Splunk Search

Community Activity

whats wrong with this query?? Hello Everyone,I have below splunk query which will display the output as below (index= index_1 OR index= index_2) (k... by super_edition Path Finder in Splunk Search 11-14-2024 0 11	0	11
I want to create a subsearch that will abbreviate all but the first 30 characters of the result. index=replicate category=* action=* Message=* [search index=replicate \| eval Msg=substr(Message,1,30)] \| stats c... by NanSplk01 Communicator in Splunk Search 11-14-2024 0 2	0	2
Looking to improve a query with a lookup file I have a lookup file that contains a column for hostname, ip address and location. I need a query that will check th... by bond77s Explorer in Splunk Search 11-14-2024 0 3	0	3
Need help with the correct regex Hello, I'm trying to extract fields from an event, but am not up to par on my regex, and I can't seem to get this to ... by mninansplunk Path Finder in Splunk Search 11-13-2024 0 2	0	2
Possible to output a literal string with backslashes from a lookup without escaping? I am attempting to use a lookup to feed some UNC file paths into a dashboard search, but I am getting tripped by all ... by DaClyde Contributor in Splunk Search 11-13-2024 0 3	0	3
How to tie in 2 different event sources to display a field value from one source based on a value from the other source. Hello,Sorry, still trying to get the hang of Search queries. I am tasked with creating a table that displays a serv... by mninansplunk Path Finder in Splunk Search 11-13-2024 0 4	0	4
Dowloading results of table to .csv file Hello Splunkers, I'm getting proper results without any selction in input dropdown, I can able to download the re... by smanojkumar Contributor in Splunk Search 11-13-2024 0 1	0	1
Java Logger and Splunk Class HttpEventCollectorLoggingHandler not working, forwarding to HEC + Splunk I reduced content of my documentation of problem (Code and Trace), due to request from Splunk, I'm trying to log to... by steveIMS Engager in Splunk Search 11-13-2024 0 1	0	1
Join two logs in Splunk hi ,I wanted to search and save result as table from two log statements. one log statement using regex to extract "OR... by Athira Loves-to-Learn Everything in Splunk Search 11-13-2024 0 10	0	10
create alert for specific accound and monitor logs gap I want to monitor AWS logs sources with various account when ever logs stopped coming for particular sourcetype i nee... by Splunk_rocks Path Finder in Splunk Search 11-13-2024 0 1	0	1
how to retrieve the results in splunk from API 2024-11-12 12:12:28.000,REQUEST="{"body":"<n1:Request xmlns:ESILib=\"http:/abcs/v1\" xmlns:xsi=\"http://www.w3.org/20... by splunk6 Path Finder in Splunk Search 11-12-2024 0 11	0	11
Field extraction json format Please help me to get these logs in a way that it provides all the fields please...Nov 9 17:34:28 128.160.82.28 [loca... by splunklearner Communicator in Splunk Search 11-12-2024 0 10	0	10
Issed when search with script from OpenSearch I tried to search data with dynamic script: \| ecs "opensearch_dashboards_sample_data_flights" "{ \"from\": 0, \"size\... by kietluu New Member in Splunk Search 11-11-2024 0 2	0	2
Lookup and group specific logs Hello,We identify a fails request by gathering data from 3 different logs. I need to group by userSesnId, and if thes... by msarkaus Path Finder in Splunk Search 11-11-2024 0 3	0	3
stats query Morning All appreciate some guidance on a spl i'm working on and just cant get the information i requiremy dataset i... by PaulaCom Path Finder in Splunk Search 11-11-2024 0 4	0	4
unset the inputput dropdown to default Hello Splunkers, I have created a input dropdown where i need to reset all input drodpdown irrespective of the sel... by smanojkumar Contributor in Splunk Search 11-11-2024 0 1	0	1
how to perform Log analysis at home wifi i have to get hands on experience on log analysis using home wifi and add it to my resume so this will help me get a ... by soumya_1617 New Member in Splunk Search 11-11-2024 0 4	0	4
Tricky Search for 2 events in same Index So I have an Index with working alerts thanks to your guys help.I have a question on 2 separate events at the same ti... by LizAndy123 Path Finder in Splunk Search 11-10-2024 0 3	0	3
How to check whether splunk is receiving logs from particular IP Hi Guys,Syslog is sent to forwarder IP through TCP 9523 port. I am unable to receive those syslog in forwarder or ind... by splunklearner Communicator in Splunk Search 11-09-2024 0 3	0	3
Selective display of values after transpose This is similar to a question I asked earlier today that was quickly answered, however I'm not sure if I can apply th... by kenbaugher Path Finder in Splunk Search 11-08-2024 0 5	0	5
Splunk doesn't display extra spaces Hello,Splunk doesn't display extra spaces on variables that I assigned. Please see below exampleI used Google Chrome ... by LearningGuy Motivator in Splunk Search 11-08-2024 0 11	0	11
Is there any way to simplify this query If I execute the below query for selected time like 20 hours its taking longer time and calling events are 2,72,00... by apusuluri Loves-to-Learn Everything in Splunk Search 11-08-2024 0 8	0	8
New Line isn't considered/shown in the table Splunk Dashboard Studio In the Splunk app, the exception message column has multiple line message in it. However, when same query is applied ... by vinodkumarK Explorer in Splunk Search 11-08-2024 1 3	1	3
Can we clone the HF to another one? I would like to seek advice from experienced professionals. I want to add another heavy forwarder to my environment a... by Vnarunart Explorer in Splunk Search 11-08-2024 0 5	0	5
DBConnect dobbel quotes in key value pair HelloI have a DBConnect query that gets data from a database and then send it to a Splunk index. Below are the query ... by lyngstad Loves-to-Learn Lots in Splunk Search 11-07-2024 0 4	0	4