Splunk Search

Community Activity

How to list only distinct values from the listed results? Hi I have a query which runs and results me the list of Ip's in a table format grouped by username. In my table of re... by rakeshyv0807 Explorer in Splunk Search 07-20-2022 0 6	0	6
How to align 2 single panel no matter the length of the title? Hello As you can see, the 2 single panel are not correctly aligned is there a way to avoid this without changing the ... by jip31 Motivator in Splunk Search 07-19-2022 0 0	0	0
Conditionals/dependencies in search? (where x and y within z) Hello communityI am trying to set up a search to catch any succesfull logon after x failed within y minutes. However,... by fatsug Builder in Splunk Search 07-19-2022 0 5	0	5
How to calculate daily volume of logs ingested by index? HI all, I am trying to figure out the best method for determining the volume of logs ingested into my various indexes... by mike_k Communicator in Splunk Search 07-19-2022 0 2	0	2
How to get next 10th minute for the field time in Splunk? I am getting the output time but i want to round the time value for next 10th minute.the excepted output is the roun... by Veeru Path Finder in Splunk Search 07-19-2022 0 9	0	9
How to calculate Top limit=10 OR head 10 not working by Count? Hi Team I have a query where I am doing the TimeChart & % (not using the timechart and calculate the % in timechart... by beriwalnishant Path Finder in Splunk Search 07-19-2022 0 3	0	3
Why do search lookup returns no results found? Hello!We are enriching some data and want to be able to then search the results matched from the lookup table. It wo... by johnansett Communicator in Splunk Search 07-19-2022 1 4	1	4
How to use distinct count of multiple fields? I have data that looks like the following: Week Employee Project# 6/3/2022 A ... by JoeHubner Explorer in Splunk Search 07-19-2022 0 6	0	6
How to create a 14 day search for specific time range (02:00 - 06:00) only? How to create a 14 day search for specific time range (02:00 - 06:00) only? by ashidhingra Path Finder in Splunk Search 07-19-2022 0 5	0	5
How to extract a Multi-Valued Field? I've imported a .csv that has many fields, but the only one I care about has multiple values in it. pluginText: <plu... by Minasdad Path Finder in Splunk Search 07-19-2022 0 11	0	11
How to match field values with multivalue field? I have a data with two fields: User and Account Account is a field with multiple values. I am looking for a search th... by Skysurfer Explorer in Splunk Search 07-19-2022 0 10	0	10
How to pivot convert in Splunk? Hi, I habe a table after using stats: \| stats values(durationSum) as duration by Fauf Station. How can I convert it ... by zoe Path Finder in Splunk Search 07-19-2022 0 2	0	2
TimeChart Percent Query - How to Sort on specific field count Hello Experts, I am stuck with a timechart % query and I want to sort basis a field count and not the default sort on... by beriwalnishant Path Finder in Splunk Search 07-19-2022 0 13	0	13
Error in 'similarity' command: External search command exited unexpectedly with non-zero error code 9 index="main" source="all_digikala1.csv" \| table title price \| map search="search index=main source=all_sites1.csv \|... by soheil115 Engager in Splunk Search 07-18-2022 0 0	0	0
How to covert Duration in String to seconds? Hi Team, I have time in below two formats and I want to convert them to minutes. How can I do this Format 1 1 Hour10... by smaran06 Path Finder in Splunk Search 07-18-2022 0 4	0	4
Can you use a wild character in a Multiselect? Hi In a MultiSelect is there any way to us a wild character? My Data XYC_123 EOD_1234 EOD_23232 EOD_343434 aassss_... by robertlynch2020 Influencer in Splunk Search 07-18-2022 0 3	0	3
How to extract JSON array contents to lookup table? I've got a JSON array I ingest that I want to extract certain fields from to save into a lookup table. Here's an exam... by AlanMoen Explorer in Splunk Search 07-18-2022 0 6	0	6
How to add currency symbol to pie chart hover text? Is there a way to show currency symbol after the value? Like $393.26 by waldenwang9966 Loves-to-Learn in Splunk Search 07-18-2022 0 5	0	5
How to achieve top 10 src_ip's along with top 10 urls for each src_ip? I'm trying to run a query to figure out the top 10 src_ip's along with their top 10 urls visited. When I try the belo... by jhamot23 Engager in Splunk Search 07-18-2022 0 4	0	4
How to clean up query for top 10 urls of top users? I'm currently building a query that reports the top 10 urls of the top 10 users. Although my current query works, I w... by tayvionp Explorer in Splunk Search 07-18-2022 0 4	0	4
Suggestions for Tenable .csv field extraction Within the tenable:sc:vuln sourcetype there is a particular field "PluginText" that has a value for hardware serial n... by Minasdad Path Finder in Splunk Search 07-18-2022 0 3	0	3
How do I modify x-axis values to display date only for each column? Hi, how can I modify x-axis in order to display date only for each column. query \| eval finish_time_epoch = strftim... by Edwin1471 Path Finder in Splunk Search 07-18-2022 0 1	0	1
How to add field from a lookup in an index search and displaying the result Hello, I have a lookup on which we have two columns, one with the computer name and the other with the OS version. Wh... by darphboubou Explorer in Splunk Search 07-18-2022 0 10	0	10
Host field missing in events coming from a particular machine- How do I find host field information? I am not able to find the host field information for the events coming from a particular machine. This is related to... by sambitmahantaes Explorer in Splunk Search 07-18-2022 0 7	0	7
How to concatenate Dynamic multivalue fields to single value fields? Hi all, I have events coming in that have multivalue fields, but not always the same fields are multivalue. I want al... by wealot Explorer in Splunk Search 07-18-2022 0 2	0	2