Splunk Search

Thread Info

$SPLUNK_HOME/var/lib/splunk/defaultdb/db/Sources.data On a fresh install I see this file has something like this:...

by Splunk Employee in

[UPDATE: from the answer below, it sounds like what I'm looking for is not supported in the product today. I'm tackin...

by Contributor in

In SQL-speak, "how to specify the columns in SELECT clause"? Normally, Splunk does the equivalent of SELECT *, which ...

by Splunk Employee in

I wrote a search operator that takes actions external to splunk. It has to take an action to 'complete' its operation...

by Splunk Employee in

Because wc -l of the input doesn't match my event count, and I'm trying to troubleshoot.

by Splunk Employee in

Data comparison: past 24 hours v. Week or Month