Splunk Search

Community Activity

	Jira Add on for splunk how to pull data from JIRA ID, and use the value pulled from JIRA in splunk search query by vijiithaa New Member in Splunk Search 10-05-2021 0 3	0	3
	Using subsearch result as a "contains" filter I have a search that I need to filter by a field, using another search. Normally, I would do this:main_search where [... by denissotoacc Path Finder in Splunk Search 10-05-2021 0 1	0	1
	Proper use of join vs. append - correlating events by a common field Hi all,I'm working to correlate a series of events. These events are all part of a logging process of a separate appl... by ft_kd02 Path Finder in Splunk Search 10-05-2021 0 2	0	2
	Extract a file name from the splunk logs Hi team, I am new to the splunk. I am just running a splunk query with an ID name to get the file assocaited with... by kumarnis45 Path Finder in Splunk Search 10-05-2021 0 4	0	4
	Need help to create a regular expression Hi All,I am trying to create a regular expression to extract a value from a given log. Below is the log:2021-10-05 07... by Mrig342 Contributor in Splunk Search 10-05-2021 0 4	0	4
	search with lookup Hello dears,I have switches, ip address,ports and i want list with users which are connected to the ports. Users info... by corehan Explorer in Splunk Search 10-05-2021 0 7	0	7
	how to do append after a \|stats sum(fields) Hi,Below is my search , index=aa sourcetype=bb\|stats sum(CountOf_True) as True sum(CountOf_false) as false\|table True... by dtccsundar Path Finder in Splunk Search 10-05-2021 0 5	0	5
	Linear Regression in Splunk predict by Date I want to predict Stock price and use Date as Fields to use for predicting, I am getting bad model. Is it I need to c... by sndpgiri Engager in Splunk Search 10-05-2021 0 1	0	1
	rex How to split a text like ""Liam John" "Grayson Roy" "Olivia"" into names filed using eval and text.names:Liam JohnGra... by Deku2345 Observer in Splunk Search 10-05-2021 0 1	0	1
	Need help with a regex for line_breaker in props.conf Hi,Need help with regex for LINE_BREAKER attribute in props.conf.I have the below data and wanted it as a single even... by mbachhav Path Finder in Splunk Search 10-05-2021 0 7	0	7
	splunk query request to identify a continous sequence of number i have a below data generated by a timechart i'm trying to write a query where if there are continous sequence of nu... by venky1544 Builder in Splunk Search 10-04-2021 0 2	0	2
	Splunk Concurrency Calculation with Drilldown I have some data from logs in Splunk where I need to determine what other requests were running concurrently at the t... by SBB Loves-to-Learn Lots in Splunk Search 10-04-2021 0 0	0	0
	User agent Extraction - Lookup Hi Team I am trying to extract few report from user agent. like below OS details OS versionBrowserBrowser VersionOper... by jaibalaraman Path Finder in Splunk Search 10-04-2021 0 5	0	5
	Splunk returns different result with search query and Dashboard Hi, I am running a basic search query in splunk search directly with command such asquery:sourcetype=aws*-cloudwatc... by kumarnis45 Path Finder in Splunk Search 10-04-2021 0 2	0	2
	Intrusion detection datamodel providing different results when search is executed in different order Hi All ,Can some one help me understand why similar query gives me 2 different results for a intrusion detection dat... by rahulhari88 Explorer in Splunk Search 10-04-2021 0 0	0	0
	Need help in lookup command to extract user agent (OS, OS version , user device details ) Hi Team I am trying to extract few report from user agent like below OS details OS versionBrowserBrowser VersionOpera... by jaibalaraman Path Finder in Splunk Search 10-04-2021 0 1	0	1
	rex extract first string HiHow can I extract first occured this "User ABC123 invalid" with rex?Here is the log:2021-10-03 13:26:44,441 ERROR ... by indeed_2000 Motivator in Splunk Search 10-04-2021 0 3	0	3
	time format change Hi,I have a field (Lastsynctime) which outputs time in below format2021-10-02 09:06:18.173I want to change the time f... by VijaySrrie Builder in Splunk Search 10-04-2021 0 1	0	1
	Need help on Rex Hi ,can some one help me with the rex command to extract the string included in first [] from below pattern. For exam... by sbhatnagar88 Path Finder in Splunk Search 10-04-2021 0 2	0	2
	How to use MULTISEARCH orAPPEND in 2 searches, both, containing JOIN Good day,As mentioned in the subject, I want to retrieve results from 2 searches, both containing JOIN. The purpose o... by jaysonpryde Path Finder in Splunk Search 10-03-2021 0 1	0	1
	oneshot limit java If I am trying to execute the following code block and my total records is greater than 50K it limits me to the 50K s... by scott_r New Member in Splunk Search 10-03-2021 0 1	0	1
	spath vs xpath parse xml Hii have xml file like this, how can i table it with xpath or spath? <?xml version="1.0" encoding="UTF-8" standalone=... by indeed_2000 Motivator in Splunk Search 10-03-2021 0 6	0	6
	How to replace field value by string if certain condition matched How do I replace a value for a field if the value is lesser than 0.02 by "Good"?ValueKeydate0.0211/1/20170.0211/2/201... by sndpgiri Engager in Splunk Search 10-03-2021 0 3	0	3
	How to rename columns in a chart that cam from nested json? I have a nested json element that gives back up to 8 field names. I table them like: \| table "Config.DiskBrandSize.*"... by thisissplunk Builder in Splunk Search 10-02-2021 0 2	0	2
	Detect server response time outliner HiI have field in my log that call ServerRespTime. I want to detect outliner of ServerRespTime.Here is the conditions... by indeed_2000 Motivator in Splunk Search 10-02-2021 0 0	0	0