Splunk Search

Community Activity

	How to extract 50A720 or 816851using \| rex field=name mode=sed "s/816851/"? The data i have is 816851-567-7554080981706881 50A720 -123-8150015922249983 816851-567-1135131573613120816851-567-006... by ashidhingra Path Finder in Splunk Search 06-07-2022 0 4	0	4
	How to get aggregate information from lookup table and return to outer dbxquery? Hi, I have a table as the main search using dbxquery below:\| dbxquery connection=my_connection query="SELECT id, star... by grantmeng Loves-to-Learn Lots in Splunk Search 06-07-2022 0 6	0	6
	How to calculate dates in splunk? again i wanted to list difference in dates between two periods and i have this code \| eval LPD = strptime(LastPickupD... by ositaumeozulu Explorer in Splunk Search 06-07-2022 0 4	0	4
	How to measure the server down time based on host and server status? Sample Event: sent=1 received=0 packet_loss=100 min_ping=NA avg_ping=NA max_ping=NA jitter=NA return_code=1 dest=SHTC... by ShamGowda Loves-to-Learn Lots in Splunk Search 06-07-2022 0 6	0	6
	How to pass result of one query to input as filed for another query? I'm trying to pass the result of one query to as input field for another query. Please see the below screen shots and... by kiran007 Explorer in Splunk Search 06-07-2022 0 4	0	4
	How to use predicate expression in search? Hi everybody,My data is: A = 10, B= 20, C = 30.the fomular that I use is: result = A/(B+C) but I have to verify, the ... by Julia1231 Communicator in Splunk Search 06-07-2022 0 1	0	1
	How to extract common values from a multi-value field for different event times. Hi All,I have a multi-value field as shown below-_time field_test2022-05-13 04:36... by ashishdhinwa Engager in Splunk Search 06-07-2022 0 3	0	3
	How to calculate dates in my search? Sorry team to bother you again, i have a code that is giving me issues \| eval InT = (strptime('LastPickupDate',"%m-%d... by ositaumeozulu Explorer in Splunk Search 06-07-2022 0 2	0	2
	How to write a search query for disk partition I/O (as a pie chart) from Unix TA, which is onboarding Linux data. How to write a search query for disk partition I/O (as a pie chart) from Unix TA, which is onboarding Linux data. Any... by Mariusz Engager in Splunk Search 06-07-2022 0 0	0	0
	Extract all regex matches as a list in each log Input:Message ID... tt_1 ... tt_2 ... tt_9 ... tt_3 ... by nagulan_s Loves-to-Learn Everything in Splunk Search 06-07-2022 0 9	0	9
	How to convert multiples data field using xyseries and sort data Month wise? Hi, My data is in below format Ashwini008_0-1654523200616.png I am trying to add the total of all the columns and sho... by Ashwini008 Builder in Splunk Search 06-07-2022 0 4	0	4
	Is it possible to leverage view used by other app that doesn't exist in splunkjs/mvc? Hi, I am trying to create a splunk app that mimics as much of the Search and Report functionality as possible with so... by rnelson30 Engager in Splunk Search 06-07-2022 0 3	0	3
	Why is splunk not detecting All Files during search? Hi, im currently facing problem where splunk can detect all my files in directory but when doing searching, splunk ca... by aamirulh New Member in Splunk Search 06-06-2022 0 1	0	1
	How to edit my regex to remove all text before ":" if there is more than one Hello Team, Splunkers, I am working on a correlation search and need to use a regex expression to strip all text bef... by nikolaevnz Engager in Splunk Search 06-06-2022 0 2	0	2
	How to use an evaluated field in search command? Could you please let me know how to use an evaluated field in search command index=main sourcetype="access_combined" ... by biju_babu Explorer in Splunk Search 06-06-2022 0 6	0	6
	How to create a kvpair from two automatically extracted JSON arrays? I'm in a situation where by sourcetype, I'm already having a nested JSON array broken into 2 fields: DeviceProperties... by mjones414 Contributor in Splunk Search 06-06-2022 0 2	0	2
	Is it possible to get dropdown token display name and value? Hi I have a dropdown in my dashboard studio which has some static values like TokenName: appName Display NameValueAp... by biju_babu Explorer in Splunk Search 06-06-2022 0 4	0	4
	How to sort based on column values? I have some data that's coming in as follows: "data": { "a": 100, "b": 200 } "data": { "a": 50, "c": 75 } ... ... by mldavis195 Explorer in Splunk Search 06-06-2022 0 3	0	3
	Why is extracted field not showing up in the results page? I have a search criteria with extraction, It seems to be extracting the value. But it's showing up in it's own column... by rmalghan Explorer in Splunk Search 06-06-2022 0 5	0	5
	Why is Automated lookup using kvstore collection not working? I have created a collection in app/local/collections.conf a matching lookup in app/local/transforms.conf I have 5 key... by wmuselle Path Finder in Splunk Search 06-06-2022 0 2	0	2
	Why is iplocation command returning wrong countries? Hi everyone I am currently getting logs from microsoft 365 and one of its panels shows the impossible simultaneous lo... by juancamiloll Explorer in Splunk Search 06-05-2022 0 4	0	4
	How to create rex for multiple fields? HelloGood Day!I have the events in the raw data where i want to extract the drive information into few field and con... by Veeru Path Finder in Splunk Search 06-05-2022 0 3	0	3
	How to extract Multivalue fields? Lets just say I have multiple events like this: names John Sam Todd favorite_colors Blue Yellow Green Each event mig... by shrek Engager in Splunk Search 06-04-2022 0 2	0	2
	How to calculate the average for all values in a single column? This one seems pretty straight forward, but I haven't been able to find an answer anywhere. I'm looking to calculate ... by jpolcari Communicator in Splunk Search 06-04-2022 0 6	0	6
	How to extract data from HTTP request payload? Newbie in Splunk here. How do I extract the value zzz@zzz.com(at the end of the below payload) in a new field named "... by thedonaldblake Engager in Splunk Search 06-03-2022 0 1	0	1