Splunk Search

Community Activity

Windows Security events not getting forwarded Hello team, I am trying to monitor windows event logs and have installed the universal forwarded with relevant data. ... by srinivas_gowda Path Finder in Splunk Search 10-20-2021 0 3	0	3
Help with splitting multiline event needed Hello,I read my data with the inputlookup command and try to count the different occurrences of the field fields.SID ... by damucka Builder in Splunk Search 10-20-2021 0 1	0	1
PCs not scanned for more than 3 days Hello,This is my request: index=antivirus \| stats values(SAVVersion) as SAVVersion, values(EngineVersion) as Eng... by numeroinconnu12 Path Finder in Splunk Search 10-20-2021 0 2	0	2
how to combine time chart and bar chart together Hi team,1. I have first query which return me below chart <baseQuery> \|timechart span=4w count(ACT) as countOfOpen... by cheriemilk Path Finder in Splunk Search 10-20-2021 0 0	0	0
Correlation alert with multiple events Hi,I want to create a Correlation alert that will trigger and collect all the events from the same IP within a certai... by LIP Loves-to-Learn in Splunk Search 10-19-2021 0 1	0	1
How to set default for search time picker in Splunk Cloud Does anyone know how to change the default time for ad-hoc searches from 30 minutes to 7 days in Splunk Cloud? I chan... by edgarrity Path Finder in Splunk Search 10-19-2021 0 0	0	0
How to transpose rows of one column into multiple columns? I currently have multiple entries in the VALUES column for each host.The table currently looks like: hostnameVALUESHO... by cjkar Engager in Splunk Search 10-19-2021 0 2	0	2
extract percentage of code by servername Hii have two field "servername" "code". i need to extract percent of code by servers.index="my-index" \| table servern... by indeed_2000 Motivator in Splunk Search 10-19-2021 0 4	0	4
Determine number of concurrent queries with a 15-minute time bucket given query_duration Attached screenshot is a list of 15 query ids with started, ended, bstarted (15 minute bucket) and query duration. T... by lim2 Communicator in Splunk Search 10-19-2021 0 1	0	1
How to create a Storage Account without a key or token I created an Access Policy in Azure. How do I configure the Storage Account to use the Access Policy https://docs.spl... by domingsb New Member in Splunk Search 10-19-2021 0 0	0	0
Add column with last logon user to the table Hi,I have following table: ts actionfile_namesource_ip2021-10-12T09:34:08.910998ZFile Opentest10.0.0.14 I would like ... by raffal59 Loves-to-Learn Lots in Splunk Search 10-19-2021 0 5	0	5
How to calculate a ratio by field value? I have some data like the following:NAMECodeSuzy0John0Adam1Suzy1John0Adam1 I am trying to calculate the ratio of code... by splunkuserCA1 Path Finder in Splunk Search 10-19-2021 0 3	0	3
Splunk 7.2.2 - systemd - Root privileges required when starting/stopping Splunk? Hello Splunkers, So Splunk 7.2.2 was just released and it now brings a systemd service. However, I noticed that now... by whrg Motivator in Splunk Search 10-19-2021 14 32	14	32
Hide lookup input column HiHow can I hide "code" row from output of lookup comand ?.... \| lookup myfile.csv code OUTPUT descriptionFYI: i have... by indeed_2000 Motivator in Splunk Search 10-19-2021 0 1	0	1
show decimal numbers on sandkey diagram Hi Is it possibe show decimal numbers on sandkey diagram?e.g my spl command produce this number 0.13but on sandey dia... by indeed_2000 Motivator in Splunk Search 10-19-2021 0 0	0	0
Issue with ITSI service_health_monitor saved search Something weird started happening in our Splunk environment for ITSI native saved search : service_health_monitorThis... by Nisha18789 Builder in Splunk Search 10-19-2021 0 3	0	3
CIDR match not working on Splunk 8.X Hi,We have been migrating objects from Splunk 7.3.9 to Splunk 8.X and have found some strange issue, hope someone has... by duartet Path Finder in Splunk Search 10-19-2021 0 3	0	3
sendemail. email averrable on the output I get the result with users. the username is similar to the name of the mail. how do i call the usernam... by gitingua Communicator in Splunk Search 10-19-2021 0 5	0	5
Create tag for rex field Hey All,I get no results found for a tag that looks for fields created by a rex.So...sourcetype=DataServices \| rex "J... by bablucho Path Finder in Splunk Search 10-19-2021 0 5	0	5
How to call/hit external URL from Splunk search and read JSON result obtained in splunk Hi,How to call a External URL from Splunk Search and read the JSON results obtained from it in Splunk.Basically i wan... by Ashwini008 Builder in Splunk Search 10-19-2021 0 1	0	1
Duration between multiple events Hello Splunk Community, Can anyone help me build a query based on the below;I have a batch job that usually starts at... by zoebanning Path Finder in Splunk Search 10-18-2021 0 3	0	3
Convert duration in hours to duration in minutes Hello Splunk Community, Can anyone help me build a query based on the below; I have built a query which calculates th... by zoebanning Path Finder in Splunk Search 10-18-2021 0 2	0	2
Props Configuration with for Text File with First 2 lines contain header info Hello,I have an issue writing props configuration for text source file which contains first 2 line (including "----"... by SplunkDash Motivator in Splunk Search 10-18-2021 0 3	0	3
how to write a request \| inputlookup file1.csvfield1field21a2b3c it is necessary so123abc help! Thanks by gitingua Communicator in Splunk Search 10-18-2021 0 2	0	2
Grouping HTTP GET requests based on first directory Very new to splunk here. I would like to group each http request to each directory based on their directory, and prod... by JaredYong Explorer in Splunk Search 10-18-2021 0 7	0	7