Splunk Search

Community Activity

	props.conf : regex in source stanza Hi, I am trying to filter out events using props.conf and transforms.conf . I have requirement where there are multip... by rashiagrawal Loves-to-Learn Lots in Splunk Search 01-13-2022 0 5	0	5
	What's the best way to search for a list of MD5? Where can I find User Instructions for searching for a block of hashes on a regular basis, and emailing an alert if a... by SupD0cTr Engager in Splunk Search 01-13-2022 0 1	0	1
	Chart Visualization Updates Hi,Could you help me why the values for the Y-Axis is not being set correctly? I specified 6000 with interval of 500 ... by aquinojason Path Finder in Splunk Search 01-13-2022 0 8	0	8
	Search a lookup with wildcard in values Hi,I am stuck implementing below use case , please help me on this :I have a lookup say url_requested.csv. http_urlho... by Poojitha Communicator in Splunk Search 01-13-2022 0 3	0	3
	Check if csv files have been updated to latest versions Is there a way of checking if the latest csv updates were successful and if they were the most up to date versions (a... by robnewman666 Path Finder in Splunk Search 01-13-2022 0 6	0	6
	Compare values in two different json objects Hello, This question has probably been asked and answered, but, I just can't seem to find a best solution; I have a s... by vadim_osipov Engager in Splunk Search 01-13-2022 0 4	0	4
	What is the difference between action.lookup and action.populate_lookup? https://docs.splunk.com/Documentation/Splunk/latest/admin/savedsearchesconf mentions two lookup-generating actions: a... by ruman_splunk Splunk Employee in Splunk Search 01-12-2022 0 1	0	1
	Inputs.conf Blacklist - Different Messages on the same line Hi All, I'm tweaking my inputs.conf file to exclude some events for the Windows Security log.I'm filtering EventCode... by icewolf69 Loves-to-Learn Everything in Splunk Search 01-12-2022 0 1	0	1
	Combining Fields from Two Different Seaches I have two searches:Search Aindex=my_idx sourcetype=my_st Name=conference Message= joined\| stats count by _time Patic... by jason_hotchkiss Communicator in Splunk Search 01-12-2022 0 4	0	4
	Get the values of response_time from the below raw data i Want to get the value of 200 as status code and response_time in a table format from the below raw dataStatusRespon... by Bala Explorer in Splunk Search 01-12-2022 0 1	0	1
	Extracting words in a string with regular expressions Hi,i need help to extract word from a string stringSecurity agent installation attempted Endpoint: (Not Found)Securit... by 7ryota Explorer in Splunk Search 01-12-2022 0 7	0	7
	How to extract a string with regex? Hello! I'm having trouble extracting the string "RES ONE Workspace Agent". Can anyone please tell me where I'm going... by dgillette3 Explorer in Splunk Search 01-12-2022 0 5	0	5
	Assigning Lat and Lon to multiple locations. Hi, Im having trouble getting the latitude and longitudes for a cluster map to work properly when given computer name... by dathrimar Explorer in Splunk Search 01-12-2022 0 4	0	4
	Splunk query to create field which should be true or false if data field value available in lookup table. HiI am trying to create new column in table after extracting information from json data, new column have value "True"... by Abhineet Loves-to-Learn Everything in Splunk Search 01-12-2022 0 2	0	2
	extract text using regex hi, i want to extracted the first word from each variable the index has a field called search_name which has these va... by moayadalghamdi Path Finder in Splunk Search 01-12-2022 0 4	0	4
	if statement in search query hi all,i would like to ask if it is possible to include IF condition in the search query if msg="Security Agent unins... by 7ryota Explorer in Splunk Search 01-12-2022 0 2	0	2
	Splunk Search Bar User Design UXD Hi All, One basic thought(issue) on Splunk Search Bar UXD - User Experience Design:1. on the Splunk Search Bar, enter... by inventsekar SplunkTrust in Splunk Search 01-12-2022 0 7	0	7
	Search query to find latest state of incident(ticket) of SNOW Requirement- i am trying to create a report based on State of Incident( ticket). looking for latest State of ticketb... by AbdulMateen Observer in Splunk Search 01-11-2022 0 2	0	2
	how to use one token with different evaluation for 2 panels query under different conditions. Hi, Splunkers，I have a dashboard with 2 panels.there is one input token, Gucid_token,what I need is when Gucid_token... by wangkevin1029 Communicator in Splunk Search 01-11-2022 0 12	0	12
	Automatic extraction bug? Hi,I am facing the next problem. When having the next _raw: process="\"C:\\Windows\\regedit.exe\" /s \"C:\\Program Fi... by ursol New Member in Splunk Search 01-11-2022 0 1	0	1
	How can I identify which heavy forwarder or universal forwarder are sending logs? Hi, I have a problem in my infrastructure the logs are being duplicated, I am trying to identify from which origin (H... by germancho88 Engager in Splunk Search 01-11-2022 0 4	0	4
	Identifying inactive Hosts that crashed I'm trying to identify inactive hosts that crashed (through an alert).Inactive hosts - hosts that haven't logged in t... by legosawyer Engager in Splunk Search 01-11-2022 0 3	0	3
	How to calculate the percentage of certain field occurence in the events ? In my events, there is a field called "is_interactive" which has value of either 0 or 1.Now the thing is, not all of... by zacksoft_wf Contributor in Splunk Search 01-11-2022 0 1	0	1
	How to build a table from different fields from a single event HelloI'm having this situation where I have a query returning a single event and I need to build a compound table fro... by Shaft Explorer in Splunk Search 01-11-2022 0 2	0	2
	Field subtraction Can anyone assist me with the SPL to subtract EBVS% and PFAVS% fields to allow the successful plays field to improve?... by EvansB Path Finder in Splunk Search 01-10-2022 0 3	0	3