Splunk Search

Community Activity

Calculate time server CPU above alert percentage Hi,I need to track the number of times and duration where the CPU used percent is above a threshold number.The search... by timrich66 Communicator in Splunk Search 07-30-2021 0 0	0	0
csv lookup for search query based on continuity and 7-day condition Hi Splunk Experts, I wonder if you could help me putting the below logic in to a search query?Here the link reference... by longmen Path Finder in Splunk Search 07-30-2021 0 21	0	21
Splunk chart select zoom & reset zoom permanent Hi All..Is there a way to keep the in chart zoom & pan option button to keep visible even on zero zoom selection by mvishal Explorer in Splunk Search 07-30-2021 0 0	0	0
Comparing data between rows and show only needed result Hi Splunker I'm quite new to splunk. Can you please help me out on this search?I have a table of antivirus database v... by flukey Engager in Splunk Search 07-30-2021 0 2	0	2
Pass a token to regex or pass a field to regex I am extracting a list of free text string in the _ raw and creating a new field.The list of terms comes from user in... by spicy Path Finder in Splunk Search 07-29-2021 0 4	0	4
Splunk search with regex Hi everyone, I got lots of the blow _row after the search:........2002-02-22 17:32:15.592 somedatainformation ==> ASH... by ss394546910 Engager in Splunk Search 07-29-2021 0 1	0	1
Splunk rest curl query fails to execute on the successive attempts with the session key authorization First attempt creates the splunk SID, but fails on the successive attempts to create search id. Same issue occurs whi... by sathishraja92 Explorer in Splunk Search 07-29-2021 2 1	2	1
How to find deltas greater than 5 skipping over rows that are different Hello!Sample data:VehicleHour of Daycountdelta(count)car1115--car1120-5car11333car21196car2125-4car31150car31250car31... by michaelsplunk1 Path Finder in Splunk Search 07-29-2021 0 1	0	1
Add column to New Search window In new search window (image attach) There are to column "Time" "Event" How can I automatically(not write each time in... by hoko_joni New Member in Splunk Search 07-29-2021 0 1	0	1
How to get the value from the json file using regex? Hi all,I have a multiple json files. The format is like as below.{<!-- -->"ID": "123","TIME": "Jul 11, 2021, 08:55:54 AM","ST... by anooshac Communicator in Splunk Search 07-29-2021 0 4	0	4
Find difference between numerical values in a Multivalue field Hi,As mentioned in the subject, I wanted to perform a simple subtraction operation on individual values/elements with... by jaysonpryde Path Finder in Splunk Search 07-28-2021 0 2	0	2
Stats format help Hi,I have below output with my search, base search\| stats count by User, actionUseractioncountAlexinstall3Alexuninsta... by SS1 Path Finder in Splunk Search 07-28-2021 0 1	0	1
Search Using Lookup with Multiple Search Terms for the Same Field Hello All.I am trying to use a lookup to perform a tstats search against a data model, where I want multiple search t... by stauff Explorer in Splunk Search 07-28-2021 0 2	0	2
How to extract a seconday date/time? I have a scripted input created to monitor certificate expiration.An example event:Tue Jul 27 12:07:55 CDT 2021,/opt/... by Stefanie Builder in Splunk Search 07-28-2021 0 3	0	3
Count by start of string I have an query thatindex ="main" \|stats count by Text \|sort -count \| table count Textresults:countText10dog fish20 ... by kooojo Engager in Splunk Search 07-28-2021 0 3	0	3
Remove start of result I have an query thatindex ="main" \|stats count by Text \|sort -count \| table count Textresults:countText10b'dog fish20... by kooojo Engager in Splunk Search 07-28-2021 0 1	0	1
Search a two messages from 6 hosts and show top 6 results HiI am trying to search two strings in message like "Stopped successfully" and "connected" from 6 host names.Please h... by sandeepparcha44 Explorer in Splunk Search 07-28-2021 0 9	0	9
Find incommon values within two Inputlookups without JOIN / Search NOT Hello,I have a search where I need to combine two inputlookups to find incommon values in a field they both have. The... by moonie Explorer in Splunk Search 07-28-2021 0 4	0	4
combine result foreach HelloI have a auditd search like type=EXECVE msg=audit(16): a0="sendmail" a1="-t"I would like one field with any fiel... by kevin94120 Explorer in Splunk Search 07-28-2021 0 11	0	11
Adding Integers/numerical data in 2 multivalue fields to a new field Hi All,I think the subject of my questions says it all... I wanted to add numerical data from 2 multivalue fields, an... by jaysonpryde Path Finder in Splunk Search 07-27-2021 0 13	0	13
Compare on field values with another field values HelloI want compare one field values with another when I tried to compare it is coming in this format as shown in bel... by renuka Path Finder in Splunk Search 07-27-2021 0 10	0	10
Calculate hourly usage from Machine data Hi, I have uploaded a JSON data from one of my APM tools into Splunk to get some meaningful insights. The events are ... by shashank_24 Path Finder in Splunk Search 07-27-2021 0 3	0	3
% failures for same index Need help with a Splunk query to display % failures for each day during the time range selected, for same index but ... by VS0909 Communicator in Splunk Search 07-27-2021 0 1	0	1
How to specify a timezone in a datamodel Is there a way to specify a timezone in a datanmodel?I have an eval field called date relying on Splunk's _time field... by ebs Communicator in Splunk Search 07-27-2021 0 2	0	2
count number of arguments in bat file I'm trying to count of the number of occurrences / frequency /variations of arguments appearing for a bat file. For e... by thaitran2021 New Member in Splunk Search 07-27-2021 0 2	0	2