Splunk Search

Community Activity

	how to compare 2 sourcetypes and fill data accordingly in a field Hi,I have 2 sourcetypes with same index like ( index=A sourcetype= compare and index=A sourcetype= Fire)i am doing ou... by dtccsundar Path Finder in Splunk Search 11-16-2021 0 2	0	2
	Extract username with dash (-) Field from event Hello Everyone, I'm trying to extract usernames from the logs of a proftpd.An event looks like this:2021-11-16 16:17:... by miberecz Loves-to-Learn in Splunk Search 11-16-2021 0 4	0	4
	Data model in custom search Hi all,I have a doubt regarding the datamodel use.In Splunk Foundamentals 2 course, I got what Data Models is and how... by SIEMStudent Path Finder in Splunk Search 11-16-2021 0 1	0	1
	Query return Zero Events Hi All,I have query which return all the events for two Hybris pods. When I am using stats it shows the number of eve... by manpreetsingh29 Loves-to-Learn Lots in Splunk Search 11-16-2021 0 3	0	3
	Convert multi values to different row entries 10.40.x.x10.4.x.x13.x.x.xKB: Windows aXXXXfield3 Apply Security XXX.serveruserserver I have a table output of a se... by arunkuriakose0 Engager in Splunk Search 11-16-2021 0 1	0	1
	How to loop through the record to get the diff between them Hi there,I am trying to diff the new version against the one version older record and extract the diff from them.For ... by zhanweiw Explorer in Splunk Search 11-16-2021 0 6	0	6
	How to search for an event that has not occurred in 1 day Hello All,Anyone out there know how I can search for an event that is supposed to occur within 24 hours but has not? ... by MeMilo09 Path Finder in Splunk Search 11-15-2021 0 2	0	2
	How to filter time through where clause Hello All, Thought I had this down, but not quite. So here is the scenario. I have two Fields 1. "Sent Invite Time" ... by MeMilo09 Path Finder in Splunk Search 11-15-2021 0 1	0	1
	How to use rex on a QR String to cut out a part that I want I have a QR String that when put in our custom QR divider can took it apart nicely. But I can't use the field extract... by phamxuantung Communicator in Splunk Search 11-15-2021 0 3	0	3
	Multivalue field which contains the string "data:" cause the UI to display all values as a single line Took some trial and error to figure out why some multivalue fields were being displayed as a single line.If the strin... by johnhuang Motivator in Splunk Search 11-15-2021 0 10	0	10
	Search in single table with multiple stats Hello,I am having logs in splunk in below manner.timestamp "LOGGER= PAGE NAME1 Other text"timestamp "LOGGER= PAGE NAM... by mawani Engager in Splunk Search 11-15-2021 0 2	0	2
	The following join field(s) do not exist in the data '_time' I've upgraded from splunk 8.0.3 to 8.2.2, and now i'm getting errors for my metrics query.This used to work:\| mstats... by Sparky1 Explorer in Splunk Search 11-15-2021 0 0	0	0
	Help with regex needed Hello, We have Django logs in following format:11/15/2021 08:34:38 [INFO - 171 ] - [tenant_move.py] - [STOP_PROCESS] ... by damucka Builder in Splunk Search 11-15-2021 0 2	0	2
	Extract the list of Dasboards -> their Panels -> Search Queries used in Panels Hi,Can we get list of Total Dashboards used in Splunk Environment followed by Number of Panel name and search query u... by grout Explorer in Splunk Search 11-15-2021 0 1	0	1
	Group data on a query which results in table data after multiple splits. I have a query which results in to a table data.I want to group the data and the count column should sum of grouped d... by npandit1020 Engager in Splunk Search 11-15-2021 0 1	0	1
	calculate total duration HiHow can I calculate duration of below log: 2021-07-15 00:00:01,869 INFO CUS.AbCD-AppService1-1234567 [AppListener] ... by indeed_2000 Motivator in Splunk Search 11-15-2021 0 3	0	3
	Do i have to use a join in mstats? @sideview Hi NickI am using a join with mstat, but i am hoping that i dont have to.However, i cant crack it - any hel... by robertlynch2020 Influencer in Splunk Search 11-15-2021 0 3	0	3
	Splunk query with multiple for subsearches Hi Team,@DalJeanis I am trying to achieve below splunk search query to find out all the errors that are causing JVM i... by gnandini Observer in Splunk Search 11-15-2021 0 3	0	3
	HOW TO GET FULL NAME USING REGEX FROM RAW DATA HelloHow i can get the full name from log ie. Name=Busaram Manjraji am trying with this regex \|rex field=-_raw "(?<Na... by hrs2019 Path Finder in Splunk Search 11-14-2021 0 6	0	6
	Finding time (in days) that server has not been patched for a critical vulnerability Thanks in advance for any help.I'm trying to find the days that a Device has not been patched for Critical Severity v... by mbtsoltis Explorer in Splunk Search 11-14-2021 0 3	0	3
	Extracting a number a my query not working Hi i have a log like this Elapsed time: prediction timer 0.1953 seconds and i created a rex like this rex "Elapsed\... by ramkrishs New Member in Splunk Search 11-14-2021 0 1	0	1
	How to retrieve specific timestamps for specific values ? Hello everyone,I am currently developing a use case in which I have the below info:UsernameUser StatusUser CodeTime o... by malice Observer in Splunk Search 11-14-2021 0 2	0	2
	Any suggestion for my Legend behavior? what can I do? Hi Folks,I have a bar chart where I have more then one bars and legends for a single day, If I click on a single bar ... by sanjum01 Explorer in Splunk Search 11-14-2021 0 1	0	1
	unusual activity HiI have an issue that Splunk might be help to solve it.Here is scenario:Need to find unusual send and receive patter... by indeed_2000 Motivator in Splunk Search 11-13-2021 0 8	0	8
	splunk integration on ocp Hello Team,I am new to splunk and we have integrated splunk with OCP logs.I am able to see the logs but not sure how ... by Roshni Engager in Splunk Search 11-13-2021 0 1	0	1