Splunk Search

Community Activity

	Is there a way to set trigger conditions using SPL I am coming across an interesting problem where notables are being generated for each event in Splunk with unique not... by sm1tty Loves-to-Learn Lots in Splunk Search 02-03-2022 0 0	0	0
	subsearch from previous results I need to run three different queries based on the each respective results. for example :1) In the first one query : ... by bijodev1 Communicator in Splunk Search 02-03-2022 0 2	0	2
	SOLVED: Alternates of LEFT OUTER JOIN Hello,I have got 2 data sets resides in same index but with different source/host: index="tickets" host="RMM_DATA" i... by madhav_dholakia Contributor in Splunk Search 02-03-2022 0 11	0	11
	Splunk index How can i populate data from primary index to summary index using collect command. By using collect command can we po... by kajalchopade071 Path Finder in Splunk Search 02-03-2022 0 2	0	2
	Monitor a set of csv files for errors So I have a particular number of important csv files that I need to ensure have no errors - which I can lookup using ... by robnewman666 Path Finder in Splunk Search 02-03-2022 0 4	0	4
	Timechart with TIME, IPADDRESS and count Hi All,I have below splunk data:"new request: 127.0.0.1;url=login.jsp"which contains the IPADDRESS (EX:127.0.0.1) and... by yatyat Observer in Splunk Search 02-03-2022 0 3	0	3
	unable to list the unmatched values compared with lookup file I am trying to identify the values that are in the logs not matching with content in the lookup file. But i am not ge... by rboya_splunk Loves-to-Learn in Splunk Search 02-03-2022 0 4	0	4
	Splunk query Username status User1 loginUser2 loginUser3 login User1 logout User1 loginUser1 logout N... by kajalchopade071 Path Finder in Splunk Search 02-03-2022 0 5	0	5
	Error in 'eval' type check failed I have a json data from file generated from the okla speedtest -f json command. I have tried to cast it or eval in di... by jenkinsta Path Finder in Splunk Search 02-02-2022 0 2	0	2
	Predict command not working with eval count. I have the following query that I am working to establish a prediction for. I am able to be the volume to predict but... by SMM10 Explorer in Splunk Search 02-02-2022 0 0	0	0
	I want to provide read permission only one app not to all apps to a particular role I want to provide read permission for only one app not all apps to a particular role and in my environment under apps... by bapun18 Communicator in Splunk Search 02-02-2022 0 1	0	1
	Add a link to another dashboard in the NEW dashboard Studio that has teh same time period of the master dashboard Hello Everyone I hope you are having a great day,This new dashboaard studio feature is GREAT 10/10 but I'm having a l... by andres91302 Communicator in Splunk Search 02-02-2022 0 1	0	1
	Choropleth world map on.click drilldown to set token in dashboard studio missing I'm trying to set a new dashboard token on click of a country in a choropleth that would populate with the iso2 value... by mjones414 Contributor in Splunk Search 02-02-2022 0 1	0	1
	Sumo Transaction States to Splunk Query Good Day, I am trying to come up with ideas to translate a Sumo Trasactional search with (States) Conditions to a Spl... by parkertctr Path Finder in Splunk Search 02-02-2022 0 0	0	0
	Unable to parse macro name from map command I have a lookup table with a field that contains a macro name. the rows returned from the lookup table dictate which... by weidertc Contributor in Splunk Search 02-02-2022 0 3	0	3
	Splunk query I have One primary index which contains 30 days logs, but i want from one year for this purpose i created One more sp... by kajalchopade071 Path Finder in Splunk Search 02-02-2022 0 3	0	3
	Extract erros from logs Hi,I'm new to Splunk and I would like to get top errors on a table, but the external API returns a stack tracing maki... by haist Explorer in Splunk Search 02-02-2022 0 4	0	4
	rex on rex101 works fine...Splunk returns a blank I have a rex built that when plugged into rex101 works fine, but when applied via a Splunk query, returns a blank res... by he204035 Explorer in Splunk Search 02-02-2022 0 7	0	7
	How to remove everything after a specific character and any digit I want remove everything after "-" and any digit for example -1,-2,-3...-9,-0 I'm using rex function but not getting ... by shaileshransing Engager in Splunk Search 02-02-2022 0 1	0	1
	How to make rest search on one search head able to get results from other search heads? If you have a dashboard that has a panel with a search like the one below:\| rest splunk_server=* /services/-/-/admin... by jaburke1 Path Finder in Splunk Search 02-02-2022 0 6	0	6
	different format field extraction using rex Hello @Anonymous Please help me out here.I was trying to extract a field "faultDescription". but the logs have differ... by BT Path Finder in Splunk Search 02-02-2022 0 8	0	8
	search using terms from lookup in an (mv) string field. I have an mvfield of type string in my results. I want to search and match all values of this field for words that c... by drodman29 Path Finder in Splunk Search 02-02-2022 0 1	0	1
	filter search results based on subsearch with regex Hi dear community!I'm trying to build the dashboard using records in two states STATE1 and STATE2. I'm logging state ... by margo_zefirka Engager in Splunk Search 02-02-2022 0 5	0	5
	combine two result on a timechart for compare them HiI have two result like this REQName count Node1.Node2 100Node3.Node4 500 RSPName ... by indeed_2000 Motivator in Splunk Search 02-02-2022 0 9	0	9
	compare record from yesterday to today if field equals Say I have a batch job that pushes JSON records that look like this on Monday: {<!-- --> Department: Engineering Employee... by zachsisinst Explorer in Splunk Search 02-02-2022 0 6	0	6