Splunk Search

Splunk Search
Community Activity
Karthikeyan
Hi Experts, I'm new to splunk. I have created a dashboard to which logs are ingested every min and shows how many log...
by Karthikeyan Engager in Splunk Search 05-30-2022
0 1
0
1
morganj1
Hi, is there a way to make a Splunk transaction wait until it has ended, before starting another transaction.   e.g. ...
by morganj1 Explorer in Splunk Search 05-30-2022
0 3
0
3
indeed_2000
Hi I have a string like below, how can I extract all key value between brackets (keys vary)? Arg[2]: NetworkPacket{tr...
by indeed_2000 Motivator in Splunk Search 05-30-2022
0 3
0
3
afraanajam
I am looking for Splunk query to find out Windows remote desktop service status and also to find to port 3389 is list...
by afraanajam Loves-to-Learn Everything in Splunk Search 05-29-2022
0 2
0
2
indeed_2000
Hi I have table like below how can i show them on map? spl | table city count city  count الریاض 10 20 جدة مکة 33    ...
by indeed_2000 Motivator in Splunk Search 05-29-2022
0 3
0
3
michael_wong
Here is my situation. I can use subsearch to get two column data, just like below.Data row is not aligned, so I can't...
by michael_wong Path Finder in Splunk Search 05-28-2022
0 1
0
1
garryplewson
Hello,  I am trying to create a detection of the AWS exploitation tool Pacu.py. It is to detect the use of the enumer...
by garryplewson Observer in Splunk Search 05-28-2022
0 1
0
1
splunker001
Default range of Overall Service Health Score is: Critical;0-20 , High;20-40 , Medium;40-60 , Low;60-80 , Normal; 80-...
by splunker001 New Member in Splunk Search 05-28-2022
0 0
0
0
spencerneal
Hello,  I am trying to figure out how to rex extract from text that starts with a newline and ends with a newline.  F...
by spencerneal Explorer in Splunk Search 05-28-2022
0 3
0
3
usernamen6213
Hi Everyone, First time using Splunk Community. I have been working with Splunk for about a year and I've been doing ...
by usernamen6213 Engager in Splunk Search 05-28-2022
0 3
0
3
Mr_Forensics
Hello Team, I am interested in determining the best way to count the number of case sensitive letters and special cha...
by Mr_Forensics Engager in Splunk Search 05-27-2022
0 1
0
1
rpecka
I have events which will all have an ID, stageID, stageDuration, as well as other information.In the past I've used `...
by rpecka Explorer in Splunk Search 05-27-2022
0 5
0
5
Amarok
If I run the below search the statistics output changes while the search is progressing and when the search is comple...
by Amarok Observer in Splunk Search 05-27-2022
0 0
0
0
Berfomet96
Hello. Recently I've joined a new company that is using splunk as their siem and this past month I've being trying to...
by Berfomet96 Explorer in Splunk Search 05-27-2022
0 3
0
3
qcjacobo2577
I have what is hopefully a really straightforward issue.   Essentially I want to take the output (data within a speci...
by qcjacobo2577 Path Finder in Splunk Search 05-27-2022
0 12
0
12
osasfrancis
For the latest version, Version 5.2.4, I have vulnerability data coming in from Tenable.SC. How can I filter the resu...
by osasfrancis Path Finder in Splunk Search 05-27-2022
0 3
0
3
leagawa
I would like to extract the string before the first period in the field using regex or rex example: extract ir7utbws...
by leagawa New Member in Splunk Search 05-27-2022
0 4
0
4
himanshu1
Hi Friends,   I am trying to list out all the available splunk lookups and want to display count of records present i...
by himanshu1 Loves-to-Learn Lots in Splunk Search 05-27-2022
0 2
0
2
sahana
Hi, I have an filter for selecting the country values, provided this as a drop down. we have options like singapore,m...
by sahana Engager in Splunk Search 05-27-2022
0 7
0
7
xoamanda12xo
I have a field called "Risk Type" that has categorical data associated with the type of risk of an event. For example...
by xoamanda12xo Explorer in Splunk Search 05-27-2022
0 4
0
4
Vikasreddys
Hello, Splunkers! Need help in finding the alternative to the append command.I have a data with 8 fields [say A,B,C,D...
by Vikasreddys Engager in Splunk Search 05-27-2022
1 4
1
4
YungLee
I would like to run a search query every few min, how can i do that.E.g. index = "a" sourcetype = "b"Any help is appr...
by YungLee Engager in Splunk Search 05-26-2022
0 1
0
1
giovere
I have a transactions defined by users logging in and out. The Goal is to have a timechart showing count of active t...
by giovere Path Finder in Splunk Search 05-26-2022
0 8
0
8
ttiller
Trying to collect information from a sub folder in a Windows server event log. Specifically in the Applications and S...
by ttiller Engager in Splunk Search 05-26-2022
0 5
0
5
weetabixsplunk
Hi guys,   I'm a splunk noob here and I'm going nuts. I know this is an extremely simple search and I can't get it ri...
by weetabixsplunk Explorer in Splunk Search 05-26-2022
0 11
0
11
Get Updates on the Splunk Community!

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...

What's New in Splunk Enterprise Security 8.8 and Beyond

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or ...
Top Solution Authors