Splunk Search

Community Activity

How to merge two fields into one field? I have the following result set coming from a search: field_1 field_2 1 2 3 4 5 6 I need to mer... by lpolo Motivator in Splunk Search 10-23-2024 9 32	9	32
Field Extraction index=_internal I tried to run the Indexing Performance: Instance dashboard but was not getting any data, on exploring the search I f... by geekf Path Finder in Splunk Search 10-23-2024 0 6	0	6
How to convert the value into months , days Hi I am building dashboard for UPS monitoring and i would like to convert a specific metric which is battery age. W... by jaibalaraman Path Finder in Splunk Search 10-23-2024 0 5	0	5
Missing values in results I found this very usefull search for a dashboard on gosplunk:\| rest /services/data/indexes \| dedup title \| fields tit... by Jakfarh Loves-to-Learn in Splunk Search 10-23-2024 0 2	0	2
How to assess the storage if we modify the index searchable retention days Hi,I have an use case in which I need to assess the storage difference of the index.Like for example, I have an index... by shoaibalimir Explorer in Splunk Search 10-22-2024 0 3	0	3
optimizing a query that check the ldap service I created the following query to check the status of ldap service but i was wonder if there a better query tag=NAME ... by bond77s Explorer in Splunk Search 10-22-2024 0 2	0	2
Displaying unique URIs visited per session as columns I have a splunk search that returns two columns, SESSION and URI. How can I show the sequence of URIs visited by each... by jbrenner Path Finder in Splunk Search 10-22-2024 0 4	0	4
Error in "litsearch" command Good morning, Getting a weird error this morning when trying to run searches. It is saying that m license is expired,... by JoshuaJJ Path Finder in Splunk Search 10-22-2024 0 6	0	6
Variable earliest/latest in main search I have a working dashboard that displays a number of metrics and KPIs for the previous week. Today, I was asked to e... by DATT Path Finder in Splunk Search 10-22-2024 0 3	0	3
Drilldown Token from Single Value Panel to Stats Table Panel Need help passing a token value from a Single Value Panel using the ( \| stats count) in conjuction to the ( \| rex fie... by ramuzzini Path Finder in Splunk Search 10-21-2024 0 1	0	1
Fecth the field based on other field condition Hi,I need help to fetch field based on other field condition.I have lookup table as below,NAME STATEabc-a-0 host1 ma... by myusufe71 Explorer in Splunk Search 10-21-2024 0 1	0	1
How to tie multiple events together (transaction, join, etc.) Hi,I am trying to tie multiple events describing single transaction together.This is my test example: Event Oct 21 08... by SplunkUser001 Explorer in Splunk Search 10-21-2024 0 1	0	1
Need help with syntax and rex I have a log with a sample of the followingPOST Uploaded File Size for project id : 123 and metadata id : xxxxxxxxxxx... by LizAndy123 Path Finder in Splunk Search 10-21-2024 0 3	0	3
Invalid value "$earliest$" for time term 'earliest' Hi SplukersI'm looking for cross compare some events with other system data, using an initial search for the event an... by dataisbeautiful Communicator in Splunk Search 10-21-2024 0 10	0	10
How to Fetch the output based on the input value from Dropdown Hi,I have an log which show currency field and it will have all the valid currency codes like JPY, CNY, USD etc..I ne... by dhineshv1 Engager in Splunk Search 10-20-2024 0 3	0	3
Multi sourcetype search for extracted value I am having some issues getting this to work correctly. It does not return all the results. I have different records ... by whipstash Engager in Splunk Search 10-19-2024 0 3	0	3
count by response time range source aaa\| eval Description=case(rt_sec>10, "G10", rt_sec>20, "G20", rt_sec>30, "G30", rt_sec>40, "G40") \| stats cou... by jibiuthaman Explorer in Splunk Search 10-18-2024 0 3	0	3
Using Eval Where Clause in Secondary Search from Stats Count Have working query to give me list of all printers, total job count, total page count and show location of printers u... by ramuzzini Path Finder in Splunk Search 10-18-2024 0 2	0	2
Tweaking xyseries Iam using splunk to generate as below.It is run for 2 days date range where am trying to compare the countClassName16... by bmer Explorer in Splunk Search 10-18-2024 0 2	0	2
File will not be read, seekptr checksum did not match for a file in splunk Hi TeamSplunk is unable to read a file which has particular content as below. If the file contains other content, the... by hariengg Engager in Splunk Search 10-18-2024 0 3	0	3
How can I use the result of subquery field as wildcard? I have subquery result ashost1host2host2And I want to put this all host result as host=* in the main query.1. subque... by myusufe71 Explorer in Splunk Search 10-18-2024 0 3	0	3
Do I need to run this search twice? I have the following fabricated search which is a pretty close representation of what I actually want to do and gives... by tread_splunk Splunk Employee in Splunk Search 10-17-2024 0 1	0	1
How to add a toggle to hide/unhide fields in a table in Splunk Dashboard? I am working on a dashboard that has a bunch of field and will be used by multiple teams and people who will be needi... by PotatoDataUser Explorer in Splunk Search 10-17-2024 0 1	0	1
Search/Job missing in job_manager I currently do a search monthly for searches/jobs that take a long time. I then look up the job and if there is an al... by dwong-rtr Explorer in Splunk Search 10-17-2024 0 4	0	4
Query src + dst subnet and action Dear all, I'm trying to search for denied actions in a subnet, regardless if it is the source or destination. I tried... by tbayer82 New Member in Splunk Search 10-17-2024 0 1	0	1