Splunk Search

Community Activity

How to generate _time for search in metadata? Hi need to generate current date like this "20201123" and use as a search filter on metadata. AFAIK there is no "_tim... by indeed_2000 Motivator in Splunk Search 11-24-2022 0 6	0	6
Why am I getting different timewrap results depending on what time of day the search is run? I have a saved search running every few minutes to append data to a 15 day csv log file within Splunk. I'm trying to... by dougburdan Explorer in Splunk Search 11-24-2022 0 2	0	2
Is it possible to convert the hex data into ascii without affecting the ascii data? Hi all, I am attempting to convert data extracted as a field containing combination of hex and ascii data. Was wonde... by xiaoming New Member in Splunk Search 11-23-2022 0 3	0	3
Is there a way for Lookup file to return field names? Is there a way to achieve this? I have a lookup table with 2 columns alert_type and short_description. alert_typ... by ansif Motivator in Splunk Search 11-23-2022 0 5	0	5
Show error details when errors 10% higher than previous 30 mins? Hi, I want to display the error details in the last 30 mins, so they can be investigated, when the amount of errors h... by MikeyD100 Explorer in Splunk Search 11-23-2022 0 4	0	4
Finding concurrent sessions over time by PrisonMike Explorer in Splunk Search 11-23-2022 0 10	0	10
Help with lookup to get table? Hi, I have a lookup as follow ipidname111.111.111.111111simone*222marco in the index I have ipid 111.111.111.1111112... by simo Path Finder in Splunk Search 11-23-2022 0 2	0	2
How to show multiple records value in same table row? I have a job that runs multiple times if it failed. I need to create a dashboard with a table that shows all the atte... by splunkuser320 Path Finder in Splunk Search 11-23-2022 0 3	0	3
How do I extract using regex? i have below result, how can I do a regex to extract the fields, first being DateTime, username, Action, Entity2022-1... by sphiwee Contributor in Splunk Search 11-22-2022 0 2	0	2
How do I check which major destinations generate the most logs on a specific firewall host? How do I check which major destinations generate the most logs on a specific firewall host = 10.22.44.254? I would li... by renangomes New Member in Splunk Search 11-22-2022 0 1	0	1
Is it possible to create a Pie Chart from three fields? Is it possible to create a Pie Chart from three fields? If so, how? Thanks a million in advance! by itsmevic70 Explorer in Splunk Search 11-22-2022 0 2	0	2
How to split single field into multiple with different format? Hi All, i have events like below and i want to extract the fields as TotalRecords, SuccessRecords, FailedRecords, B... by Praveenrocky New Member in Splunk Search 11-22-2022 0 2	0	2
How do you chart a cumulative sum? I'm calculating the sum of spending over a month period. * \| timechart sum(value) span=1mon This will produce the ... by Marinus Communicator in Splunk Search 11-22-2022 4 8	4	8
How to search for multiple cases? Hi community, I have 2 data sources, 1 from a csv to get the list of district (include number of population according... by Julia1231 Communicator in Splunk Search 11-22-2022 0 1	0	1
How to show all data of one field? Hello, I put them in context before showing the query. I have a splunk that I test on it to see the query results bec... by userQ Loves-to-Learn in Splunk Search 11-22-2022 0 3	0	3
Removing events based on condition by PrisonMike Explorer in Splunk Search 11-22-2022 0 1	0	1
How to plot timechart graph with count of fruits for each door? Time door Fruit Count11/11/2022 04:36:07 112 APPLE 1411/11/2022 04:10:00 111 PEAR 811/11/2022 03:01:02 111 PEAR 11911... by venky1544 Builder in Splunk Search 11-22-2022 0 2	0	2
Receiving strange errors when searching messages by old dates? I get strange errors when searching messages by old dates. If I put a search for more than two hours, I immediately g... by metylkinandrey Communicator in Splunk Search 11-22-2022 0 4	0	4
How to migrate from CSV to KV store? I am trying to migrate from CSV to KV store following these steps: Created collection.conf on the host in apps local ... by tsawant New Member in Splunk Search 11-22-2022 0 3	0	3
How do I get this screen for eval? Hi All, How do I get this screen for eval? Regards Suman P. by SumanPalisetty Path Finder in Splunk Search 11-22-2022 0 1	0	1
How to remove duplicate values only in one column out of four columns? Hello All, When using the "stats count by column1, column2, column3, column4" I get the below result Existing table... by im_bharath Path Finder in Splunk Search 11-22-2022 0 5	0	5
Why is the SPL is not removing the 'status' from the output while the below one is ? Hi, I have a question on 'fields' please. sourcetype=* status IN ("200", "400","500") \| fields -status \| stats cou... by SumanPalisetty Path Finder in Splunk Search 11-22-2022 0 2	0	2
How to separate search results? Hi all, My search results are formatted similar to that of HTML, eg: <last_modified_date>1669004771000</last_modified... by ba_nathan New Member in Splunk Search 11-22-2022 0 1	0	1
How to combine multiple regex rules into single search query? I have the following search queries: API Error Alert --------------- index=myindex sourcetype=my-app:app \|spath... by alwinaugustin Engager in Splunk Search 11-21-2022 0 2	0	2
Real-time query with click on table doesn't work? Hello, I have a table with a custom Splunk Query, and a custom Click on an Cell.. work fine if I select to filter a... by fpedrosa Engager in Splunk Search 11-21-2022 0 1	0	1