Splunk Search

Community Activity

I want to calculate a difference between count columns and want to project the growth in the number of messages each mon Here's my query and I want to calculate the difference between count (_raw) each month . It would be a running column... by dhruvin24 New Member in Splunk Search 08-04-2021 0 2	0	2
Error message when running a subsearch after upgrading to Splunk 8.0.4.: "StatsFileReader file open failed file". Hi all, Upon a recent upgrade to Splunk 8.0.4, I started seeing this error message when running a subsearch against a... by damiensurat Contributor in Splunk Search 08-04-2021 0 1	0	1
Json timestamp miliseconds Hi, hello,Splunk is not showing up miliseconds for JSON logs. I have find some Questions and Answers here in splunk c... by Jakub Explorer in Splunk Search 08-04-2021 0 2	0	2
map value not passing Hi,I have a query which returns around 4000 results and I want to run map query for all that 4000 results. This is th... by himanshu_mps Loves-to-Learn Everything in Splunk Search 08-04-2021 0 0	0	0
Regex field extraction Hello all,I have one sourcetype that does not allow me to create a static field extraction, because we have several f... by nmsaraujo Explorer in Splunk Search 08-04-2021 0 4	0	4
PROPS Conf-Time_FORMAT and TIME_PREFIX Hi,How would I write Time_FORMAT and TIME_PREFIX for my Props Conf file for the following sample events. Any help wil... by SplunkDash Motivator in Splunk Search 08-03-2021 0 3	0	3
empty fields in a table why does Splunk display empty fields in the table even though there are values there by gagareg Explorer in Splunk Search 08-03-2021 0 5	0	5
using rex inside map search index=error sourcetype=error_log "Retry counter reached"\| makemv delim="=",values\| dedup errId\| table errId \| ... by a2021cdev Observer in Splunk Search 08-03-2021 0 3	0	3
Counting duplicates when filed equals value I have the following scenario where duplicate accounts has been created for a transaction id value. I would like to c... by alwinaugustin Engager in Splunk Search 08-03-2021 0 1	0	1
Having trouble creating an embed for a report, AJAX call getting a 404 response Hi Splunk community,I am having trouble creating an embed from a saved report. The website is throwing a 404 error w... by benjamin_c_adam New Member in Splunk Search 08-03-2021 0 0	0	0
TA-webtools How do you format an array using TA-webtools GET? Trying to filter the get response using an array. severity=Critic... by coreyCLI Communicator in Splunk Search 08-03-2021 0 1	0	1
Add row in table if value not present in the field I have a table output from Splunk Query(Not posting original values of table due to sensitive data)Col_A Col_B Col... by ngautam760 Engager in Splunk Search 08-03-2021 0 3	0	3
"Page not found" when trying to search through REST API Hello everyone!I receive "Page not found" message when I try to search using REST API.My URL: [splunkhost]/en-US/serv... by dzkashlach Engager in Splunk Search 08-03-2021 0 2	0	2
Splunk Es Hi Splunkers.Could anyone give me some info on what kind of attacks I can work on based on Linux and Windows logs. I'... by revanthammineni Path Finder in Splunk Search 08-03-2021 0 1	0	1
Required Regex Hi Team,I will be getting below text randomly in logs, I need a regex for the 1st IP's separately & 2nd IP's separate... by SabariRajanT Path Finder in Splunk Search 08-03-2021 0 2	0	2
How to encode a URL for a Hipchat notification alert action if there is no urlencode() function? Hi all, I have a Splunk alert configured to send Hipchat notifications. My goal is to have a link in the search to g... by floriancoulmier Engager in Splunk Search 08-03-2021 3 12	3	12
Date Calculation (Negative Display) I have a query where in I am subtracting 2 dates from the current time. While my query works, I have noted that if t... by willadams Contributor in Splunk Search 08-03-2021 0 2	0	2
Removing some field values from a mulitiple value field hello,I want to remove the string in field_2 from field_1.I want it to be like the value in the result field.Like a l... by youngrap Explorer in Splunk Search 08-03-2021 0 2	0	2
compare two fields with against other field not in order Hi I'm trying to compare two fields against one field, can anyone please suggest how can I achieve this.Cluster ... by kirrusk Communicator in Splunk Search 08-03-2021 0 3	0	3
Calculate time taken from each failed task to next successful task(MTTR) from a list of tasks Hello all,I have a dashboard and the source is json files.{<!-- -->"ID": "123","TIME": "Jul 11, 2021, 08:55:54 AM","STATUS": ... by anooshac Communicator in Splunk Search 08-03-2021 0 10	0	10
join three queries Hi All, In Splunk is it possible to join two joint queries. I have queries like 1)index=_inter sourcetype=project \| d... by kirrusk Communicator in Splunk Search 08-02-2021 0 1	0	1
DC of users per 5 mins with Kbps calculation Hi all,I have been using Splunk for about 2 days, so am VERY new. I'm trying to get a utilization number for endpoin... by a277437 Explorer in Splunk Search 08-02-2021 0 5	0	5
Subnet monitoring Hi, I want to monitor the subnet 172.30.0.0/24 through splunk, which IP address is used and which is not. Whenever ne... by Whyruss Explorer in Splunk Search 08-02-2021 0 6	0	6
event for given time window on each date I would like to get event count for a particular time period for each day for a given date range (that I will select ... by PUNSNYC New Member in Splunk Search 08-02-2021 0 1	0	1
Enum for non numerical values I have a non numerical field (text), and I want to create an enum field. Meaning that I will have a new field with nu... by ndd Engager in Splunk Search 08-01-2021 0 5	0	5