Splunk Search

Community Activity

	No Event Code 1024 appear Hello everyone,I have the following inputs.conf file which is actually working for the first 2 stanza, but not for th... by g_paternicola Path Finder in Splunk Search 10-25-2021 0 0	0	0
	map command with functions I'm trying to use the map command and it seems to fail when I try using some functions within the subsearch (specific... by maramel Engager in Splunk Search 10-25-2021 0 1	0	1
	detecting SMB traffic Hello, I am new to Splunk and I am looking for a way to write a rule to detect SMB traffic. Thanks by candrew0710 New Member in Splunk Search 10-25-2021 0 0	0	0
	search is returning distinct values Hi Experts,\|search filed1=Enabled OR "Enabled" OR "Disabled" OR DisabledThe above search is returning four rows.If i ... by email2vamsi Explorer in Splunk Search 10-25-2021 0 4	0	4
	Matching events with same values across different fields HI AllI have IP flow based information being ingested into Splunk, which consists of source_ip, source_port, destinat... by devak Engager in Splunk Search 10-25-2021 0 2	0	2
	XML field extraction Hi all, I have a xml file as below.<?xml version="1.0" encoding="UTF-8"?><suite name="abc" timestamp="20.08.2021 15:4... by anooshac Communicator in Splunk Search 10-25-2021 0 4	0	4
	Splunk: Return One or True from a search, use that result in another search Dear Splunk community,In Splunk, I am looking for logs that say "started with profile: [profile name]" and retrieve t... by Bleepie Communicator in Splunk Search 10-25-2021 0 1	0	1
	How to add tooltip for radio buttons? Hi,I have a radio button with 3 choice values. When any of the radio button is clicked or hovered it should show me s... by Ashwini008 Builder in Splunk Search 10-25-2021 0 3	0	3
	Stats vs StreamStats to detect failed logins with 5 mins time frame All, I have a simple requirement to list failed login attempts from same src_ip in a span of 5 mins. i have seen 2 o... by neerajs_81 Builder in Splunk Search 10-25-2021 0 1	0	1
	Does not load automatic lookup I have configured an automatic lookup, however when I try to do a search it gives a message "Could not load lookup=LO... by aseqa New Member in Splunk Search 10-25-2021 0 0	0	0
	Read error when exporting to CSV file Hey all,I hope this is the correct board for this question, but I am having an issue when I try to export a search to... by deca2499 Engager in Splunk Search 10-24-2021 0 9	0	9
	Filter events based on the time range(day of week) on a lookup table Hi, I am trying to filter events based on a lookup table with a time range. My lookup table looks like this: startDay... by mgbersales Loves-to-Learn in Splunk Search 10-24-2021 0 1	0	1
	Block all incoming HTTP traffic where the source IP comes from a specific city by cyberkmb New Member in Splunk Search 10-24-2021 0 0	0	0
	TERM(): How does it work under the covers ? Hi,I have a query which I am not sure why its not working,Assume I have the following JSON record, which has been ext... by bdunstan Path Finder in Splunk Search 10-24-2021 0 1	0	1
	Search for users having a type of connection based on sessionID Hello,I'm trying to debug an issue with an FTP service. I'd like to know that which users are using 'active data conn... by pbabos Explorer in Splunk Search 10-24-2021 0 6	0	6
	using a search macro inside mvmap, missing ) Hi Community - I'm trying to extend the Levenshtein distance query in this tutorial: https://www.splunk.com/en_us/blo... by Cyrus Engager in Splunk Search 10-24-2021 0 2	0	2
	search log on list of server ip without using csv.file hello,I have list of 20 server IP, I'm not administrator of Splunk, I need to find look match where source or destina... by posuw Loves-to-Learn in Splunk Search 10-24-2021 0 1	0	1
	help to write the request correctly Hello guys!!help to write the request correctly. otherwise I don't understand how to do it rightfile.csvusernameip_ad... by gitingua Communicator in Splunk Search 10-24-2021 0 6	0	6
	Unique host list but only when the # of hosts is < some #. To be used for alert content (inline table) index=anIndex sourcetype=aSourceType ("Starting application:" AND (host="aHostName*")) \| stats values(host) AS Serv... by sjringo Contributor in Splunk Search 10-24-2021 0 4	0	4
	Creating Custom Accelerated Data Models LOOK FOR BOLD for quick overview:I want to control the index-time extraction for events linked to an accelerated data... by cyberdiver Explorer in Splunk Search 10-24-2021 0 1	0	1
	universal rex for extract intersting fields like (url, uri, user, email, ip, etc) Hiis there any universal or general rex to extract every known intersting fields like (url, uri, user, email, ip, et... by indeed_2000 Motivator in Splunk Search 10-23-2021 0 5	0	5
	Splunk query doesnt show results in dashboard panel but displays results when using search tab Hi, I am having difficulty in showing up results from splunk query in dashboard panel where it always says 'No result... by pk0024 Engager in Splunk Search 10-23-2021 0 2	0	2
	How to get count of unique values by group? Hi I am working on query to retrieve count of unique host IPs by user and country. The country has to be grouped int... by indusbull Explorer in Splunk Search 10-23-2021 0 6	0	6
	use map with city name HiI have field that call city name is it possible without latitude or longitude, use map to show data on map just wit... by indeed_2000 Motivator in Splunk Search 10-23-2021 0 1	0	1
	how find continuously occured events HiHow can I find continuously occured events?e.g1- I have field that call "response time" if some times show "respons... by indeed_2000 Motivator in Splunk Search 10-23-2021 0 5	0	5