalog what rules are (and are not) used using the fir... by bfaber Communicator in Splunk Search 08-06-2010 0 5 | 0 | 5 | |
| | I am currently running a search for license bandwidth : index=_internal source=*metrics.log group=per_index_thruput ... by goat Explorer in Splunk Search 08-05-2010 1 4 | 1 | 4 | |
| | Running splunk on windows2003. I am getting the events but it seems my regex is not working right on the event. Sam... by kseshadri New Member in Splunk Search 08-02-2010 0 1 | 0 | 1 | |
| | Hello, I have a search that looks for a particular set of data. if the data comes from a particular source address,... by kholleran Communicator in Splunk Search 08-02-2010 1 1 | 1 | 1 | |
| | Hello, I have a log file with a very long record (about 255 chars) and I would like to know if and how is it possible... by cafissimo Communicator in Splunk Search 08-02-2010 0 1 | 0 | 1 | |
| | Hello, I am asking a lot of questions today (obviously new to Splunk and in implementation...). We do NOT use AD fo... by kholleran Communicator in Splunk Search 08-02-2010 2 2 | 2 | 2 | |
| | I'm trying to develop a regex to separate merged events from a log. Here's my stanza in props.conf: [source=c:\temp\... by rgcox1 Communicator in Splunk Search 07-30-2010 0 2 | 0 | 2 | |
| | Is there a search to check bundles delivered from search head to peers? by rroberts Splunk Employee  in Splunk Search 07-30-2010 2 2 | 2 | 2 | |
| | For starters this app is amazing. I am trying to search a ton of log files for a certain error and its definitely do... by jonathanjw New Member in Splunk Search 07-30-2010 0 1 | 0 | 1 | |
| | Below are the two files tcodesNew.csv paste.plurk.com/show/284992 chlogNew.csv paste.plurk.com/show/284990 I am tryi... by ankitghai New Member in Splunk Search 07-30-2010 0 1 | 0 | 1 | |
| | 0 | 2 | ||
| | Unfortunately our proxy data does not have user information. However I do have access to AV data that is able to map ... by morningwood Explorer in Splunk Search 07-29-2010 0 2 | 0 | 2 | |
| | I have a best practice time question for veteran Splunkers out there. Right now I have a a failed login search that ... by kholleran Communicator in Splunk Search 07-29-2010 2 1 | 2 | 1 | |
| | Trying to figure out how to aggregate with top when there are two field choices. Here's an example of what I am tryi... by skippylou Communicator in Splunk Search 07-28-2010 0 2 | 0 | 2 |
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Become An Expert
Top Labels
-
administration
3 -
alert action
3 -
alert condition
2 -
Analytics Workspace
2 -
authentication
1 -
chart
946 -
Classic dashboard
1 -
configuration
2 -
correlation search
1 -
count
1,007 -
Dashboard Studio
3 -
data
3 -
data model
1 -
development
6 -
distributed search
1 -
drilldown
1 -
email
1 -
eval
2,616 -
field extraction
2,022 -
fields
2,064 -
host
1 -
index
4 -
indexer
2 -
inputs.conf
1 -
intermediate forwarder
1 -
introduction
5 -
join
1,060 -
JSON
2 -
Linux
2 -
login
1 -
lookup
1,567 -
metadata
310 -
monitoring console
2 -
Other
188 -
panel
2 -
PDF
1 -
Python
1 -
regex
1,499 -
report acceleration
2 -
rex
1,250 -
SAML
1 -
saved search
5 -
scheduled search
4 -
scripted input
1 -
search
2 -
search head
3 -
search job inspector
685 -
search peer
1 -
simple XML
1 -
source
1 -
sourcetype
4 -
Splunk Web Framework
1 -
splunk-assist
1 -
splunkd
1 -
stats
3,566 -
subsearch
1,732 -
summary indexing
4 -
table
1,756 -
time
1 -
timechart
1,158 -
transaction
453 -
transforms.conf
1 -
troubleshooting
8 -
tstats
570 -
universal forwarder
5 -
using Splunk Cloud
2 -
using Splunk Enterprise
13 -
Windows
3
- « Previous
- Next »
Get Updates on the Splunk Community!
Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26
You use Splunk every day, come and help shape what's next.
Save Your Seat: Product-Focused Sessions at ...
Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM
The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...
Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas
Watch Now
Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas
Do you ever feel ...
Unanswered Topics
