Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
I'm attempting to extract statistics of user logins from a custom log format and create a bar chart. I have users A, ...
by
Sheela
Path Finder
in
Splunk Search
09-19-2011
|
2
|
7
| ||
|
|
I have 2 Splunk SPLs=====================index=computer_admin source=admin_priv sourcetype=prive:db account_name=admi...
by
zacksoft_wf
Contributor
in
Splunk Search
03-03-2022
|
0
|
5
| ||
|
|
New to splunk and been struggling manipulating search results into a final result that I am looking for. In powershel...
by
AK89
Explorer
in
Splunk Search
03-02-2022
|
0
|
3
| ||
|
All,
I need some help on a problem I am trying to solve.
Problem: I need to calculate the average user events p...
by
mjuestel2
Path Finder
in
Splunk Search
03-02-2022
|
0
|
3
| ||
|
|
I have two separate searches that provides me the same data field in two different fieldds. I want to identify the co...
by
Tika
Explorer
in
Splunk Search
03-02-2022
|
0
|
1
| ||
|
|
Hello,
are there any queries we can use to find the Total Number of Events, Total Size/Volume (in GB) of Data, Fre...
by
SplunkDash
Motivator
in
Splunk Search
02-25-2022
|
0
|
9
| ||
|
|
If col A contains a b c d e f, I want a separate link to be opened for each value. E.g If the user click on "a", it s...
by
srinivasiyer
New Member
in
Splunk Search
09-17-2014
|
0
|
2
| ||
|
|
hi everyone,
i'm trying to parse json inline. i'm using kv mode= json already but i'm trying to achieve selective...
by
sdee1013
Loves-to-Learn
in
Splunk Search
03-02-2022
|
0
|
5
| ||
|
|
Hello
I have a table
I want this
I am not sure which tool (chart, table anything else) and a...
by
FcwfCW76
Explorer
in
Splunk Search
03-02-2022
|
0
|
2
| ||
|
I have this table and I'm trying to send it as a report/alert every morning to our teams chat group
T...
by
sphiwee
Contributor
in
Splunk Search
03-02-2022
|
0
|
0
| ||
|
Hi
I use this CSS code in order to enlarge the size of the data values in the bars chart
Now I also need to enlar...
by
jip31
Motivator
in
Splunk Search
03-01-2022
|
0
|
4
| ||
|
|
Hi There, I am looking to produce an output where the field with maximum count is display based on another field.
...
by
bijodev1
Communicator
in
Splunk Search
03-02-2022
|
0
|
3
| ||
|
|
Here is the SPL:
index=name reqHost="host" | rex field=cookie "care_did=(?<care_did>[a-z0-9-]+)" | rex fi...
by
msmith58
Explorer
in
Splunk Search
02-28-2022
|
0
|
5
| ||
|
|
hi
I use a lookup with a field corresponding to a site name
| inputlookup site.csv | search site=*paris*
...
by
jip31
Motivator
in
Splunk Search
03-01-2022
|
0
|
2
| ||
|
|
Hi All,
Splunk Enterprise 8.2.4 Clustered
I have an issue where I have an existing app with a lookup listing al...
by
mscomms
Path Finder
in
Splunk Search
03-02-2022
|
0
|
12
| ||
|
|
is there anyway to create a file with a list of IP's that i can use in the search field? i am trying to search for IP...
by
tazzvon
Engager
in
Splunk Search
03-02-2022
|
0
|
3
| ||
|
|
Hi Experts,
my SPL query,
...| eval elapse_range=case(TOTAL_ELAPSE>0 AND TOTAL_ELAPSE<4, "Green",TOTAL_ELAPSE>4...
by
saravana22
Explorer
in
Splunk Search
03-02-2022
|
0
|
3
| ||
|
|
hello
I use this timechart
index=tutu sourcetype=titi | timechart span=15min dc(s) as "Uniq"
...
by
jip31
Motivator
in
Splunk Search
03-02-2022
|
0
|
10
| ||
|
|
Hello all,
I'd like to compare events in the same log files, amusing the format of the events are the same. For exa...
by
gaishi
New Member
in
Splunk Search
03-01-2022
|
0
|
2
| ||
|
|
Hi There,
I have got some results in after running the below command
my search | | bucket _time span=1h| stats co...
by
bijodev1
Communicator
in
Splunk Search
03-01-2022
|
0
|
2
| ||
|
|
I'm attempting to build a search around Okta authentication logs. I want to run a query to check for any Multi facto...
by
rip_leroi
Explorer
in
Splunk Search
03-01-2022
|
0
|
1
| ||
|
|
hi, i a total newbie
i need to do a search in splunk matching the domain in my lookup table (master_lookup.csv)
m...
by
7ryota
Explorer
in
Splunk Search
03-01-2022
|
0
|
5
| ||
|
|
My dilemma.
index=prod_s3 sourcetype=My_Sourcetype earliest=-30m(host=2016) OR (host=2018) OR(host=2015) OR (host...
by
auzark
Communicator
in
Splunk Search
02-22-2022
|
0
|
12
| ||
|
|
Hello,
I have a search that runs in the web application interface (Splunk Enterprise). It returns results as and w...
by
Stuartb_
New Member
in
Splunk Search
03-01-2022
|
0
|
0
| ||
|
I'm trying to create a calculated field (eval) that will coalesce a bunch of username fields, then perform match() an...
by
ejwade
Contributor
in
Splunk Search
03-01-2022
|
0
|
0
|
