Splunk Search

Splunk Search
Community Activity
Yy4pb
Hello I have a field called hostName which contains hosts: host1\user1 host1\user2 host2\user2 host3\user3 And I want...
by Yy4pb Explorer in Splunk Search 03-08-2022
0 3
0
3
neerajs_81
Hi All,In ES or in Splunk in general ,   How to return field value in double quotes ?   We have the below setting for...
by neerajs_81 Builder in Splunk Search 03-08-2022
0 1
0
1
vl951f
I have host stop event logged in a summary indexIndex=summary search_name=feed_statusHost_nameHost_statusHost1aHost_s...
by vl951f Path Finder in Splunk Search 03-08-2022
0 5
0
5
thaghost99
hi, i am a bit lost, i am trying to extract some % values of specific parameters. but with no luck example i want to ...
by thaghost99 Path Finder in Splunk Search 03-07-2022
0 2
0
2
MatMeredith
I have a list of different events, including some events where name="exception". These exception events have stack tr...
by MatMeredith Path Finder in Splunk Search 03-07-2022
0 3
0
3
shenismyname
Hi Splunk Community, I am pretty new to using Splunk for reporting purposes. Below are my use case : Every month, I a...
by shenismyname Engager in Splunk Search 03-07-2022
0 1
0
1
pavanae
Hi I have fields created for both sessionId and host. Now I wanna find out the same sessionId happening in two diff...
by pavanae Builder in Splunk Search 03-07-2022
0 3
0
3
hooligeek
Given the example events below.  ALL field values match with the exception of the "event.action" field.    {"event": ...
by hooligeek Observer in Splunk Search 03-07-2022
0 4
0
4
keanderson
I am trying to link 2 events together due to information in the first event not showing in the second. the informatio...
by keanderson Engager in Splunk Search 03-07-2022
0 2
0
2
Gurv_Bahad
trying to list the total number of allowed connections to a destination IP from any/all source IP's currently using t...
by Gurv_Bahad Engager in Splunk Search 03-07-2022
0 5
0
5
gow19
Hi guys, I am using Splunk enterprise for monitoring the application name called Nextcloud. Here I want to customize ...
by gow19 New Member in Splunk Search 03-07-2022
0 2
0
2
POR160893
Hi, I have a dashboard and I need to be able to have an option to export the actual log entries from a dashboard.The ...
by POR160893 Builder in Splunk Search 03-07-2022
0 1
0
1
JSIrony
hi, I'm finding how to calculate each time difference from near 2 events   for example, if my search output is f1    ...
by JSIrony Loves-to-Learn Lots in Splunk Search 03-07-2022
0 4
0
4
John85
Hello, This is my very first post here and I need some advice because I've been trying for a couple of hours to extra...
by John85 Explorer in Splunk Search 03-07-2022
0 6
0
6
chicocinco
I want to search all the email logs for a mail transaction.  However we have multiple indexes for our mail logs.  Whe...
by chicocinco Observer in Splunk Search 03-06-2022
0 3
0
3
jip31
helloI open a new drilldown window from my dashboard like this  <drilldown> <link target="_blank">search?q=...
by jip31 Motivator in Splunk Search 03-06-2022
0 2
0
2
neerajs_81
Hello All,how can we search against 2 columns of a CSV lookup file and if the value of the field that i am searching ...
by neerajs_81 Builder in Splunk Search 03-06-2022
0 3
0
3
Jackiifilwhh
Hey partner In my system, every visit consist of one or more transactions and every has its global serial number, whi...
by Jackiifilwhh Path Finder in Splunk Search 03-06-2022
0 4
0
4
SecDesh
Good Morning,I am attempting to use visualization that will display the averages of 2 specific fields (bytes_in and b...
by SecDesh Path Finder in Splunk Search 03-05-2022
0 2
0
2
denissotoacc
Well, my question is not that intuitive, but I will deep dive here:Let's suppose I have this lookup:NameProductSell_D...
by denissotoacc Path Finder in Splunk Search 03-05-2022
0 3
0
3
jenniferhao
I have a xml _raw="2022-03-02 21:22:39.417 [MESSAGE] [default-threads - 8] [re_messages] - <?xml version="1.0" encodi...
by jenniferhao Explorer in Splunk Search 03-05-2022
0 4
0
4
rhenry
Hello, I am attempting to extract from a field a seven digit number which can sometimes have a space or special chara...
by rhenry Explorer in Splunk Search 03-04-2022
0 9
0
9
bijodev1
Hi Team, I am wondering if there is any command to to calculate how many times a string consecutive present. for eg :...
by bijodev1 Communicator in Splunk Search 03-04-2022
0 4
0
4
cucuro11
Hello, All In Splunk Enterprise 8.0.1, I searched "index=_internal | table _raw" and Visualization with Table. I'd...
by cucuro11 Explorer in Splunk Search 03-04-2022
0 3
0
3
chiliconbeano
I want to access the title, owner, etc., of the currently running scheduled alert via SPL syntax.  I want to append t...
by chiliconbeano Path Finder in Splunk Search 03-04-2022
0 5
0
5
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...