Splunk Search

Community Activity

wrong results for case statement with AND I used this eval statement with AND conditions but I'm only getting result as "Public" even when the condition satisf... by sam1010 Explorer in Splunk Search 10-14-2021 0 3	0	3
Validating if 100 nodes are on boarded in splunk indexes or not. If not ? I have this task were I am successful in getting result sets from nodes that are present in my splunk instance.How ev... by jcorcoran508 Path Finder in Splunk Search 10-13-2021 0 2	0	2
Merge 2 queries base on id Need some assistance from the experts.I have two queries below which I would like to merge on id.Query 1index=aws sou... by shrogers Loves-to-Learn Everything in Splunk Search 10-13-2021 0 3	0	3
Splunk dashboard clickable table output Hi There, I have two queries [Query 1 and Query 2]. what i am planning to achieve is that when user clicks on the s... by vadlamudi Explorer in Splunk Search 10-13-2021 0 4	0	4
How to compare values across rows and columns I have two searches with three fields in common but two field that differ. I'm trying to find returns that don't ha... by maingirl New Member in Splunk Search 10-13-2021 0 2	0	2
Value node is not supposed to have children I'm doing a query to return the text part of the log, but when using it on my dashboard it gives this error message:... by carinahOliveira Explorer in Splunk Search 10-13-2021 0 3	0	3
Field results as table column headings A quick example; Program Name 2.04.0 2.4.3 3.4.24 4.53.5 9 Word 2 1 0 1 Excel ... by Drainy Champion in Splunk Search 10-13-2021 4 2	4	2
Splunk Add-on for Check Point OPSEC LEA I am collecting Firewall logs using OPSEC Lea app. This add on is setup on Heavyforwarder. App is setup correctly a... by Navanitha Path Finder in Splunk Search 10-13-2021 0 2	0	2
Edit a lookup file through the REST API Hello !!I am new to using splunk and would like to know if it is possible to edit a lookup file via Splunk REST API o... by rolyrolex Path Finder in Splunk Search 10-13-2021 1 5	1	5
Sub Search counts I have filed called serial_id which have value ABC2022100845001 I need count with contain 45 in last 5 & 6 th bytes by SUNRAJ Engager in Splunk Search 10-13-2021 0 4	0	4
indexing zip files status HiI want to know when index process is done for zip files through the web ui.I have couple of huge zip files that eve... by indeed_2000 Motivator in Splunk Search 10-13-2021 0 1	0	1
Conditional execution of search Hello All, Can someone help me to build a search query for the below use case ? My use case is to detect if any S3 ... by neerajs_81 Builder in Splunk Search 10-13-2021 0 6	0	6
Time format & Duration Calc Hello Splunk Community, Can anyone help me build a query based on the below;I want to convert a field (Fri Oct 8 23:1... by zoebanning Path Finder in Splunk Search 10-12-2021 0 2	0	2
rex for chkin chkout Hihere is the log:23:50:26.698 app module1: CHKIN: Total:[100000] from table Total:[C000003123456] from PC123:33:39.3... by indeed_2000 Motivator in Splunk Search 10-12-2021 0 5	0	5
splunk search returns multiple events along with matched event Hi,I am making a search similar to this index=abc sourcetype=xyz "searchkeyword"Search result should contain only eve... by mbhima_nike New Member in Splunk Search 10-12-2021 0 3	0	3
How to add extracted fields name as first column value Hello Splunk Gurus,I am trying to generate tabular data for the API requests.Following is the query to extract below ... by techytanzy Explorer in Splunk Search 10-12-2021 0 3	0	3
Percent Change by Host and Error Type We're ingesting Tomcat logs, and looking for items tagged [SEVERE]. I'd like to be able to pull a report of error rat... by Michael_Condon Engager in Splunk Search 10-12-2021 0 2	0	2
Expand XML created variable to search Hi Splunkers, Hopefully I am posting on the correct place, apologies if not!I have the following code/SPL from inside... by vagnet Explorer in Splunk Search 10-12-2021 0 3	0	3
Compare the stats output value State Date Desc Countbc 11102021 vm 234569bc 12102021 vm 456328bc 11102021 vm 234569bc 12102021 vm 4532178cd 11102021... by prettysunshinez Explorer in Splunk Search 10-12-2021 0 1	0	1
Getting the occurrence count when there is no event for the same This is the dummy dataset which has been created to address the issue I am facing.I want to count the number of occur... by av_ Path Finder in Splunk Search 10-11-2021 0 18	0	18
Geostats by phone number HiI have field in my log that call “MobileNumber” that need to show count of MobileNumber by location on map.e.g: 001... by indeed_2000 Motivator in Splunk Search 10-11-2021 0 6	0	6
rex extracr mq errors Hiwhat is the rex for mq error code here is the log:2021-10-08 06:52:12,785 ERROR TOPIC-00000 [Utility] MQJCA1011: Fa... by indeed_2000 Motivator in Splunk Search 10-11-2021 0 1	0	1
rex for error number hiwhat is the rex for error number and error message of this log: (separately)23:43:51.411 app module: 100: Not Fou... by indeed_2000 Motivator in Splunk Search 10-11-2021 0 1	0	1
Query to see which application has followed which integration method to on board the data like HEC,TCP,DB connect Query to see which application has followed which integration method to on board the data on Splunk cloud like HEC,TC... by shreyarathod New Member in Splunk Search 10-11-2021 0 0	0	0
Splunk Simple Math Expression using Eval I need a way to evaluate a simple math expression.The following query works, and expr evaluates to result with a valu... by plunkzombie Engager in Splunk Search 10-11-2021 0 4	0	4