Splunk Search

Community Activity

how to get 2 fields by taking on field Hello I have table in my dashboard IDJan_TargetJan_Actual1506020N/AIn similar way for all monthsnow i need a f... by renuka Path Finder in Splunk Search 09-15-2021 0 4	0	4
Lookup with wildcard in data, not in lookup table? Hi. I know a lookup file can contain wildcards and use them with the WILDCARD(<field>) setting, but is it possible to... by etoombs Path Finder in Splunk Search 09-15-2021 0 0	0	0
Missing Stats Data When mean & avg are both present on a "stats" search, the first one in order will be missing so:\| makeresults count=1... by jkwilling Engager in Splunk Search 09-15-2021 0 3	0	3
timeline chart Hi I have got this log where it shows how much time it takes to load investor page in millisecond(ms)2021-09-15 13:40... by Rkp_splunk Engager in Splunk Search 09-15-2021 0 1	0	1
I need help with my props conf to extract fields correctly. When I test the regex in both regex101 and using the rex command in the search bar and they parsed out the fields cor... by djreschke Communicator in Splunk Search 09-15-2021 0 1	0	1
Epoch Date format in reporting Hi ,i have 2 queries .(index=abc OR index=def) category= * OR NOT blocked =0 AND NOT blocked =2\|rex field=index "(?<L... by Susha Engager in Splunk Search 09-15-2021 0 2	0	2
Need help in extraction Hello all, I am tryin to extract only the highlighted from the below event, however I am failing to extract.Can you p... by srinivas_gowda Path Finder in Splunk Search 09-15-2021 0 2	0	2
IP FILTER Range HI please tell me how to write the query for the range of the IP ADDRESS Such assrc!=10.0.0.0/8 To src!=10.24.1.3 by mohdameen81 Observer in Splunk Search 09-15-2021 0 2	0	2
Filtering by 24h time in splunk I have a field timeofevent which contains the time at which the event was logged in 24 hour format.Format of timeofev... by priyangshupal Engager in Splunk Search 09-15-2021 0 5	0	5
Plotting Each element of a Json so my log lines look something like this<<METRIC-START>>{"A":332,"B":45,"C":67,"D":23,"E":234,"F":435,"G":43,"H":66,"... by rai4shambhavi Explorer in Splunk Search 09-15-2021 0 1	0	1
Remove partial duplicate in same field Hi everyone, I am trying to remove partial duplicate in the same field, but couldn't find a solution yet.For instance... by apache_strike Engager in Splunk Search 09-15-2021 0 1	0	1
Trying to determine min/max date/time for a list of ip addresses My search returns a table of a count of ip addresses that have hit our system in a given search period. I am trying t... by dbuckley669 Engager in Splunk Search 09-15-2021 0 3	0	3
Datamodel Search "Job terminated unexpectedly" Hello,I have a problem regarding a datamodel search.My datamodel consists of different boolean values with a span of ... by vsommer Explorer in Splunk Search 09-15-2021 0 6	0	6
ouputlookup not waiting for complete result set Hi there,I'm seeing a strange problem with version 8.0.8I have a search to build a lookup table one time only, which ... by charlesmeo Explorer in Splunk Search 09-14-2021 0 0	0	0
Join matching field of a Sub-Search Hello, I currently have a search over index_A that runs a sub-search from index_B looking to match a field (field_B) ... by epw0rrell Path Finder in Splunk Search 09-14-2021 0 0	0	0
How to group togeher the rows based on some field value in splunk I am having a search in my view code and displaying results in the form of table. small example result: custid Eve... by disha Contributor in Splunk Search 09-14-2021 1 6	1	6
Security Essential Mitre PDF Export - Failed Hi, I am trying to export PDF in Splunk Security Essential App --> Analytics Advisor --> Mitre ATT&CK Framework --> E... by alexspunkshell Contributor in Splunk Search 09-14-2021 0 0	0	0
Comparing / diffing 2 lookup tables Hello,I have 2 CSV lookups updating several times a day. One (A) is from CMDB with the entire list of assets (hostna... by oleg106 Explorer in Splunk Search 09-14-2021 0 1	0	1
Join different events with common values I've got some logs I need to join and put on the same row.I've tried a few different ways and searched the community ... by met Engager in Splunk Search 09-14-2021 0 6	0	6
Desperately need help with a java.lang.Exception when running a search against vix I see the following errors when running a search against data in a vix.We have recently upgraded to 8.1.3 when I assu... by Martin583 Explorer in Splunk Search 09-14-2021 0 0	0	0
Correlation sources in Search filter Role Access restriction Hi All,We have an index indexA, which gets data from multiple agencies agentA, agentB, agentC, and another index inde... by sujith_kumar New Member in Splunk Search 09-14-2021 0 1	0	1
sigma rules Hi there!Please allow me to admit, I'm newbie to splunk + sigma rules for detection.In my test environment, I have i... by splunk_u1 Engager in Splunk Search 09-14-2021 1 0	1	0
PROPS Configuration for XML source Hello,I have some issues writing PROPS configuration for XML source file. Sample XML events (2 Events) are given belo... by SplunkDash Motivator in Splunk Search 09-14-2021 0 2	0	2
Limit users searches to a most recent time I am looking for a way to limit user searches to only the most recent 30 days, specifically for SmartStore purposes. ... by _joe Contributor in Splunk Search 09-14-2021 0 5	0	5
Getting daily count and overall average Hello all, I'm trying to get the stats of the count of events per day, but also the average. ...\| stats count by... by Sam2 Explorer in Splunk Search 09-14-2021 1 7	1	7