Splunk Search

Community Activity

	How to blacklist lookup for syslogs? I have a blacklist.csv file that looks like the following, IPdomain1.0.136.29# 2018-11-12, node-1lp.pool-1-0.dynami... by splunkboob Explorer in Splunk Search 03-30-2022 0 1	0	1
	How to inject multiple host in the Splunk mstats? I am looking forward to creating a table for system metrics values like "cpu", "memory" and "swap", now if run the be... by microsac Explorer in Splunk Search 03-30-2022 0 1	0	1
	Eval Comparision shows no matches despite both fields having same values Hi All, I need to filter my search based on the condition if the values of 2 fields are equal or not. The 2 fields i... by neerajs_81 Builder in Splunk Search 03-30-2022 0 3	0	3
	Why when opening Splunk enterprise it is showing refused to connect? after trying to open my Splunk enterprise on my pc I am getting this page, please help me out here by pushkar7450 Engager in Splunk Search 03-29-2022 0 1	0	1
	What is the purpose of double-colon syntax in alerts? We're doing a review of several thousand alerts. About half of them have this syntax at the end of the initial search... by mv10 Path Finder in Splunk Search 03-29-2022 0 2	0	2
	DDoS: How to find average connection count per IP in 5 minute window? Hi friends, I am trying to piece together some splunk searches across application logs to try and piece together what... by zachsisinst Explorer in Splunk Search 03-29-2022 0 1	0	1
	How to round the values before decimal or upto 2 decimal points? Hello experts,How to round up the values either before decimal point or up to max two decimal point. Below is my sea... by microsac Explorer in Splunk Search 03-29-2022 0 2	0	2
	How to use rex to isolate fields with double quotes? Hello I am trying to isolate 'msg' field with multiple quotes and when I use rex is either cannot grab what I need or... by Foss Engager in Splunk Search 03-29-2022 0 2	0	2
	How to sort a field list which below with an uppercase letter followed by "- N"? hi I need to sort a field list which below with an uppercase letter followed by "- N" How to do please? by jip31 Motivator in Splunk Search 03-29-2022 0 16	0	16
	Why is there a Splunk server Service NS page error? When I navigate to https://<splunk-server>:8089/ServiceNS I am running into an error. When I go to other pages..."/se... by robertpurpose Explorer in Splunk Search 03-29-2022 0 3	0	3
	How to create a search that should map a session from an internal application to the corresponding VPN session? Hey guys, I`m trying to create a search that should map a session from an internal application to the corresponding V... by alexandrucrc Observer in Splunk Search 03-29-2022 0 5	0	5
	How create a search that should map a session from an internal application to the corresponding VPN session? Hey guys, I`m trying to create a search that should map a session from an internal application to the corresponding V... by alexandrucrc Observer in Splunk Search 03-29-2022 0 3	0	3
	How to take precision of decimal point for a particular field? Hello experts,I Just want my field `snow_os_version` to be up to 2 decimal points like the first entry should only b... by microsac Explorer in Splunk Search 03-29-2022 0 3	0	3
	Why is Splunk Search Not Working Properly? When we are doing searches on Splunk we are encountering a strange issue. For example, when I add sc4s_fromhostip=...... by omera Explorer in Splunk Search 03-29-2022 0 2	0	2
	How to combine two reports if only one report has a timestamp? Hi Team, I have two reports where one report(report1)has timestamp field where other report(report2) doesn't have ... by Borntowin Loves-to-Learn Everything in Splunk Search 03-29-2022 0 1	0	1
	How to search to match 2 fields from my raw events with 2 fields from a CSV file and output to a different field? Hi, how do i craft a search to match 2 fields from my raw events with 2 fields from a CSV file and output if one of ... by neerajs_81 Builder in Splunk Search 03-29-2022 0 9	0	9
	How to drop certain username from search? Hi Guys, I am trying to do a search and also at the same time drop certain information from showing up.As seen from t... by splunknewbie81 Engager in Splunk Search 03-28-2022 0 4	0	4
	How to take output from a lookup and feed it to another lookup and append the results? Hi,Let's say I have a Company directory lookup (e.g. Company_Directory) and I want to lookup the entire hierarchy of ... by Glasses Builder in Splunk Search 03-28-2022 0 3	0	3
	How to complete search string in lookup? Hi we have a microservices based system and have several services running , the developers put unti a lookup table th... by ARaman77 Explorer in Splunk Search 03-28-2022 0 1	0	1
	How to create a search to subtract a token from the previous value in a row Hello, I need to build a search where I can subtract a token from the previous value in a row. Example I know how t... by kishan2356 Explorer in Splunk Search 03-28-2022 0 3	0	3
	Why does index creation via Java SDK returns null value? Hi colleagues, I am trying to create index using the Java SDK for Splunk and to reset the "FrozenTimePeriodInSecs" pr... by Silviya_brayano New Member in Splunk Search 03-28-2022 0 4	0	4
	How to do field extraction using transform? Hello Experts, I am facing difficulty at index time fields extraction. My sample log file format: Time stamp: Fri Mar... by arun_kant_sharm Path Finder in Splunk Search 03-28-2022 0 3	0	3
	Is it possible to create a custom script that is a search command that can take in the search's results? Is it possible to create a custom script that is a search command that can take in the search's results, do something... by klim Path Finder in Splunk Search 03-28-2022 0 6	0	6
	How to extract value and type in a search? payload: Message { channel=EMAIL , type=security_event_postinfection_admin , locale=it_IT , recipientAddress=LIOU... by Srikanth1131 Explorer in Splunk Search 03-28-2022 0 3	0	3
	How to change the index time as filename timestamp? Hi Team, I have indexed the file as current timestamp but would like to execute the query by taking the filename t... by Borntowin Loves-to-Learn Everything in Splunk Search 03-28-2022 0 3	0	3