Splunk Search

Community Activity

How to get the "last time" there was traffic on one of the services/for a particular client? How can i get the "last time" there was traffic on one of the services/for a particular client? by ashidhingra Path Finder in Splunk Search 05-13-2022 0 2	0	2
Is there away to have Splunk automatically extract XML key value pairs? I'm using SPLUNK to index an xml file. Is there a way to have SPLUNK automatically extract the key-value pairs for ea... by lyndac Contributor in Splunk Search 05-13-2022 8 8	8	8
Why don't transaction results match? Hello all, The transaction command is not correctly grouping the events in query 1). The expected result is given by ... by ang3loliveira Loves-to-Learn in Splunk Search 05-13-2022 0 5	0	5
Is it possible to map one index to another index? Is it possible to map one index to another index? by vjsplunk Loves-to-Learn Everything in Splunk Search 05-13-2022 0 6	0	6
How to search in real time and append those values in dashboard? Hi all, whenever I get a new log I wanted to count of the number of logs for the last 5 min and then append it to a ... by badrinath Path Finder in Splunk Search 05-13-2022 0 4	0	4
How to avoid unwanted nested transactions? Hi - I have a list of events, most of which pair up nicely as 'startswith' (A) and 'endswith' (B) to make a desired t... by TRJR Engager in Splunk Search 05-13-2022 0 1	0	1
How to extract token from HTTP header? Hello Everyone, I have a set of data with a lot of HTTP requests, where I want to extract only the tokens highlighted... by miberecz Loves-to-Learn in Splunk Search 05-13-2022 0 1	0	1
Help using IF function Hi All, i am using IF function like \|eval xxx= if ( status =="1","A", if(status =="2","A", if(status =="3","A","0") i... by saurav47 Loves-to-Learn Lots in Splunk Search 05-13-2022 0 5	0	5
How to view all dashboard which configured in Splunk? Hi All, I want to view all the dashboards which we have configured in Splunk. While I am trying with the below comman... by sanket4147 Loves-to-Learn Lots in Splunk Search 05-13-2022 0 7	0	7
How to extend Splunk log retention to forever? We have a service for which we have splunk dashboard is in place and right now the dashboard have the limitation tha... by csahoo Explorer in Splunk Search 05-13-2022 0 1	0	1
How to separate results from extraction with multiple similar fields with regex? I am looking through our current alerts and we have a few evaluations that occur like below.Total_Trade: 129Total_Val... by SMM10 Explorer in Splunk Search 05-13-2022 0 1	0	1
How to calculate successful percentage grouped by another field? by csahoo Explorer in Splunk Search 05-13-2022 0 3	0	3
How to create a search with several events from one host with different condition? Hello, everyone I need help from community. I want to make search that will find two+ events from same host, for exam... by bosseres Contributor in Splunk Search 05-13-2022 0 1	0	1
How to correct a query that calculates a certain value when a particular condition is met? I have a query that calculates a certain value when a particular condition is met. \| eval Other_Failures = Total_requ... by payyachamy Observer in Splunk Search 05-12-2022 0 2	0	2
How to get multiple legends on x-axis? Hi Team, Following is my data: SSTTDTDALTLATOTAaxxx432376ayyy222345bxxx111133byyy111111 following is the graph i ca... by paritoshs24 Path Finder in Splunk Search 05-12-2022 0 2	0	2
Dropdown list: How to update search events with an eval case command? hello From the dropdown list below, I need to update search events with an eval case command <input type="dro... by jip31 Motivator in Splunk Search 05-12-2022 0 12	0	12
How to create a table of latest event when events have same timestamp? Hello Splunkers - I am struggling to create a table that shows distinct events that sometimes have the same timestamp... by mistydennis Communicator in Splunk Search 05-12-2022 0 4	0	4
How to reformat MAC address? I need help reformatting a MAC address field which doesn't have colons to add them. MAC=123456781122desired format = ... by kevinjacks Explorer in Splunk Search 05-12-2022 0 6	0	6
What is the performance difference between join and lookup/ KVStore? I am importing in splunk many tables of data of 500 to 10000 events each and I need to use them to enrich events with... by nicolocervo Engager in Splunk Search 05-12-2022 0 1	0	1
How to filter xml logs from wineventlog? I want to filter eventcode 4624 and user_type=computer using transforms and props.conf Transforms.conf [setnule]REGEX... by mjemi Loves-to-Learn Everything in Splunk Search 05-12-2022 0 0	0	0
Splunk query- How to use spath command for the below logs? How to use spath command for the below logs i have attached in the screenshot. by uagraw01 Motivator in Splunk Search 05-12-2022 0 6	0	6
How to delete duplicate logs? I've uploaded the same log twice(using drag and drop option in add data) and now when I query I see duplicate results... by prateedshetty Path Finder in Splunk Search 05-12-2022 0 6	0	6
How do you map value from inputlookup to another search Hi,I have 2 separate queries as below:Query1: (normal splunk search e.g. index=* host=abcde \| table Message1,Message2... by johanhakim Explorer in Splunk Search 05-12-2022 0 6	0	6
Can you do conditional formatting in Splunk, like in Excel? (ex: have a cell color change based on percentage values in a column?) Can you do conditional formatting, like in Excel, in Splunk? For example, can I have conditional formatting on the p... by HattrickNZ Motivator in Splunk Search 05-12-2022 0 4	0	4
How to check results and see if there is a name that does not exist in lookup? Hi, I receive data from a particular product that is installed on various customers, that data is received every 5 ... by greekleo89 Loves-to-Learn Everything in Splunk Search 05-12-2022 0 16	0	16