Splunk Search

Community Activity

tstats, no using stats-function-field, using row-field. Hi, I use tstats, but tstats use required argument ( stats-func ).I want to write SPL.\| tstats summariesonly=t <field... by nasha430 Explorer in Splunk Search 06-03-2021 0 7	0	7
Creating a table that includes a column for date/time of an event Hello! I'll try to keep things as brief and concise as I can, but what you need to know is that I'm currently buildin... by Kuronoa New Member in Splunk Search 06-02-2021 0 1	0	1
Dockerized Splunk Time Zone Forced to UTC I'm having an issue with dockerized splunk post 8.1.3 free. The timezone in the web interface remains as UTC. With 8.... by raidercom Communicator in Splunk Search 06-02-2021 1 1	1	1
Replace placeholders in message templates with property values We are importing structured logs stored as json lines in a text file. An example event:{ "time": "...", "template": "... by nathanjr Engager in Splunk Search 06-02-2021 0 2	0	2
Multiple stats count logic I have an alert which tirggers on following:index=xxx sourcetype=xxx_cdr_event host=at \|search cause_code IN (500... by ainu77 Loves-to-Learn Lots in Splunk Search 06-02-2021 0 0	0	0
DAG error in dashboard panel but not in regular search I have a query that runs completely fine in the regular search but when it is added to a dashboard in the same app it... by klim Path Finder in Splunk Search 06-02-2021 0 0	0	0
How can I add a summary row to a table in Simple XML How can I add a summary row to a table in Simple XML? By summary row I am referring to what is described here, i.e. a... by helge Builder in Splunk Search 06-02-2021 2 18	2	18
URL proxy block with high counts and recurring on a host Hello, i have a spike which comes from A URL being constantly blocked by proxy. I need help with a query on finding ... by brizzoh20 Observer in Splunk Search 06-02-2021 0 0	0	0
splunk query with if condition Hi Teami want to display the success and failure count for that i have only one field i.eb_failed="false"using this i... by Nith1 Path Finder in Splunk Search 06-02-2021 0 2	0	2
Show multi values Hi, i am a beginner.I have 2 sourcetype (table). One of conatins requirement_id other ones conatins Testcase_id and r... by kig121 Loves-to-Learn Lots in Splunk Search 06-02-2021 0 2	0	2
'host' field being populated automatically when indexing a report I have a report that is getting events from an existing index, processing the data and indexing again to another cust... by denissotoacc Path Finder in Splunk Search 06-02-2021 0 3	0	3
Avoid streamstats truncate to obtain previous value I have a index with the follow data:KEY_ID, GROUP, DATEWith for example:1, group1, 2021-06-011, group2, 2021-06-022, ... by DanielSp Explorer in Splunk Search 06-02-2021 0 2	0	2
Need to add Additional panel with total? Hello "Good Day"I am trying to add the extra column for totals. If you observe above picture, I have four counts of ... by renuka Path Finder in Splunk Search 06-02-2021 0 5	0	5
Drilldown close button i have a table with multiple values, and on click of any of the value, an inline panel opens (using depends option) v... by akankshayadav Path Finder in Splunk Search 06-02-2021 0 7	0	7
Instead of using Job Manager, rest call to kill/stop all running current adhoc jobs for one user? Does anyone know of a rest call that can be used to kill all adhoc queries for a user? I do not wish to all users se... by john_glasscock Path Finder in Splunk Search 06-01-2021 0 1	0	1
Searching for data from different log files with similar field names Hi,I'm new to Splunk here... I have a local instance of Splunk Enterprise on my local machine where I've created a d... by william_choo Explorer in Splunk Search 06-01-2021 0 2	0	2
Need to exculde data in search by using lookup data Hello All"Good Day"index="aedc"\| rex field=source "-_(?<source>\S+)"\| rex "(?<ModuleID>MY\d+)"\| rex "(?<Path>/F.\s\S+... by renuka Path Finder in Splunk Search 06-01-2021 0 0	0	0
How To Exclude Events from Transaction if there is Time Gap Larger than X Hello,I am creating transactions for the earliest instance of a location being reserved and that location being relea... by Traer001 Path Finder in Splunk Search 06-01-2021 0 8	0	8
How to get duration for the product A in 2 occurrences ? So what I have now from my search so farProduct Status TimeA Start 8.00 AMA ... by moinyuso96 Path Finder in Splunk Search 06-01-2021 0 2	0	2
Add field post stats and transpose commands Hi, I want my data presented in a very specific way, which means I can't go the typical route of just adding the fiel... by ebs Communicator in Splunk Search 06-01-2021 0 4	0	4
Hi, can you help me?? How can I do Three search in the same query, but the results separate for a week How can I do Three search in the same query, but the results separate for a week (the results of last 4 weeks), and t... by DavidRojas Engager in Splunk Search 06-01-2021 0 2	0	2
Inputs.conf blacklist with a negative regex Hello, I need to create a whitelist with the blacklist. I mean... I have three blacklist in the windows security i... by rafadvega Path Finder in Splunk Search 06-01-2021 1 4	1	4
Using Regex to break down a string Hello guys I hope you are all having a great weekI work in a hotel chain and we provide transportation services, but ... by cindygibbs_08 Communicator in Splunk Search 06-01-2021 0 2	0	2
Merging events from two indexes I would like to create a dashboard to query the logs of our two firewall devices (paloalto and sns). Both has their o... by corti77 Contributor in Splunk Search 06-01-2021 0 3	0	3
Iterate over lookup table to perform replace on search field I am trying to use a lookup table to perform a series of string replacements on a single field in a search resultThe ... by wanderson8 Engager in Splunk Search 06-01-2021 0 4	0	4