Splunk Search

Community Activity

	Splunk and Azure SQL audit via Event Hub I'm not sure how to even troubleshoot this.A few weeks ago, we started a dropoff in events into splunk. We are send... by zippo706 Explorer in Splunk Search 04-14-2021 0 1	0	1
	How to collect data from lookup into index without overwriting Afternoon All,Have been playing with a search that will eventually become a saved search within Splunk ES. Idea is fo... by OiskyPoisky Explorer in Splunk Search 04-14-2021 0 8	0	8
	Splunk App for Windows - Missing Task Category, Type and windows_perfmon_details_collection Dear Siri've tried to implement the Splunk App for Windows . But i have some problems.1.Splunk add on for Microsoft W... by purple1229 New Member in Splunk Search 04-14-2021 0 0	0	0
	Which chart I can use to display stats My search query finding MAX, AVG response times of API. \| search ("API-1 call start" OR "API-1 response status*" OR "... by dyapasrikanth Path Finder in Splunk Search 04-14-2021 0 1	0	1
	Make a Chart by 2 fields Hi guys, I want make a chart with the value below. With IP is the separated line, and connections is the value, apach... by lnn2204 Path Finder in Splunk Search 04-14-2021 0 3	0	3
	Display only a particular key HiCan someone help me with the splunk query where i need to display only eapply as the key...\|eval key=mvindex(split(... by Nith1 Path Finder in Splunk Search 04-14-2021 0 2	0	2
	How to distinguish two similar strings Hello I have two similar strings that I need to differentiate. These are the key words in the String 1. Special 2 Sp... by Marco Communicator in Splunk Search 04-13-2021 0 2	0	2
	Check event count before running stats? I have a query where it runs a certain summary query every 15 minutes in a bucket. However, there are fairly frequent... by exocore123 Path Finder in Splunk Search 04-13-2021 0 2	0	2
	How to execute conditional DNS lookup in a search? The problem I am trying to solve is the following: if src_hostfield is missing, null or empty, add it to events by pe... by asieira Path Finder in Splunk Search 04-13-2021 0 2	0	2
	Combining 2 Queries Using Same Field I have two queries. One gets the total number of events using the message field: index=my_index sourcetype=my_sourcet... by PaintItParker Explorer in Splunk Search 04-13-2021 0 2	0	2
	Text input field Hi,In my dashboard i have set of inputs and when i submit the values gets stored in a lookup file. 2 dropdowns , 1 mu... by chuck_life09 Path Finder in Splunk Search 04-13-2021 0 1	0	1
	Multiselect input Hi,In my dashboard i have set of inputs and when i submit the values gets stored in a lookup file. 2 dropdowns , 1 mu... by chuck_life09 Path Finder in Splunk Search 04-13-2021 0 3	0	3
	group search results by hour of day Hi splunk community,I feel like this is a very basic question but I couldn't get it to work.I want to search my index... by gerbert Path Finder in Splunk Search 04-13-2021 0 2	0	2
	Correlation of two searches Good day Community,I would like to know what is the best approach to filters events based on previous query. My preci... by Habanero Explorer in Splunk Search 04-12-2021 0 4	0	4
	Don't execute rest of commands if there is no events from base search? HiOur client have the next (kind of query) runs as a schedule. It can found events or not, based on current situation... by isoutamo SplunkTrust in Splunk Search 04-12-2021 0 3	0	3
	Jump multiple links at the same time Hello everyone,I am now editing the pie chart section of the dashboard, I want to add a list of URLs to let click imp... by yaoyed Engager in Splunk Search 04-12-2021 0 0	0	0
	SPL for Wrong Written Searches Hi,I have a problem about wrong written searches. In our system, there are so many users. Every user will be able to ... by onur Explorer in Splunk Search 04-12-2021 0 1	0	1
	AND OR Boolean Operators Hello, I have a small dilema around AND OR boolean operators. I dont want null time logs for event=timeOut, but at th... by MeMilo09 Path Finder in Splunk Search 04-12-2021 0 2	0	2
	Replace String Values Hello,I need to remove the values found (string) from another field.Ex. FIELD1 - abcmailingxyzLIST - mailing, ...Usin... by genesiusj Builder in Splunk Search 04-12-2021 0 7	0	7
	Heavy Forwarder Selective forwarding Hey all. I need help to selective forward (on a HF) from a log file that is being monitored by a UF. I only need to f... by Adevill Loves-to-Learn Lots in Splunk Search 04-12-2021 0 13	0	13
	What is the best method to search for different time ranges for 4 different sourcetypes using earliest? I'm creating a query using 4 sourcetypes and want to search across different timerange for them. For example:\| multis... by Avantika07 Observer in Splunk Search 04-12-2021 0 4	0	4
	eval used with stats command returns 1/0 instead of true/false According to the splunk doc , eval can be used within aggregate functions with stats command like: index=main sourcet... by splunkuser1948 Engager in Splunk Search 04-12-2021 0 2	0	2
	not able to merge 2 queries to get the desired result I have 2 queries1st is \| rest /services/data/indexes\| fields title\| dedup title\| table titlethis query is giving me a... by vinitpathri Path Finder in Splunk Search 04-12-2021 0 4	0	4
	Find stats from 2 events We have 2 eventsOTP generated through SMS with UUID=123123OTP generated through EMAIL with UUID=432432OTP Verified f... by dyapasrikanth Path Finder in Splunk Search 04-11-2021 0 3	0	3
	Notable event index is empty. Hello everyone.I am trying to deploy ESS, but I having some trouble with the notable events.I can not see results at ... by gl_splunkuser Path Finder in Splunk Search 04-11-2021 0 2	0	2