Splunk Search

Community Activity

How to create a drilldown from timechart to get all the events based datapoint clicked? Hi , I m new to splunk and still exploring. I have created a timechart with a span on 10 mins . The timechart has a s... by satishp00 Engager in Splunk Search 03-08-2023 0 1	0	1
Why does using "timechart" result in missing values? I have a search with a timechart command to fill a single value dashboard entry based on a count that comes from a DB... by kmaron Motivator in Splunk Search 03-08-2023 0 15	0	15
How to create a query for alerting two different events from the same host? I am working on a query to report on host/s that have triggered two different event types. For example windows event ... by Splunk77 Explorer in Splunk Search 03-08-2023 0 1	0	1
I have 2 mvfields, how to extract values that are present in 1 but not other? I feel like this should be a simple solution but I can't find it. So my search gives values that were present from a... by Aroot002 Path Finder in Splunk Search 03-08-2023 0 2	0	2
Why nested macros using the same argument wont work when the argument has strings in double quotes? We have this scenario where two nested macros using the same argument raises an error at the parsing of the second on... by joshiro Communicator in Splunk Search 03-08-2023 0 5	0	5
How to lookup against two-column table? I have an index with roughly 1.6 million records and want to compare the roughly 370'000 entries in the table with us... by LeeMoe Path Finder in Splunk Search 03-08-2023 0 6	0	6
How to change the field order of input? Before creating a lookup using the outputlookup command, I specified which fields I wanted and in which order I wante... by atebysandwich Path Finder in Splunk Search 03-08-2023 0 1	0	1
What is the rest API in Splunk? I have splunk base app called jira issue collector, inputs has been configured, and we are receiving data from jira ... by Harish2 Path Finder in Splunk Search 03-08-2023 0 9	0	9
How to display details in a single row for a dashboard for an access control system dropdown menu using an inputlookup? Please use below screenshot to determine what Splunk query that is needed to display the access control under the pan... by ngwodo Path Finder in Splunk Search 03-08-2023 0 2	0	2
How to get top products used by customers? I'm trying to get the top products used by customers. by sunilkumar New Member in Splunk Search 03-08-2023 0 5	0	5
Looping through the avg_distance series with a lookback of 20 periods to find the Mean Absolute Deviation Hi all Ninja's i need some help here to find this calculation which can be done easily in excel but i wanted to conve... by w344423 Explorer in Splunk Search 03-07-2023 0 2	0	2
How to combine data from same field? I am looking to chart a field that contains a request path but want to display and get a total count of all events th... by ag_yeck Explorer in Splunk Search 03-07-2023 0 5	0	5
Help getting count by letter grade based on score range Hi, I was hoping someone can help me, though I have seen some examples, but all of them involve case. I need to creat... by Diana_a Explorer in Splunk Search 03-07-2023 0 5	0	5
How to find out how many logs an index gets in a 24-hour period? Afternoon Splunk Gurus I wonder if you would be as kind to help \ point me in the right direction ? I'm new to Splun... by DDewarSplunk New Member in Splunk Search 03-07-2023 0 8	0	8
Importing HCL BigFix data from Insights, how to verify? We are using HCL BigFix and HCL Insights as a data warehouse. There have been times when the import of data from HCL... by richtate Path Finder in Splunk Search 03-07-2023 0 0	0	0
How to find the No. of users using application? My log contains entries as shown below. 2023-03-03T14:14:12.718, Level=INFO, ProcessName=App-web, Thread=http-nio-80... by Ajit Engager in Splunk Search 03-07-2023 0 2	0	2
How to extract the latest scope with respect to latest date? date Scope 12/11/2020Linux Shadow17/02/2023Linux Project20/02/2023Linux Project21/02/2023Linux Project22/02/2023Linux... by smanojkumar Contributor in Splunk Search 03-07-2023 0 3	0	3
Can I scrub IP only? I'm tasked to provide apache logs to a third party for their analysis, but the IPs must be replaced to hide the brows... by rstanonik Engager in Splunk Search 03-07-2023 3 5	3	5
Exporting more than 50k rows in lookup editor app? Hi There! I would like to export more than 50k rows in lookup editor app of the results of kv store lookup file, ... by smanojkumar Contributor in Splunk Search 03-07-2023 0 2	0	2
How do I compare two vector fields from my log and produce an output? I have a field called start.point and end.point in my logs. We can assume it has values in x and y coordinates. A par... by ap666 Explorer in Splunk Search 03-06-2023 0 8	0	8
Auditing changes in _configracker index via json path data.changes{}.properties{} ? The configtracker index contains a json path of: data.changes{}.properties{}In that path, there are numerous objects ... by gazoscreek Path Finder in Splunk Search 03-06-2023 0 3	0	3
How can I extract address from string? I have the following string: SL=5601%20BLVD%20E%2C%20WESTON%20NEW%20YORK%2C%20NJ%20%2007093%20(WEST%20NEW%20YORK%20TO... by Annieg Observer in Splunk Search 03-06-2023 0 1	0	1
Splunk Reporting- condition where I have to create a new field based off some column values? Hi Splunkers,I'm working on a condition where i have to create a new field based off some column values.Example:Colum... by revanthammineni Path Finder in Splunk Search 03-06-2023 0 4	0	4
Is there a way to restore archived data more than 1year? Hi Team, I have a data in my archive folder since 2019 for one of my index app_o365 , we need to restore the complete... by ssuluguri Path Finder in Splunk Search 03-06-2023 0 1	0	1
Help with the search for a reassigned alert? Hi, Need a search for the below scenario,If a previously assigned alert is reassigned to a different user on the port... by smith_ Builder in Splunk Search 03-06-2023 0 5	0	5