Splunk Search

Community Activity

	Spliting a string of file names I have a list of files name under one field called "attachment" and I would like to split this string into multiple ... by data_explorer88 Explorer in Splunk Search 10-08-2021 0 2	0	2
	Add field from the returns of another query I am trying to produce the following output :app_namerequest_idtimeworkload at the time(requests per second)App112310... by yk010123 Path Finder in Splunk Search 10-08-2021 0 4	0	4
	Check a field Hello,I have a field with this values/v1/accounts/96ea01b5-7ea7-4dc6-b534-39ae8b114bba/transactions/v1/accounts/ff572... by graziaedu Explorer in Splunk Search 10-08-2021 0 4	0	4
	Showing mean() and avg() side by side Hi all,strange thing - when using mean() and avg() in the same stats command, whichever is written first is empty, wh... by Gunnar Explorer in Splunk Search 10-08-2021 0 6	0	6
	Average a series of future times against current time Hi,I am new to Splunk and working with parking records. I am calculating the current wait_time based off upcoming par... by mlg Observer in Splunk Search 10-08-2021 0 1	0	1
	how to remove the double quotes using regex Hi,my regex was like below ,search\| rex field=_raw "Status=(?<Status>\"\w+\s+\w+\".*?)," \|stats count by StatusMy out... by dtccsundar Path Finder in Splunk Search 10-08-2021 0 2	0	2
	Searching for times being reached within the hour Hi, I am new to Splunk and working with parking records. Within my events, I have a permit_expiry field, which is a d... by mlg Observer in Splunk Search 10-08-2021 0 1	0	1
	Check if a date is within interval of another record Hi!I have the following data and would like to check, for those records with the same ID, if one record has CREATED_D... by yvassilyeva Path Finder in Splunk Search 10-08-2021 0 1	0	1
	Displaying data that is missing from a lookup table Hi, I am new to Splunk and working with parking records. I am trying to display parking spaces that are currently not... by mlg Observer in Splunk Search 10-08-2021 0 1	0	1
	Need help in extracting different format of fields Hello all,I am extracting a field which is coming in multiple formats, however I found that once of the format is not... by srinivas_gowda Path Finder in Splunk Search 10-08-2021 0 1	0	1
	Looking for a faster search query: Count different platforms from somewhat same events Dear Splunk Community,I have the following search: index=websphere 200 OK POST And I have different platforms that I... by Bleepie Communicator in Splunk Search 10-08-2021 0 2	0	2
	Time difference between events and NULL when second event does not appear in logs I'm trying to figure out how to get the time difference between two events that use the same UUID. However, the secon... by bburns2122 Explorer in Splunk Search 10-07-2021 0 1	0	1
	Group many similar fields from datamodel Hello All,I have a large dataset "audit.cost_records" wherein I am trying to locate a correlation based on a large nu... by Justin49 Loves-to-Learn in Splunk Search 10-07-2021 0 3	0	3
	find users who hasnt logged in the past 30 days Hello! I have a lookup table with fields 'name' and 'last_login'. I'm trying to find users who haven't logged in the ... by iiix94 Loves-to-Learn in Splunk Search 10-07-2021 0 4	0	4
	Looping in Splunk... Trying to figure out how to loop in Splunk. I have the below query and my end result is to map/chart into a timechar... by sjringo Contributor in Splunk Search 10-07-2021 0 10	0	10
	Rex formatting trouble Hello again Spelunkers! So I have data that looks like this:assessment=normal [1.0]assessment=normal [1.1]assessment=... by MikeB Path Finder in Splunk Search 10-07-2021 0 2	0	2
	How to extract a particular string from the event logs Hi Guys, I have a scenario where i need to extract the file name from the event logs. The Event log first line ... by kumarnis45 Path Finder in Splunk Search 10-07-2021 0 16	0	16
	search in foreach subquery I have items visit log index with fields: category, item each event is a visitIn addition, I have an index with all i... by dmitrymi Observer in Splunk Search 10-07-2021 0 5	0	5
	Use event date to with an uploaded CSV events are loaded with different currency from different countries and we are trying to have a view converting the cu... by ModupeSebapole Engager in Splunk Search 10-07-2021 0 3	0	3
	Add a count from a different time period Hello, I'm trying to add the appearance of a certain value in my base search count. the value is "detatched". it is w... by avoelk Communicator in Splunk Search 10-07-2021 0 3	0	3
	Pie Chart with count+ DrillDown with click.value and replace https://answers.splunk.com/answers/562629/how-to-configure-pie-chart-to-display-count-within.htmlsame as above post, ... by saravana22 Explorer in Splunk Search 10-07-2021 0 2	0	2
	Extract sub string from address I have the following address, and I want to extract the substring.Address: 121, riverstreet, sydney, Australia.I want... by sndpgiri Engager in Splunk Search 10-07-2021 0 1	0	1
	Conditional search evaluation Hi , I am trying to get the day wise error count by data message only if the yesterdays error count is more than 50 .... by Tanmaya New Member in Splunk Search 10-07-2021 0 4	0	4
	Splunk stats count by two fields Hi Can anyone please help with this extracting stats count by two fields. I've below data in each transactiontype ... by srujan594 Loves-to-Learn in Splunk Search 10-06-2021 0 1	0	1
	first query table output as input to another query Hello, Can i please know how to parse the value to the 2nd query from the output of 1st query. Any help would be appr... by vadlamudi Explorer in Splunk Search 10-06-2021 0 1	0	1

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

How Edge Processor's Durable Queue Works

Edge Processor sits in one of the most consequential places in any Splunk pipeline: between your data sources ...

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Splunk Search

Spliting a string of file names

Add field from the returns of another query

Check a field

Showing mean() and avg() side by side

Average a series of future times against current time

how to remove the double quotes using regex

Searching for times being reached within the hour

Check if a date is within interval of another record

Displaying data that is missing from a lookup table

Need help in extracting different format of fields

Looking for a faster search query: Count different platforms from somewhat same events

Time difference between events and NULL when second event does not appear in logs

Group many similar fields from datamodel

find users who hasnt logged in the past 30 days

Looping in Splunk...

Rex formatting trouble

How to extract a particular string from the event logs

search in foreach subquery

Use event date to with an uploaded CSV

Add a count from a different time period

Pie Chart with count+ DrillDown with click.value and replace

Extract sub string from address

Conditional search evaluation

Splunk stats count by two fields

first query table output as input to another query

Announcing Modern Navigation: A New Era of Splunk User Experience

How Edge Processor's Durable Queue Works

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation