Splunk Search

Community Activity

How to Split Group by Values? Hello, I am very new to Splunk. I am wondering how to split these two values into separate rows. The "API_Name" value... by user33 Path Finder in Splunk Search 11-06-2022 0 7	0	7
What rex command can separate hostname from the field? NONPROD:abcd123456_DBSERVERNeed to extract abcd123456 from the string... by priya1926 Path Finder in Splunk Search 11-06-2022 0 1	0	1
Why does this eval case not work? The following is my ideal final query to be used in a dashboard. index=cdn_app httpMessage.host=taxes* \| eval _env=... by jaycetan New Member in Splunk Search 11-05-2022 0 4	0	4
find Exact string contains double comma How can I find an exact string which has double code in it. I want to find exact string HTTP/1.1" 500 by talktulika Observer in Splunk Search 11-04-2022 0 2	0	2
Can I schedule a search that writes to a lookup table? I have a search that writes to a lookup table. I would like to run this search once a month and update (overwrite) t... by ilhwan Path Finder in Splunk Search 11-04-2022 0 4	0	4
For loop on each result of a the table I have query that returns successful logins and a profile ID. Then from the result of those I want to create another... by giolapid911 New Member in Splunk Search 11-04-2022 0 1	0	1
How to compare csv and search and show results which are different from csv? Hello Splunkers , I am using the following search which outputs the following fields host ,Component and output an... by vrmandadi Builder in Splunk Search 11-04-2022 0 3	0	3
How to search results and present as a table of selected key vaule? Hello All, The log has empty space before and after equal with semicolon separation. I’m unable to get the table re... by padrsri Explorer in Splunk Search 11-04-2022 0 8	0	8
How to achieve subsearch with static result? I want to achieve something like this: index=main servicetype="aws:accesslogs" (apps in ("app1","app2","app3")) note:... by biju_babu Explorer in Splunk Search 11-04-2022 0 7	0	7
Why does regex keeps extracting wrong data? I am trying to use the rex command to extract an id number, which is a mixture of letters and numbers separated by a ... by jhilton90 Path Finder in Splunk Search 11-04-2022 0 3	0	3
How to create two different fields using regex from one fields? <span>This call to java.lang.Runtime.exec() contains a command injection flaw. The argument to the function is constr... by karu0711 Communicator in Splunk Search 11-04-2022 0 4	0	4
How to compare the same element with two values and two states? Hello community, I'm having a very specific problem and I can't find a solution after several days of attempts, all o... by Rajaion Path Finder in Splunk Search 11-04-2022 0 2	0	2
How to extract substring from field? Hi, i'm trying to extract substring from a field1 to create field3 and then match field2 with field3 The search is... by DavideASR Engager in Splunk Search 11-04-2022 0 3	0	3
How to create double aggregation on timechart? Hi, I got a table data with 3 fields (Time, Method, Return) TimeMethodReturn28/10/2022Method 1KO28/10/2022Method 2KO2... by mxh7777 Path Finder in Splunk Search 11-04-2022 0 0	0	0
How can I verify if the boot-start is already enabled? How can I verify if the boot-start is already enabled for a machine without restarting the machine? by pradeepkumarg Influencer in Splunk Search 11-04-2022 3 4	3	4
How to resolve issue with Dynatrace user session query that is retrieving multiple user actions? can anyone help me to resolve my issue? here is the query which i am using index="dynatrace" "userActions{}.name" ... by sabari80 Explorer in Splunk Search 11-04-2022 0 4	0	4
Is there a way to show my data that only fail and never pass at a later time frame? I'm trying to filter data that is either pass or fail. Some of my data points that are fail return as a pass as well.... by Shhiii New Member in Splunk Search 11-04-2022 0 1	0	1
What are the steps to update SSL certificate in Splunk heavy forwarder? Hi all, https not enabled in out HF so we are configuring SSL certificate in our HF. please let us the steps to follo... by sekhar463 Path Finder in Splunk Search 11-04-2022 0 0	0	0
Search multiple values from a single event where one value might be less than 800? I have the following criteria from a single event that appears like: Time Event11/4/224:10:28.000 AM{ [-]Total: 6656s... by jasonhask Explorer in Splunk Search 11-04-2022 0 3	0	3
How to change color of value text in chart? I have a bar chart created in the which I am showing data values above the bars. However, the tallest bar has the tex... by feickertmd Communicator in Splunk Search 11-04-2022 0 12	0	12
How to write regex for below log to extract fields? Hi All, I need to write regular expression for the below log to extract few fields. Can you please help me on th... by vineela Path Finder in Splunk Search 11-04-2022 0 2	0	2
How to get only the license usage of hosts in that lookup file? Hi,I can see the license usage of hosts in my environment by using this query: index=_internal source=*license_usage.... by vpantangi Path Finder in Splunk Search 11-04-2022 0 3	0	3
What is the difference between report range and summary range? Hi I dont understand the goal of the summary range in accelerated search what is the difference with the report range... by jip31 Motivator in Splunk Search 11-04-2022 0 3	0	3
How to achieve dynamic field value filtering after main search? Hello, I'm trying to filter my events/results after evalulating the field name and value dynamically using eval. ... by amerineni Loves-to-Learn in Splunk Search 11-03-2022 0 3	0	3
How to filter the results based on the evaluated field? I'm trying the below query, index=XXXXXXXXX \| eval space="cf_space_name=production" \| search "space" YYYYYYYYYYYY ... by amerineni Loves-to-Learn in Splunk Search 11-03-2022 0 5	0	5