Splunk Search

Community Activity

Problem with "search" from Windows batch file Hi all, I've got a problem with the execution of this command from a Windows ".bat" script: splunk.exe search "\| sa... by logicasrl Explorer in Splunk Search 05-24-2010 0 8	0	8
Field Transform not outputting any data Hi, I've created the following field extraction and field transform in their respective files - props.conf and trans... by sidafydd New Member in Splunk Search 05-24-2010 0 3	0	3
Squid Log Analysis - Calculate total number of 'timespans' that have events Hi All, I am using splunk to analyse squid logs and my goal is to identify how many minutes of the day a client ip ... by sflisher Explorer in Splunk Search 05-23-2010 0 4	0	4
How can I tune the Splunk search process to handle more than 250000 events at one timestamp? I have a data source where all events get logged in hour intervals. There could be several hundred thousand events pe... by stephanbuys Path Finder in Splunk Search 05-21-2010 0 3	0	3
Getting macro parameters from search result? I have a macro that accepts 5 arguments. I was hoping to get the arguments into the macro from a previous search resu... by jwestberg Splunk Employee in Splunk Search 05-21-2010 0 1	0	1
What syntax or format of regex does Splunk support? I have created regular expressions (regex) to extract fields and want to know what syntax style Splunk supports. by Simeon Splunk Employee in Splunk Search 05-20-2010 1 2	1	2
Using a form value to create a chart in a saved search Hi, my first question here so sorry if I use some stange terminology, I'll try and be as concise as I can! To start ... by Skippy Explorer in Splunk Search 05-20-2010 2 2	2	2
Custom search script that only produces keys Hi All I'd like to create a search script that uses a field to do some internal calculations. The output isn't a se... by Marinus Communicator in Splunk Search 05-19-2010 1 1	1	1
Disk usage Alerts I am trying to set up a search then alert on our nix systems SAN-LUNs storage system. I modified a default NIX dis... by Voltaire Communicator in Splunk Search 05-19-2010 2 2	2	2
Lookups in Manager can I add multiple sourcetypes to the automatic lookup From the Doc: Edit existing automatic lookups or configure a new lookup to run automatically Instead of invoking ... by dcroteau Splunk Employee in Splunk Search 05-19-2010 0 2	0	2
drilldown whilst using a search w stats values() So this stemmed from a previous question, but i figured it warranted a new question. (hey more points for everyone) ... by hiddenkirby Contributor in Splunk Search 05-19-2010 0 3	0	3
Can i get a table of statistics where different columns represent different time ranges like 'last 24 hrs', 'last month' ? We want to end up with this kind of table on a dashboard. Average GB By Host and Time host last 24 hours ... by sideview SplunkTrust in Splunk Search 05-19-2010 3 3	3	3
[EventsViewer module] Cannot access search data; job is a zombie and is no longer with us I recently restarted Splunk and found that a bunch of jobs return this error when I click on the jobs link. What hap... by the_wolverine Champion in Splunk Search 05-18-2010 1 4	1	4
Missing field detection Hi I was wondering if there was a way to search for logs that don't have a specific field in them. If I have the f... by sranga Path Finder in Splunk Search 05-18-2010 0 1	0	1
How can I report on all of those thousands of BEA- messages in our weblogic logs? How can I report on all of those thousands of BEA- messages in our weblogic logs? by Rob_Jordan Explorer in Splunk Search 05-18-2010 0 1	0	1
How to sort by numerical, not lexigraphical order (using a stats command or equivalent)? Here's what we are trying to do with our Juniper Netscreen Firewall data for outbound denied traffic: Find the top 3... by hulahoop Splunk Employee in Splunk Search 05-17-2010 2 4	2	4
Multiline table processing How can I process tables like below where Data is spread across multiple lines. and Top start set defines Field name... by clyde772 Communicator in Splunk Search 05-16-2010 0 2	0	2
Daily/Weekly/Monthly top traffic report? I've got weblogs going into splunk. We have a bunch of different domain names (extracted as http_domain) in the logs... by Oren Explorer in Splunk Search 05-16-2010 0 1	0	1
Implied field extraction in Splunk? So I have used props and tranforms to extract a field in my application by using a particular regex expression. For ... by Josh Path Finder in Splunk Search 05-15-2010 0 1	0	1
When searching ASA Syslog, Splunk claims "bytes" is a host. I don't understand how to get Splunk to properly parse the Teardown messages from my ASA cluster. It claims that "byt... by nunyabizness Explorer in Splunk Search 05-14-2010 0 3	0	3
Where did splunk-search process go in 4.1? In Splunk 4.0 searches were moved into a separate splunk-search processes. (So you would see a list of splunk-search... by Lowell Super Champion in Splunk Search 05-14-2010 0 2	0	2
Breaking multiline events I'm trying to break a log which has the following pattern: 05/13/2010 14:31:35 [1498270105] Processing Request on... by patrickw Explorer in Splunk Search 05-14-2010 1 2	1	2
Delta for different fields? I need to calculate the object allocation rate in the jvm. That value can be derived from the jvmlogs. If I subtrac... by nbharadwaj Path Finder in Splunk Search 05-14-2010 2 7	2	7
How can I best run a search and retrieve results from custom code? I'm writing an app that has custom HTML and JavaScript that code that needs to access search results. What's the bes... by emma Splunk Employee in Splunk Search 05-14-2010 1 5	1	5
Suppress search inspector? If a search returns no results, the chart views will show "No results found" and will provide a mouse-over link to th... by smisplunk Path Finder in Splunk Search 05-14-2010 1 3	1	3