Splunk Search

Community Activity

	How can I use block or line comments to test the intermediate output of a multiline splunk query? https://docs.splunk.com/Documentation/SCS/current/Search/Comments says that we may use block comments or line comment... by codekiln Explorer in Splunk Search 10-26-2021 0 1	0	1
	The file a bug link is broken The file a bug link under the help menu goes here: http://www.splunk.com/r/bugsIf you go there it asks you to log in... by sixcorners Loves-to-Learn Lots in Splunk Search 10-26-2021 0 0	0	0
	New search button is really slow When I click new search in the context menu it opens a new tab with a search with the single field I click on. The ne... by sixcorners Loves-to-Learn Lots in Splunk Search 10-26-2021 0 4	0	4
	json_extract returns zero results - why? I have a JSON-based log file for which every line is a valid JSON document. When searching it like this:source="/path... by codekiln Explorer in Splunk Search 10-26-2021 0 2	0	2
	distinct count of specific words with replacing them with another word Hi,I have logs coming with server names listed into it and my requirement is to the distinct count of server by assig... by amitkore3483 New Member in Splunk Search 10-26-2021 0 2	0	2
	Append fields to table after using xyseries. This question is related my previous post.https://community.splunk.com/t5/Splunk-Search/XML-field-Extraction/m-p/5719... by anooshac Communicator in Splunk Search 10-26-2021 0 4	0	4
	How to assign a field value to other events that fulfill a certain condition? Greetings dear Splunk Community, I'll try to keep it short and simple:I have a Query that gets multiple fields, but o... by Cydraech Explorer in Splunk Search 10-26-2021 0 2	0	2
	Join Indexes and Host to Build one Query Hello champions,I run the below 1,2,3 queries on the given datasets to find out which users ran the enable command on... by GRC Path Finder in Splunk Search 10-26-2021 0 8	0	8
	Extraction picking the next match Hello all, I am trying to extract a field from the below event and the extraction is working fine on events that is c... by srinivas_gowda Path Finder in Splunk Search 10-26-2021 0 3	0	3
	Extract information like time from NLog formatted event? Hello,So this is my first time trying to consolidate logs and use the data extraction and I am a little lost. I have ... by 97WaterPolo Engager in Splunk Search 10-26-2021 0 4	0	4
	Splunk outputlookup concurrency I have multiple concurrent saved searches(around 6). All searches have outputlookup command which is writing to separ... by ankitarath2011 Path Finder in Splunk Search 10-25-2021 0 0	0	0
	Undesirable result replace (stats) with (eventstats) I have a rather complicated query that go like this: index=* source=* earliest=-4mon@mon latest=@mon RESPONSE_CODE="... by phamxuantung Communicator in Splunk Search 10-25-2021 0 3	0	3
	Conditional Splunk Query (if else) Hi Champions,In this below mentioned dataset. I want to create a conditional splunk query. Ex: I want to check first ... by GRC Path Finder in Splunk Search 10-25-2021 0 3	0	3
	arules Given fields support / Implied fields support for same value varies While running arules command across multiple fields, The 'Given fields' generated with various 'Implied fields'. But ... by Bhanuchander Loves-to-Learn in Splunk Search 10-25-2021 0 0	0	0
	Search alias for a dashboard Hello! A dashboard runs a search and I want to create an alert for this. So I replicated the search code to the alert... by SplnkUse Path Finder in Splunk Search 10-25-2021 0 4	0	4
	IIS Logs not Parsing as expected I have a props conf file that is not parsing data as i expected. I can see in the raw log that the IIS log has the he... by djreschke Communicator in Splunk Search 10-25-2021 0 1	0	1
	Search time field extractions with backslash not showing up Hello Splunk Wizards,I know there are plenty of people who've had similar issues, but I haven't been able to use thei... by sonomauser Explorer in Splunk Search 10-25-2021 0 6	0	6
	No Event Code 1024 appear Hello everyone,I have the following inputs.conf file which is actually working for the first 2 stanza, but not for th... by g_paternicola Path Finder in Splunk Search 10-25-2021 0 0	0	0
	map command with functions I'm trying to use the map command and it seems to fail when I try using some functions within the subsearch (specific... by maramel Engager in Splunk Search 10-25-2021 0 1	0	1
	detecting SMB traffic Hello, I am new to Splunk and I am looking for a way to write a rule to detect SMB traffic. Thanks by candrew0710 New Member in Splunk Search 10-25-2021 0 0	0	0
	search is returning distinct values Hi Experts,\|search filed1=Enabled OR "Enabled" OR "Disabled" OR DisabledThe above search is returning four rows.If i ... by email2vamsi Explorer in Splunk Search 10-25-2021 0 4	0	4
	Matching events with same values across different fields HI AllI have IP flow based information being ingested into Splunk, which consists of source_ip, source_port, destinat... by devak Engager in Splunk Search 10-25-2021 0 2	0	2
	XML field extraction Hi all, I have a xml file as below.<?xml version="1.0" encoding="UTF-8"?><suite name="abc" timestamp="20.08.2021 15:4... by anooshac Communicator in Splunk Search 10-25-2021 0 4	0	4
	Splunk: Return One or True from a search, use that result in another search Dear Splunk community,In Splunk, I am looking for logs that say "started with profile: [profile name]" and retrieve t... by Bleepie Communicator in Splunk Search 10-25-2021 0 1	0	1
	How to add tooltip for radio buttons? Hi,I have a radio button with 3 choice values. When any of the radio button is clicked or hovered it should show me s... by Ashwini008 Builder in Splunk Search 10-25-2021 0 3	0	3

Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars Sometimes, you just need to see the code. For those looking for a ...

Splunk Search

How can I use block or line comments to test the intermediate output of a multiline splunk query?

The file a bug link is broken

New search button is really slow

json_extract returns zero results - why?

distinct count of specific words with replacing them with another word

Append fields to table after using xyseries.

How to assign a field value to other events that fulfill a certain condition?

Join Indexes and Host to Build one Query

Extraction picking the next match

Extract information like time from NLog formatted event?

Splunk outputlookup concurrency

Undesirable result replace (stats) with (eventstats)

Conditional Splunk Query (if else)

arules Given fields support / Implied fields support for same value varies

Search alias for a dashboard

IIS Logs not Parsing as expected

Search time field extractions with backslash not showing up

No Event Code 1024 appear

map command with functions

detecting SMB traffic

search is returning distinct values

Matching events with same values across different fields

XML field extraction

Splunk: Return One or True from a search, use that result in another search

How to add tooltip for radio buttons?

Splunk MCP & Agentic AI: Machine Data Without Limits

Finding Based Detections General Availability

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Answers Content Calendar May 2025!

MLTKC how should i check jupyter notebook func in ...

Splunk Search

Join the Conversation