Splunk Search

Community Activity

Does a Heavy Forwarder have a limit for thruput ? Hello Splunkers,Everything is in the title, I've read the limits.conf documentation,[thruput] maxKBps = <integer>I kn... by GaetanVP Contributor in Splunk Search 10-27-2022 0 2	0	2
Splunk Alert for Response Time- How to add the time condition value? Hi Team, I want a splunk search query for alert creation. My requirement is service Response time is > 3 seconds and ... by asplunk789 Loves-to-Learn Everything in Splunk Search 10-27-2022 0 7	0	7
Create Alert if condition is met? Hi , I have a scenario where the files needs to be transferred for both inbound and outbound at 2 am daily. I need ... by Chinni611 Loves-to-Learn Lots in Splunk Search 10-27-2022 0 3	0	3
Help with a simple search: How do I count how many days match a certain criteria? (example below) I have this search which builds a tablemy_search \| timechart span=1d sum(eval(b/1024/1024/1024)) AS volume_bit will b... by dritjon Path Finder in Splunk Search 10-27-2022 0 1	0	1
Need help with a search where I am using streamstats and timechart? I am trying to create a search where if there is a change of 30 percent within 5 mins of a few field values, I would ... by phularah Communicator in Splunk Search 10-27-2022 0 6	0	6
How to get the count over exceptions for the past 3 days individually? Exceptions Day1 Day2 Day3 Abc 5 4 3 Start 3 4 4 xyz ... by Kk Path Finder in Splunk Search 10-27-2022 0 1	0	1
What is the difference between eventtype and macro? Hi Even if i have read some documentations, i have difficulty to understand the difference between macro and eventtyp... by jip31 Motivator in Splunk Search 10-26-2022 0 5	0	5
How to visualize percentage rate of matching event pairs that share a common key value? I'm working on a query with the goal of determining the percentage rate of request/response event pairs that match by... by beetlegeuse Path Finder in Splunk Search 10-26-2022 0 10	0	10
How to sort column headers in timechart? Hi, I've got a timechart with several columns. The headers of these columns are numbers (0,1,2,3... etc) and I would ... by HeinzWaescher Motivator in Splunk Search 10-26-2022 0 7	0	7
How to combine rows in groups of 2, grouped by nearest time? Title may be a bit confusing, so here's an example of what I'm trying to achieve:I want to convert a table that looks... by JJ_Yam Explorer in Splunk Search 10-26-2022 0 7	0	7
How to divide a field by its average? I have a time chart of count by field \| timechart count by field_name limit=0 I would like to divide each val... by brayps Explorer in Splunk Search 10-26-2022 0 3	0	3
How to show search on condition - do not show or erase/delete on other condition? Hello All, I have been searching for "how to" but not had much luck. I have this search: I run it realtime, and test ... by eholz1 Builder in Splunk Search 10-26-2022 0 6	0	6
How to filter results from multiple date ranges? Hello, I am creating some reports to measure the uptime of hardware we have deployed, and I need a way to filter out... by DGaitherAtRoot Explorer in Splunk Search 10-26-2022 0 9	0	9
How to get all events between two events? I have the following events.I am trying to get all the events between START and END of a job (inclusive).For instance... by vrmandadi Builder in Splunk Search 10-26-2022 0 6	0	6
How search total number services count based on host? hai all, i am checking about list of services down based on a host using below search index=ivz_unix* Service source... by sekhar463 Path Finder in Splunk Search 10-26-2022 0 8	0	8
Buckets in splunk- Is it possible to do a 10 minutes from event not 10 minute window? Hi all, Wondering if it is possible to do 10 minute search from when you see an event instead of doing 10 minute wind... by Mckechnie Engager in Splunk Search 10-26-2022 0 1	0	1
Regex Help to extract the first ip? Please help with regex to extract the first ip(highlighted red) only 2022-10-25T14:30:28.108+00:00 10.3.4.150 syslog... by orionex Observer in Splunk Search 10-26-2022 0 2	0	2
How to get values count to display in table? Hi all. I wish to display in a table format the value's count. For example; Computer A has 100 sessions. Computer B h... by NizanCohen Explorer in Splunk Search 10-26-2022 0 5	0	5
How to count number of events and length along with the median value ? I want to be able to able to count the number of events and the median length of events per sourcetype in Splunk ?I'm... by zacksoft_wf Contributor in Splunk Search 10-26-2022 0 9	0	9
How to update the lookup table dynamically? I have a list of hosts in the lookup table. These values aren't static and gets updated dynamically every three month... by innoce Path Finder in Splunk Search 10-26-2022 0 2	0	2
How do I reformat my table? Hello Splunkers!! As per my requirement my current results are as below : severityVulnablitiesCritical3Medium 4Low6 ... by LogUx Motivator in Splunk Search 10-26-2022 0 5	0	5
How to get special characters in logs recognized by Splunk by default? Hi, Log format is JSON I have a Field named Organization Now when Organization = "Systèmes" , this will have the foll... by edwinmae Path Finder in Splunk Search 10-26-2022 0 0	0	0
How to search for Windows event followed by another Windows event? I am trying to create a search which looks for an EventCode 4624 followed by another EventCode 4625 from same user, i... by Mckechnie Engager in Splunk Search 10-26-2022 0 1	0	1
Why is a function as 3-rd arg in the "replace" function not evaluating capturing groups? Hi all,Due to utf16/8-mismatch, I find a lot of utf16 \xnn chars in my events; this makes the json-parser kind of lo... by philbond Observer in Splunk Search 10-26-2022 0 1	0	1
Performance fields/stats/table https://community.splunk.com/t5/Splunk-Search/Fields-vs-table-vs-nothing/m-p/498525#M194897 I was looking at a Splunk... by bowesmana SplunkTrust in Splunk Search 10-25-2022 1 6	1	6