Splunk Search

Community Activity

	Splunk : Spath searching the JSON array I have below two JSON events where under "appliedConditionalAccessPolicies", in one event policy1 has results =failur... by ashishmgupta Explorer in Splunk Search 11-11-2021 0 0	0	0
	getting rows from a table in a panel into another panel how to include specific rows from a table in a panel into another panel in the same dashboard? by lostcauz3 Path Finder in Splunk Search 11-11-2021 0 4	0	4
	return match of mv field from a csv lookup I have an index with a mv field (parts) that I want to match a value in that field with a csv file, but only return t... by richtate Path Finder in Splunk Search 11-11-2021 0 12	0	12
	splunk uba Team Can you please provide me documentation link to learn Splunk UBA platform and related links for monitoring, deve... by sasankganta Path Finder in Splunk Search 11-11-2021 0 1	0	1
	Problems using where command to compare times and filter results I'm having trouble with using the where command to compare times. The search that I'm running is this: index=jamf s... by rjashton Engager in Splunk Search 11-11-2021 0 2	0	2
	Search Scheduler Searches Skipped Hello,I am seeing the below warning on our SH after splunk cloud performed a restart at the backend when i uninstalle... by Roy_9 Motivator in Splunk Search 11-11-2021 0 8	0	8
	How to send an alert when search count is 0 Hi, I am looking for a solution to check the splunk query results . if it returns '0' events i need to trigger an a... by rajs115 Path Finder in Splunk Search 11-11-2021 0 6	0	6
	Getting inconsistent extraction Hello all, I am trying to extract the below highlighted fields, but the extractions at time is failing to get the req... by srinivas_gowda Path Finder in Splunk Search 11-11-2021 0 3	0	3
	Table format raw data I want to extract the field that are on the left which are status, monitoirng status, monitoring mode and so on. Mult... by Azwaliyana Path Finder in Splunk Search 11-11-2021 0 3	0	3
	join only with the first row Hi,I need to join two searchs. For example:Example 1: \| inputlookup join_example1.csv countryproductdaystockSpainappl... by rafadvega Path Finder in Splunk Search 11-10-2021 0 2	0	2
	ldapsearch not returning true/false for attr Enabled For some reason the "Enabled" field is not return "true or false" when running ldapsearch from Splunk. All the other... by marceloalejandr Path Finder in Splunk Search 11-10-2021 0 1	0	1
	How do I get SmartStore to fill its cache again? We have Splunk 8.0.3 deployed to a private AWS cloud.We use AWS i3.8xlarge instance types for our indexers, recently ... by esalesap Path Finder in Splunk Search 11-10-2021 0 1	0	1
	Search ui options - export/download I have a user that has asked how to get access/permissions to the "export" button while doing a search in Splunk. It... by andrewenstad Engager in Splunk Search 11-10-2021 0 1	0	1
	Find Events in one index based on a result set I want to find items in one index based on results from another index's search. I have the following but only get a h... by SMM10 Explorer in Splunk Search 11-10-2021 0 3	0	3
	Field Extraction This has been asked a million times. I've been digging through the various postings but haven't figured out what I'm ... by jeck11 Path Finder in Splunk Search 11-10-2021 0 8	0	8
	Subsearch not returning any results Hello Splunksters,I'm new to Splunk and am constructing my first subsearch. I've read the documentation on subsearch... by gillockb Explorer in Splunk Search 11-10-2021 0 4	0	4
	If statements inside search I am currently using an Input token called OS.I have three values for the token: MAC Windows Linux.In my... by Vip_Mark Explorer in Splunk Search 11-10-2021 0 1	0	1
	regex to fetch values within delimiters Hi team, Please help with the regex to fetch the values from below payload - serverName, HostNumber. "{\n \"process... by rkishoreqa Communicator in Splunk Search 11-10-2021 0 1	0	1
	Summary Indexing Hi GuysWanted to know if anyone knows if you can populate a summary index from a data model. the summary index query ... by zubairaizatron Explorer in Splunk Search 11-10-2021 0 2	0	2
	help to legend field name after using a lookup correspondance hiI use a lookup in order to do a correspondance between the field web_error_code which is my sourcetype and which is... by jip31 Motivator in Splunk Search 11-10-2021 0 2	0	2
	export field extraction to resue I have extracted two fields in my non prod splunk account. I want to use the same for the prod splunk account as well... by rohanmiskin Explorer in Splunk Search 11-10-2021 0 2	0	2
	multiple sources Hi,I just started working with Splunk and would ask for some help.I have 3 sources, A, B and C.Source A contains fiel... by Wilfred Engager in Splunk Search 11-10-2021 0 2	0	2
	Remove all events of a client based on one or more values of field Hi thereIm trying to filter my search results based on numerical top values of a field.For example. I have 5k events ... by rel82wi Engager in Splunk Search 11-10-2021 0 4	0	4
	Exclude path from URL in Search Results HiI want to exclude the path from search results, i.e.:www.testsite.comwww.testsite.com/path1www.testsite.com/path2ww... by spfingst87 Loves-to-Learn in Splunk Search 11-10-2021 0 4	0	4
	How to extract the substring from a string I want to extract the substring: "xenmobile" from string: "update task to xenmobile-2021-11-08-19-created completed!... by febbi Explorer in Splunk Search 11-10-2021 0 2	0	2