Splunk Search

Community Activity

	How to calculate EPS over a month? Hi I need to calculate the EPS averaged over a month, any ideas? by Rhidian Path Finder in Splunk Search 03-30-2022 0 2	0	2
	How to capture a string? 03 Mar 2022 10:08:18,188 GMT ERROR [dbdiNotificationService,ServiceManagement] {} - Caught Runtime exception at servi... by bhaskar5428 Explorer in Splunk Search 03-30-2022 0 3	0	3
	How to get the count of elapsed time? Hello, I am trying to do the following: I need to add all the times in ELAPSED and give the result in the Total Time... by Choupette72 Engager in Splunk Search 03-30-2022 0 2	0	2
	How to create a line chart visualization? index=* namespace="dk1017-j" sourcetype="kube:container:kafka-clickhouse-snapshot-writer" message="*Snapshot event pu... by bhaskar5428 Explorer in Splunk Search 03-30-2022 0 3	0	3
	How to blacklist lookup for syslogs? I have a blacklist.csv file that looks like the following, IPdomain1.0.136.29# 2018-11-12, node-1lp.pool-1-0.dynami... by splunkboob Explorer in Splunk Search 03-30-2022 0 1	0	1
	How to inject multiple host in the Splunk mstats? I am looking forward to creating a table for system metrics values like "cpu", "memory" and "swap", now if run the be... by microsac Explorer in Splunk Search 03-30-2022 0 1	0	1
	Eval Comparision shows no matches despite both fields having same values Hi All, I need to filter my search based on the condition if the values of 2 fields are equal or not. The 2 fields i... by neerajs_81 Builder in Splunk Search 03-30-2022 0 3	0	3
	Why when opening Splunk enterprise it is showing refused to connect? Splunk refused to connect.png after trying to open my Splunk enterprise on my pc I am getting this page, please hel... by pushkar7450 Engager in Splunk Search 03-29-2022 0 1	0	1
	What is the purpose of double-colon syntax in alerts? We're doing a review of several thousand alerts. About half of them have this syntax at the end of the initial search... by mv10 Path Finder in Splunk Search 03-29-2022 0 2	0	2
	DDoS: How to find average connection count per IP in 5 minute window? Hi friends, I am trying to piece together some splunk searches across application logs to try and piece together what... by zachsisinst Explorer in Splunk Search 03-29-2022 0 1	0	1
	How to round the values before decimal or upto 2 decimal points? Hello experts,How to round up the values either before decimal point or up to max two decimal point. Below is my sea... by microsac Explorer in Splunk Search 03-29-2022 0 2	0	2
	How to use rex to isolate fields with double quotes? Hello I am trying to isolate 'msg' field with multiple quotes and when I use rex is either cannot grab what I need or... by Foss Engager in Splunk Search 03-29-2022 0 2	0	2
	How to sort a field list which below with an uppercase letter followed by "- N"? hi I need to sort a field list which below with an uppercase letter followed by "- N" How to do please? by jip31 Motivator in Splunk Search 03-29-2022 0 16	0	16
	Why is there a Splunk server Service NS page error? When I navigate to https://<splunk-server>:8089/ServiceNS I am running into an error. When I go to other pages..."/se... by robertpurpose Explorer in Splunk Search 03-29-2022 0 3	0	3
	How to create a search that should map a session from an internal application to the corresponding VPN session? Hey guys, I`m trying to create a search that should map a session from an internal application to the corresponding V... by alexandrucrc Observer in Splunk Search 03-29-2022 0 5	0	5
	How create a search that should map a session from an internal application to the corresponding VPN session? Hey guys, I`m trying to create a search that should map a session from an internal application to the corresponding V... by alexandrucrc Observer in Splunk Search 03-29-2022 0 3	0	3
	How to take precision of decimal point for a particular field? Hello experts,I Just want my field `snow_os_version` to be up to 2 decimal points like the first entry should only b... by microsac Explorer in Splunk Search 03-29-2022 0 3	0	3
	Why is Splunk Search Not Working Properly? When we are doing searches on Splunk we are encountering a strange issue. For example, when I add sc4s_fromhostip=...... by omera Explorer in Splunk Search 03-29-2022 0 2	0	2
	How to combine two reports if only one report has a timestamp? Hi Team, I have two reports where one report(report1)has timestamp field where other report(report2) doesn't have ... by Borntowin Loves-to-Learn Everything in Splunk Search 03-29-2022 0 1	0	1
	How to search to match 2 fields from my raw events with 2 fields from a CSV file and output to a different field? Hi, how do i craft a search to match 2 fields from my raw events with 2 fields from a CSV file and output if one of ... by neerajs_81 Builder in Splunk Search 03-29-2022 0 9	0	9
	How to drop certain username from search? Hi Guys, I am trying to do a search and also at the same time drop certain information from showing up.As seen from t... by splunknewbie81 Engager in Splunk Search 03-28-2022 0 4	0	4
	How to take output from a lookup and feed it to another lookup and append the results? Hi,Let's say I have a Company directory lookup (e.g. Company_Directory) and I want to lookup the entire hierarchy of ... by Glasses Builder in Splunk Search 03-28-2022 0 3	0	3
	How to complete search string in lookup? Hi we have a microservices based system and have several services running , the developers put unti a lookup table th... by ARaman77 Explorer in Splunk Search 03-28-2022 0 1	0	1
	How to create a search to subtract a token from the previous value in a row Hello, I need to build a search where I can subtract a token from the previous value in a row. Example I know how t... by kishan2356 Explorer in Splunk Search 03-28-2022 0 3	0	3
	Why does index creation via Java SDK returns null value? Hi colleagues, I am trying to create index using the Java SDK for Splunk and to reset the "FrozenTimePeriodInSecs" pr... by Silviya_brayano New Member in Splunk Search 03-28-2022 0 4	0	4