Splunk Search

Community Activity

Averaging by Field over Time- How to make monitoring more sleek? Hi all! I feel as if I'm overcomplicating an issue, but I haven't gotten any built-in Splunk tools to work. Here's t... by acdewey Explorer in Splunk Search 10-12-2022 0 4	0	4
Searching for results during business hours and after-hours? My customer wants a count of calls coming into their call center during their business hours (M, Tu, Th, F: 8:00 a.m.... by emile194 New Member in Splunk Search 10-12-2022 0 1	0	1
How to accomodate or condition in regex I have 2 types of error messages that I want to display along with their count. One error has "." at the end and anot... by ghostrider Path Finder in Splunk Search 10-12-2022 0 2	0	2
Eval for new variable not working as expected? Hello community, I am new here and I have a simple question on my chart which is not working as expected. Currently I... by dunick_ Engager in Splunk Search 10-12-2022 0 2	0	2
How to customize panel popup based on checkboxes? I have few checkboxes where my panels are getting displayed when i select them and if i unselct them they are not app... by mahesh27 Communicator in Splunk Search 10-11-2022 0 3	0	3
How can I iterate through this lookup by the 'no' field and display each entry as a result? Hi I have a lookup which looks like this no name student rollno 1 john yes 12 2 ... by arunkuriakose Explorer in Splunk Search 10-11-2022 0 1	0	1
How to make a Report for Alert Stats? I have setup different alerts.I would like to setup a report that would allow me to have stats for each AlertsExample... by DPOIRE Path Finder in Splunk Search 10-11-2022 0 0	0	0
How to convert to multivalue field? I'm trying to convert a field with multiple results into a multivalue field. I'm querying a host lookup table that ha... by pc1234 Explorer in Splunk Search 10-11-2022 0 1	0	1
Why can't I get a failure rate field (percentage) to show up on chart? Hello, I was wondering if anyone could help me with this simple problem- I'm trying to graph the total amount of good... by Jbarr5695 Loves-to-Learn in Splunk Search 10-11-2022 0 2	0	2
Trying to join columns to an initial query Hello,I wonder if someone could help me out with a query. I'm trying to compare a value against different point in ti... by sbedard Engager in Splunk Search 10-11-2022 0 3	0	3
Why are some values from events in splunk query returning NULL? Hi, I have the following event as an example. Properties: { [-] Path: /v1.0/locations/branches QueryString: ?branch... by labaningombam Explorer in Splunk Search 10-11-2022 0 3	0	3
Is there a way to enrich events by having country information from IP address automatically through props.conf? Hello, I am trying to come-up with something which will automatically enrich the events using the country information... by efheem Explorer in Splunk Search 10-11-2022 0 0	0	0
How to get host and sourcetype combinations that do not fit in any Datamodel Hello,I'm trying to retrieve all the host-sourcetype combinations that are not captured by any Datamodel. I have a pe... by ownion Path Finder in Splunk Search 10-11-2022 0 0	0	0
Why is where command not working with Splunk events? I want to search below events in the base search. However these are not getting displayed when I use the where cmd. T... by ghostrider Path Finder in Splunk Search 10-11-2022 0 1	0	1
How can I extract the fields from log file? I need to split the below log files to like excel table. My Log file is: 2022-05-25 13:00:02 100.200.190.70 - test [1... by nayagan Engager in Splunk Search 10-11-2022 0 2	0	2
Help using lookup tables to select search results I have a lookup table named ics_special_domains that contains this: domain_name,typemicrosoft.com,microsoft*.microsof... by ilhwan Path Finder in Splunk Search 10-11-2022 0 6	0	6
How to show all values of a field on the same table? by din98 Explorer in Splunk Search 10-11-2022 0 9	0	9
How to send reports to email addresses in the query results? Hello Splunkers!!As per the below results. I want to send individual report to each manager on their email id. Likewi... by LogUx Motivator in Splunk Search 10-11-2022 0 1	0	1
How to determine and compare current time? Friends, tell me how to be in the next task.I have an alert time every two minutes.I need to use this time, apparentl... by metylkinandrey Communicator in Splunk Search 10-11-2022 0 3	0	3
What is the difference between min() max() and earliest() latest() for _time manipulations? If i only want to use the field "_time" of a log to get first and latest occurrence of an event, which commands shoul... by edefIo1937 Engager in Splunk Search 10-11-2022 1 4	1	4
How to calculate the percentage of IP CIDR? Hi, Kindly assist me as I am not getting the results I anticipate.I wish to have a table like this ClientIPCountPerce... by Lye Path Finder in Splunk Search 10-10-2022 0 12	0	12
How to achieve grouping the results using field present inside a json array? I have below format log messages. At the end I want to group the messages by BID.{ "details" : [ { "BID" : "123" }, {... by ghostrider Path Finder in Splunk Search 10-10-2022 0 1	0	1
How to index combination with different event structure? Hi all, I would like to create a table with details involved from two different index created. I'm facing difficulty ... by aa0 Path Finder in Splunk Search 10-10-2022 0 3	0	3
Where are the strange text artifacts included in search results coming from? Hey folks, Here's a weird one... I just added a new data source (Windows share permissions) into our Splunk env... by bensec01 Explorer in Splunk Search 10-10-2022 0 3	0	3
How to count events when hour is finished? Hi everyone, I am doing a search to find all the events that sent from different servers by hour, to find if any serv... by Julia1231 Communicator in Splunk Search 10-10-2022 0 5	0	5