Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk Search
Splunk Search
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Hi,
I have an issue with about a searching, someone know about it, this is the issue:
Error in search: "Confi...
by
Said7
Explorer
in
Splunk Search
03-09-2018
|
1
|
7
| ||
|
|
Hello,In the events, the severity is captured as values between 1 to 10. I want to represent them as High, Low, Mediu...
by
sidtalup27
Explorer
in
Splunk Search
11-01-2022
|
0
|
1
| ||
|
|
I need to add multiple values from a CSV to a main Search I have, I used the lookup command but I think that will jus...
by
queryboy
Explorer
in
Splunk Search
11-01-2022
|
0
|
3
| ||
|
|
I use
index= main | lookup test1.csv Severity1 | stats count by Severity
The lookup table have 5 value ( Ver...
by
karu0711
Communicator
in
Splunk Search
10-31-2022
|
0
|
18
| ||
|
|
Hello y'all!I'm trying to use the Single Value object, and build a search which count the number of the records and s...
by
fpedrosa
Engager
in
Splunk Search
10-27-2022
|
0
|
7
| ||
|
|
Hello all!
I´m so lost trying to get full process tree to visualize it in dendogram https://splunkbase.splunk.com/...
by
cpm003
Path Finder
in
Splunk Search
11-19-2020
|
0
|
1
| ||
|
|
Hi,
I have used eval with multiple if conditions and it's failing. Kindly help.
source = "2access_30DA...
by
SumanPalisetty
Path Finder
in
Splunk Search
11-01-2022
|
0
|
7
| ||
|
|
Hi,
I have been tasked to design an alert to trigger whenever there is a modification of the "search query" of an ...
by
loki
New Member
in
Splunk Search
11-01-2022
|
0
|
1
| ||
|
|
Hi Splunk Community,
I need help to check whether my directory field match the regex
The regex I used is ^\w+:\...
by
boxmetal
Path Finder
in
Splunk Search
11-01-2022
|
0
|
3
| ||
|
|
hello
index=_audit user=admin action=search info=granted search=* | table search_id search| replace "'search *" WI...
by
syloee
Explorer
in
Splunk Search
10-31-2022
|
0
|
3
| ||
|
|
Good afternoon!The infrastructure command gave me permissions so that I can add a dashboard tab to my application. I ...
by
metylkinandrey
Communicator
in
Splunk Search
11-01-2022
|
0
|
9
| ||
|
|
Hi all,
I'm trying to create category based on host category: Lab,Personal,Staff and get workstations to be counted...
by
aa0
Path Finder
in
Splunk Search
11-01-2022
|
0
|
2
| ||
|
|
I need to be able to split multiple fields that have a delimiter of "|#|". The field name will differ depending on th...
by
paras
Explorer
in
Splunk Search
10-31-2022
|
0
|
2
| ||
|
|
Hi,
I wrote a eval command and its not working. Kindly help.
source = "2access_30DAY.log" | eval "new_field" = ...
by
SumanPalisetty
Path Finder
in
Splunk Search
10-31-2022
|
0
|
7
| ||
|
|
SPL to extract field and field value when data seems like belowscreenshot attached.I need help in extracting field as...
by
AK_Splunk
Explorer
in
Splunk Search
10-31-2022
|
0
|
3
| ||
|
|
I have a unique query that I think I have a general logical approach to solving, but the syntax and most efficient ro...
by
tobiasboone1
Explorer
in
Splunk Search
10-28-2022
|
0
|
10
| ||
|
|
Hi,
Can we concatenate a string with a number using eval with '.' operator? I got to know that from a video, but w...
by
SumanPalisetty
Path Finder
in
Splunk Search
10-31-2022
|
0
|
3
| ||
|
|
I have a distributed Splunk environment, meaning a SHC and IDX cluster connected via distributed search as outlined i...
by
andrew_burnett
Path Finder
in
Splunk Search
01-13-2022
|
0
|
1
| ||
|
|
I can control the data sent to the fields. All fields on the deafult search allow you include/exclude in search resu...
by
vinceisvince
Observer
in
Splunk Search
10-31-2022
|
0
|
1
| ||
|
|
Hi,
I have a question for my understanding. Kindly help.
You had data in the past, one fine day if you see there ...
by
SumanPalisetty
Path Finder
in
Splunk Search
10-31-2022
|
0
|
4
| ||
|
Hello Splunkers,I am facing some errors every time I relaunch my Splunk service on my HF.Inside splunkd.log I have th...
by
GaetanVP
Contributor
in
Splunk Search
10-31-2022
|
0
|
2
| ||
|
Hey Splunkers,Can someone please help me with the logic, how can I finetune the search below to detect DNS tunnelling...
by
Woodpecker
Path Finder
in
Splunk Search
10-31-2022
|
0
|
1
| ||
|
|
Tell me, is this message format possible for sending to splunk:
curl --location --request POST 'http://170.25.25.2...
by
metylkinandrey
Communicator
in
Splunk Search
10-31-2022
|
0
|
2
| ||
|
My requirement is to utilize the results of the sub-search and use it with the results of the main search results, bu...
by
smanojkumar
Contributor
in
Splunk Search
10-29-2022
|
0
|
5
| ||
|
|
Hi,
ive got the below query that im using to try and see when correlation searches have been edited:
| res...
by
Ra1n
New Member
in
Splunk Search
10-31-2022
|
0
|
1
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Become An Expert
Top Labels
-
administration
3 -
alert action
3 -
alert condition
2 -
Analytics Workspace
2 -
authentication
1 -
chart
942 -
Classic dashboard
1 -
configuration
2 -
correlation search
1 -
count
1,003 -
Dashboard Studio
3 -
data
3 -
data model
1 -
development
6 -
distributed search
1 -
drilldown
1 -
email
1 -
eval
2,602 -
field extraction
2,011 -
fields
2,055 -
host
1 -
index
4 -
indexer
2 -
inputs.conf
1 -
intermediate forwarder
1 -
introduction
5 -
join
1,055 -
JSON
2 -
Linux
2 -
login
1 -
lookup
1,549 -
metadata
306 -
monitoring console
2 -
other
123 -
panel
2 -
PDF
1 -
Python
1 -
regex
1,496 -
report acceleration
2 -
rex
1,245 -
SAML
1 -
saved search
5 -
scheduled search
4 -
scripted input
1 -
search
1 -
search head
3 -
search job inspector
676 -
search peer
1 -
simple XML
1 -
source
1 -
sourcetype
4 -
Splunk Web Framework
1 -
splunk-assist
1 -
splunkd
1 -
stats
3,545 -
subsearch
1,714 -
summary indexing
4 -
table
1,746 -
time
1 -
timechart
1,155 -
transaction
451 -
transforms.conf
1 -
troubleshooting
8 -
tstats
564 -
universal forwarder
5 -
using Splunk Cloud
2 -
using Splunk Enterprise
13 -
Windows
3
- « Previous
- Next »
Get Updates on the Splunk Community!
Index This | What’s a riddle wrapped in an enigma?
September 2025 Edition
Hayyy Splunk Education Enthusiasts and the Eternally Curious!
We’re back with this ...
BORE at .conf25
Boss Of Regular Expression (BORE) was an interactive session run again this year at .conf25 by the brilliant ...
OpenTelemetry for Legacy Apps? Yes, You Can!
This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...
