Splunk Search

Community Activity

	Can you help to match events with an inputlookup search? Hi, I use the basic query below in order to collect the model of a host (workstation) index="xx" sourcetype="WMI:Mo... by jip31 Motivator in Splunk Search 01-04-2023 0 3	0	3
	Is it possible to get a list of all the Indexes which are used in ITSI and all the related services to those indexes? Hello Community ! Is it possible to get a list of all the Indexes which are used in ITSI and all the related services... by Suara Explorer in Splunk Search 01-04-2023 0 3	0	3
	lookup output renaming and running into issues? Trying to tstats + lookup doesn't work Hello,I have let's say "inherited" a few searches and try to understand them. here is the search: \| lookup lu_cisco_u... by avoelk Communicator in Splunk Search 01-04-2023 0 2	0	2
	How to get the percentage using values in event over two columns? Hello Splunk masters I am trying to figure out how to get a rate (percent) by looking at two strings within a column,... by splunker1981 Path Finder in Splunk Search 01-03-2023 0 3	0	3
	Help with search using eval and table? index="hx_vm" LogName="Microsoft-Windows-Sysmon/Operational" "EventCode=11" ComputerName=DESKTOP-933JR8B \| eval {... by oh_sechang New Member in Splunk Search 01-03-2023 0 1	0	1
	Can anyone explain what is ad hoc search? Can anyone explain what is ad hoc search? by surens Explorer in Splunk Search 01-03-2023 0 2	0	2
	How to invert y-Axis in any chart? I tried official documents and community searches but couldn't find out how to reverse y-axis.not transpose or xy-swa... by applesws Loves-to-Learn Everything in Splunk Search 01-03-2023 0 2	0	2
	How to add values from a split to an existing field? Hello, i'm trying to add values to an existing field but i'm running into a wall. I have a field name vector and anot... by fatanyk Explorer in Splunk Search 01-03-2023 0 4	0	4
	How to hide duplicate values in consecutive table rows? Hello! If I have this: LetterNumberA1A2A3B1B2 is there a way to get this: LetterNumberA1 2 3B1 2 so that the tr... by HarAtWork Explorer in Splunk Search 01-03-2023 0 2	0	2
	Splunk search that will find when customers first logged in? I'm trying to come up with a Splunk search query that I can use to find when customers have first attempted to log in... by jhilton90 Path Finder in Splunk Search 01-03-2023 0 2	0	2
	How to group certain values in a column in a table? I want to group the below table as below, I have a column we’re numbers are in all series, I want to segregate 100 se... by aaa2324 Explorer in Splunk Search 01-03-2023 0 3	0	3
	Help with Regex? I have a field "facilityAlias" for which location can be changed in every api log file. I have to extract that field... by MrIncredible Explorer in Splunk Search 01-03-2023 0 2	0	2
	When I use timechart, in visualization why it is picking Monday always when I want it as Tuesday? I wanted to represent the incident data of total number opened and closed status biweekly. Please help by Gowthamishetty3 Loves-to-Learn Everything in Splunk Search 01-02-2023 0 1	0	1
	Configure the triggered action datadog events and slack? I configured the Splunk triggered actions slack and datadog events but I am getting only slack notification but datad... by rajababu Observer in Splunk Search 01-02-2023 0 0	0	0
	Help with Splunk Transaction dealing with multiple startwiths and single endswith events? I have run across an edge case dealing with some f5 data. Some times a nodes down can be reported one or more times ... by jphillips24744 Loves-to-Learn in Splunk Search 12-31-2022 0 1	0	1
	How can I display only certain lines in a search? Hello all,I have the problem that I can read the data only from Error: of the line to the first character {<!-- -->The error ... by sascha Engager in Splunk Search 12-30-2022 0 2	0	2
	How to create a search string that can count the number of occurrences for the prefixes on [txn_key]? Hi, I am having the following output: [txn_key] field2 field3 status thread [time1] time2 time3 status2 [IDMS-TJ_TJG... by jugarugabi Path Finder in Splunk Search 12-30-2022 0 2	0	2
	Splunk User Report Hi Happy Holidays to everyone.Am trying to get user report. The system is Linux. The report must or should have the ... by woodlandrelic Path Finder in Splunk Search 12-29-2022 0 3	0	3
	How to add inputlookup file in the query Hi ,I have uploaded the lookupfile with application host and hostip details in the splunk.i am not sure where to add ... by Harish2 Path Finder in Splunk Search 12-29-2022 0 1	0	1
	Can I input multiple percentage value and list them into separated panels ? Hello!I got trouble to find a way to provide panels for user-input percentage on raw events.User can input 90, 75, 50... by Jouman Path Finder in Splunk Search 12-29-2022 0 0	0	0
	How to use 'AND' keyword in Transaction command Hi,I want to use 'AND' keyword either in startsWith or in endsWith.<<search>> \| transaction startsWith="some text" AN... by sasank Explorer in Splunk Search 12-29-2022 0 1	0	1
	Search to find where one date field starts before another Hi there,I have a search where I want to see where one date field is the same or starts before another but my search ... by vishalduttauk Communicator in Splunk Search 12-29-2022 0 2	0	2
	Identify a sequence of events on the consecutive change of value of a field HiWe index the accesses made on a filer. For each action on a file, events are generated and indexed in Splunk.The co... by vburgun Engager in Splunk Search 12-29-2022 0 2	0	2
	How to create a multi time chart of key value property? Hi, I have the following events in Splunk {<!-- --> "field1": "something", "execution_times": {<!-- --> "service1": 100, "se... by mskala Explorer in Splunk Search 12-29-2022 0 4	0	4
	delete events from specific time hey, im trying to delete events that got into the system on a specific time range.i see the events when i use splunk ... by dorbi Explorer in Splunk Search 12-29-2022 0 3	0	3