Splunk Search

Community Activity

how to have one droplist input used for 2 panels with adding suffix for one panel? Hi,Splunkers,I have a dashboard with 2 Panels， which share one droplist input.droplist has name/values as ALL/*, ... by wangkevin1029 Communicator in Splunk Search 01-19-2022 0 16	0	16
Join multiple events and separate timestamp fields I've been having difficulty with this for a while and looking for some help. I'm attempting to find users logging and... by cmccartneyocto Engager in Splunk Search 01-19-2022 1 0	1	0
rex to extract duration HiHow can I extract duration with below condition? (it is important to check these condition to find correct match)1)... by indeed_2000 Motivator in Splunk Search 01-19-2022 0 5	0	5
How to get ServiceNow to create an event ticket Can someone help me to get ServiceNow to create an event ticket every time my Splunk alert gets triggered? I had foll... by Ab_Splunk Engager in Splunk Search 01-19-2022 0 2	0	2
count value not returning Hi,I'm Trying to calculate success percentage, for that I'm taking total and request count. but, I'm unable to get co... by kiran007 Explorer in Splunk Search 01-19-2022 0 5	0	5
How to search for values greater than 10 in the results? I am working on the query that generates a table with count of security violations. I want to filter our the users wi... by chinmay25 Path Finder in Splunk Search 01-19-2022 0 2	0	2
how to change the lables of x axis of a bar graph Hi all,I have to plot a bar graph in which duration in hours will be in x axis and number of tasks will be in y axis.... by anooshac Communicator in Splunk Search 01-19-2022 0 9	0	9
Group by a substring within a event results I am actually new to splunk and trying to learn . Is there a way to group by the results based on a particular string... by akash_burnwal Engager in Splunk Search 01-19-2022 0 3	0	3
uncommon data in lookup files Hi Team, could you please help to get below query:I have 2 lookup files. I want to fetch uncommon data from 1 of the... by ND Path Finder in Splunk Search 01-19-2022 0 3	0	3
Display table base on the if condition Hi,I want to count the LOGLEVEL only for weekdays. If there's not logs then the query should return '0'. Can you pl... by syedikramulla Explorer in Splunk Search 01-19-2022 0 2	0	2
how to check if several strings in chart I want to check in some strings are exist in a column and if they are I want to add another column with the type of t... by gkochner1 Observer in Splunk Search 01-19-2022 0 1	0	1
Exclude main search events when JOIN event gives no results Dear Splunk Community,I have the following query. The main query looks for errors in certain log files. If they are f... by Bleepie Communicator in Splunk Search 01-19-2022 0 1	0	1
How to show lookup value if not present in subsearch Please help!I have a lookup table and some data in two different indexes. Please help with a search that will produce... by hank72 Path Finder in Splunk Search 01-19-2022 0 2	0	2
Need more training with Searching Good Afternoon, So I've recently been hired on as a Splunk admin/analyst. The scope of my job really relies on my be... by Ab_Splunk Engager in Splunk Search 01-18-2022 0 5	0	5
User Account Logged On For More Than 12 Hours Hi , I am trying to figure out how to write a query to create an alert that will alert me whenever a user is logged o... by websplunk01 Engager in Splunk Search 01-18-2022 0 18	0	18
macro with parameter as eval-base definition My main query looks like:...\| stats min(_time) AS SESSION_START_TIME max(Source_Network_Address) AS EMP_SRC_IP...\| ev... by eranhauser Path Finder in Splunk Search 01-18-2022 0 12	0	12
Enable input in dashboard for client server A5531DE8-7C9C-4CA2-9FD4-E86B3F2BAB64.jpeg In above image i couldn’t able to access the date input,It’s actually a cli... by Veeru Path Finder in Splunk Search 01-18-2022 0 1	0	1
If a field contains in an eval statement My data is like this illustration purposes only:LocalIp aip10.10.10.1192.168.1.110.10.10.2172.58.100.4110.10.12.38.8.... by jenkinsta Path Finder in Splunk Search 01-18-2022 0 4	0	4
How to setup DOD CAC Login for Splunk Web I have been asked to ensure that the DOD CAC can be used to log into the Splunk Search Heads. Does anyone know how to... by scc00 Contributor in Splunk Search 01-18-2022 0 5	0	5
Events from windows and linux without domain name Hello, I would like change bare host name to host name with a domain name. According to all articles I have changed t... by Wojt3k Engager in Splunk Search 01-18-2022 0 0	0	0
Combining 3 data sources with rolling ID Hi,various tables from a database are read by Splunk. I need to combine fields from all 3 datasources. The ID-fields ... by ManfredGrill Explorer in Splunk Search 01-18-2022 0 2	0	2
Warn and Error messages below search bar While most Warn and Errors show up on the Job dropdown (1) some are also displayed in an area right below the search ... by nunoaragao Path Finder in Splunk Search 01-18-2022 0 0	0	0
Top 10 of a top 10 Hello there,I want to make a top 10 of applications based on top 10 of categories.Here is an example:CategoryNb of al... by BigShak Explorer in Splunk Search 01-18-2022 0 4	0	4
timechart command with subsearch yields no results after update to 8.2.4 Hi all, I have been using a subsearch in a timechart command to dynamically select the correct span. The query looks ... by just_me New Member in Splunk Search 01-18-2022 0 0	0	0
Splunk Query If i have n numbers of router in my index and i want to know the current status of router if its connected or failed... by i_am_manish New Member in Splunk Search 01-18-2022 0 2	0	2