Splunk Search

Community Activity

	How to split the call based on TimeTaken I would like to create a Pie chart to show how many calls took less than 100ms, 200ms, and 300ms. index=star env=prod... by marinewcreater Explorer in Splunk Search 10-26-2021 0 4	0	4
	extract all "cause by" HiI have lots "Caused by:" in (single or multiple) eventsHow extract all line that contain "Caused by:"like this:Cau... by indeed_2000 Motivator in Splunk Search 10-26-2021 0 4	0	4
	How can I generate a search to find hosts which are missing a certain sourcetype? I have a sourcetype which is a log created by the AV application on the host. I would like to find hosts which are mi... by systemsatpayzon Path Finder in Splunk Search 10-26-2021 0 5	0	5
	use lookup file inside if statement Hi, I'm trying to use a lookup file inside an if statement, and it doesn't return any data. I would appreciate it if ... by Sharzi Explorer in Splunk Search 10-26-2021 0 1	0	1
	Duration of spike I am trying to determine the length of spike to see if it goes beyond our requirements. Here is a test of my search:i... by bkowen Observer in Splunk Search 10-26-2021 0 0	0	0
	ERROR AdminManagerDispatch - Admin handler 'alert_manager' not found. Hi everyone.I was watching some events from the internal logs and I saw so many events related to "ERROR AdminManager... by saraque Observer in Splunk Search 10-26-2021 0 0	0	0
	Regex for a nullQueue multiple strings I am trying to set a regex that works when i use say regexr.com but doesn't apply in my transforms/props file.I am wa... by agentguerry Path Finder in Splunk Search 10-26-2021 0 5	0	5
	Limiting a Search by number of events over a period of time I am trying to search for a number of events over a select period of time (4 hours) and then expand that to see how m... by RyanDonnelly22 Explorer in Splunk Search 10-26-2021 0 1	0	1
	How can I use block or line comments to test the intermediate output of a multiline splunk query? https://docs.splunk.com/Documentation/SCS/current/Search/Comments says that we may use block comments or line comment... by codekiln Explorer in Splunk Search 10-26-2021 0 1	0	1
	The file a bug link is broken The file a bug link under the help menu goes here: http://www.splunk.com/r/bugsIf you go there it asks you to log in... by sixcorners Loves-to-Learn Lots in Splunk Search 10-26-2021 0 0	0	0
	New search button is really slow When I click new search in the context menu it opens a new tab with a search with the single field I click on. The ne... by sixcorners Loves-to-Learn Lots in Splunk Search 10-26-2021 0 4	0	4
	json_extract returns zero results - why? I have a JSON-based log file for which every line is a valid JSON document. When searching it like this:source="/path... by codekiln Explorer in Splunk Search 10-26-2021 0 2	0	2
	distinct count of specific words with replacing them with another word Hi,I have logs coming with server names listed into it and my requirement is to the distinct count of server by assig... by amitkore3483 New Member in Splunk Search 10-26-2021 0 2	0	2
	Append fields to table after using xyseries. This question is related my previous post.https://community.splunk.com/t5/Splunk-Search/XML-field-Extraction/m-p/5719... by anooshac Communicator in Splunk Search 10-26-2021 0 4	0	4
	How to assign a field value to other events that fulfill a certain condition? Greetings dear Splunk Community, I'll try to keep it short and simple:I have a Query that gets multiple fields, but o... by Cydraech Explorer in Splunk Search 10-26-2021 0 2	0	2
	Join Indexes and Host to Build one Query Hello champions,I run the below 1,2,3 queries on the given datasets to find out which users ran the enable command on... by GRC Path Finder in Splunk Search 10-26-2021 0 8	0	8
	Extraction picking the next match Hello all, I am trying to extract a field from the below event and the extraction is working fine on events that is c... by srinivas_gowda Path Finder in Splunk Search 10-26-2021 0 3	0	3
	Extract information like time from NLog formatted event? Hello,So this is my first time trying to consolidate logs and use the data extraction and I am a little lost. I have ... by 97WaterPolo Engager in Splunk Search 10-26-2021 0 4	0	4
	Splunk outputlookup concurrency I have multiple concurrent saved searches(around 6). All searches have outputlookup command which is writing to separ... by ankitarath2011 Path Finder in Splunk Search 10-25-2021 0 0	0	0
	Undesirable result replace (stats) with (eventstats) I have a rather complicated query that go like this: index=* source=* earliest=-4mon@mon latest=@mon RESPONSE_CODE="... by phamxuantung Communicator in Splunk Search 10-25-2021 0 3	0	3
	Conditional Splunk Query (if else) Hi Champions,In this below mentioned dataset. I want to create a conditional splunk query. Ex: I want to check first ... by GRC Path Finder in Splunk Search 10-25-2021 0 3	0	3
	arules Given fields support / Implied fields support for same value varies While running arules command across multiple fields, The 'Given fields' generated with various 'Implied fields'. But ... by Bhanuchander Loves-to-Learn in Splunk Search 10-25-2021 0 0	0	0
	Search alias for a dashboard Hello! A dashboard runs a search and I want to create an alert for this. So I replicated the search code to the alert... by SplnkUse Path Finder in Splunk Search 10-25-2021 0 4	0	4
	IIS Logs not Parsing as expected I have a props conf file that is not parsing data as i expected. I can see in the raw log that the IIS log has the he... by djreschke Communicator in Splunk Search 10-25-2021 0 1	0	1
	Search time field extractions with backslash not showing up Hello Splunk Wizards,I know there are plenty of people who've had similar issues, but I haven't been able to use thei... by sonomauser Explorer in Splunk Search 10-25-2021 0 6	0	6