Splunk Search

Community Activity

replace function for eval token problem Hi Splunkers, I was stuck with cutting the part of string for drilldown value from a chart using the <eval token>. S... by evelenke Contributor in Splunk Search 06-26-2021 0 3	0	3
inserting newline, tab into eval-ed field Running\| makeresults \| eval s="foo\nbar" displaysfoo\nbarand it is unclear if the variable has a newline or just cont... by gliptak Explorer in Splunk Search 06-26-2021 0 4	0	4
SNMP bandwidth using foreach Hello everyone,I am new to Splunk and learning the ropes. I am stuck on a query I am trying setup. I have SNMP data c... by IcyPenguin Loves-to-Learn Lots in Splunk Search 06-25-2021 0 0	0	0
How to join multiple events based on one common value with different filters? Hi,I've written a query query below which joins 2 different event types from same source with different filters.sourc... by Sentira Explorer in Splunk Search 06-25-2021 0 8	0	8
Can I Show Data Values on a Specific Field? Hi,I have a column chart with multiple overlaying fields (see blue orange and yellow lines below). Right now i am dis... by yvassilyeva Path Finder in Splunk Search 06-25-2021 0 0	0	0
splunk props timestamp issue I have a CSV file with the below data, trying to push to Splunk.Example - Thu JUN 24 15:27:52 +08 2021,name1,address... by kirrusk Communicator in Splunk Search 06-25-2021 0 1	0	1
How to check for the same values in a field and replace another field with specific text So currently i have:\|Name \| Branch \| Age-------------------------------------... by FyazIkram834 Engager in Splunk Search 06-25-2021 0 6	0	6
Monitoring Searching of Sensitive Data Is there a way to monitor the searches for some specific fields?Let's say I wish to monitor if anyone is running any ... by pagnihot Path Finder in Splunk Search 06-25-2021 0 2	0	2
How to join 2 searches from 2 different sourcetypes I am encountering problems joining 2 querries that are getting values from 2 different sourcetypes.I would like to ge... by ookamidono Explorer in Splunk Search 06-25-2021 0 3	0	3
How to Grab Variance Hello,I am ingesting files containing host and ports for each host.For each Source (FILE) The Nodes(host) and ports ... by a_n Path Finder in Splunk Search 06-25-2021 0 2	0	2
I want to get error logs counts from windows event logs from multiple servers. I want to get error logs counts from windows event logs from multiple servers.Want to create a separate dashboard whe... by bhavinsatwani65 New Member in Splunk Search 06-25-2021 0 5	0	5
How can I split an event into a varible number of events? Hello,I have a directory structure which i want split up in separate events.For example\MAIN\SUB1\SUB2\SUB3\file.xlsx... by hvdtol Path Finder in Splunk Search 06-25-2021 0 4	0	4
Query to find top 10 indexers w.r.t index max allocated storage. Kindly help me out with Query to find top 10 indexers w.r.t index max allocated storage. by Tejesh Observer in Splunk Search 06-25-2021 0 0	0	0
It is truncated subsearch. tstats command. Hi.I have one problem. It is truncated subsearch result. index="test-index01" sourcetype="test_sourcetype" user="*"... by nasha430 Explorer in Splunk Search 06-25-2021 0 1	0	1
How to extract and aggregate by extracted fields Hi I have the data that looks like thisuser, ip, (metrics kv pairs)---- sample results for search -- user=user1,ip=10... by ashriram Engager in Splunk Search 06-25-2021 0 4	0	4
How to get searches to run in Smart or Verbose mode when selecting "Open In Search" from a dashboard panel? All my dashboards panels, written in Simple XML, default to Search Mode "Fast" when the "Open In Search" icon is sele... by franks59 Explorer in Splunk Search 06-24-2021 1 4	1	4
props file not recognizing time field Hi All,I have a CSV file with the below data, trying to push to splunk. Example - Thu JUN 24 15:27:52 +08 2021,name1... by kirrusk Communicator in Splunk Search 06-24-2021 0 2	0	2
How to compute the field value a time interval earlier? I want to compute the change in temperature for each location in a given interval, say, 15 minutes, or 30 minutes. I ... by yshen Communicator in Splunk Search 06-24-2021 0 0	0	0
Field Extraction - Multi Line Text Comma Separated Hello,Hoping someone can help with a Field Extraction question regarding multi line text and capturing a specific val... by Razziq Explorer in Splunk Search 06-24-2021 0 2	0	2
How To Pass Parameters to Saved Search Using Splunklib Hello,Does anyone know how to pass parameters to a saved search using the splunklib for the Splunk API?I am able to u... by Traer001 Path Finder in Splunk Search 06-24-2021 0 0	0	0
How do I extract value from stats list I want to extract count from list (picture 1 ) to table (picture 2) How do I do? \|stats count by Name,severity ... by apichai32356 Explorer in Splunk Search 06-24-2021 0 4	0	4
Bar chart width resize in Simple XML Hello, I have created a vertical bar chart using Simple XML, My requirement is to fix the width of all the bars. I ... by dinesh_wadhwa Engager in Splunk Search 06-24-2021 0 2	0	2
Ignore if a certain string is present in the next X min Hi, I am working on a search that looks for instances of "string1", but only those that are not followed by instances... by grasshopper_ Loves-to-Learn in Splunk Search 06-24-2021 0 3	0	3
Error in 'IndexScopedSearch': The search failed We're trying to run a search but are getting these errors while doing so:3 errors occurred while the search was execu... by msmith12 Engager in Splunk Search 06-24-2021 0 0	0	0
inputlookup special fields Hello,I have recently found there is a strange difference between lookup and inputlookup commands. \|makeresults \| eva... by acadea Explorer in Splunk Search 06-24-2021 0 4	0	4