Splunk Search

Community Activity

What is the difference between earliest=-5min and earliest=-5min@min What is the difference between earliest=-5min and earliest=-5min@min by aaa2324 Explorer in Splunk Search 04-07-2021 0 1	0	1
Splunk query to list all the unused printers from an print server. Team,I have been using this below commands to verify whether particular print queues have printed from the print serv... by sanketas New Member in Splunk Search 04-06-2021 0 1	0	1
display rows between 2 searches Good morning, suppose I have the following entries in my file :BEGIN abcdefEND;BEGIN xyzEND;***I want to search for t... by splunkpaterd2 Explorer in Splunk Search 04-06-2021 0 6	0	6
Issue using sort command with inputlookup command I have a lookup file with 3 fields - source, status, timestamp. Timestamp is saved as per below:eval timestamp=strft... by sdkp03 Communicator in Splunk Search 04-06-2021 0 5	0	5
how to map over or assign variable to a list of values We need to run the same query over a list of values (10k to 100k) without knowing the exact key across various indexe... by alancalvitti Path Finder in Splunk Search 04-06-2021 0 5	0	5
Extract logs for specific host in cold buckets Hello, I need to move old logs for a specific logsource(host) to be indexed in another splunk cluster. When I use the... by adidibra Engager in Splunk Search 04-06-2021 0 0	0	0
Error message while searching from the search head Hello,I am getting the following error while searching in splunk.Could not load lookup=LOOKUP-cisco_pix_severity_look... by adidibra Engager in Splunk Search 04-06-2021 0 2	0	2
How to Use Transaction to Retrieve Groups of Events Hi all, I'm trying to use a transaction to get multiple pairs of events (the selection and release of a node). So I h... by Traer001 Path Finder in Splunk Search 04-06-2021 0 4	0	4
how to rearrange the table/chart layout Hi, I have:index=............\|stats avg(test) by OrderNr Sub_OrderNrBut I want to something like this:OrderNr S... by zoe Path Finder in Splunk Search 04-06-2021 0 1	0	1
Excluding Messages With Custom Field Matching List of Values I'm tasked with auditing syslog messages from some network devices for suspicious activity. I can use the IN operator... by deees New Member in Splunk Search 04-06-2021 0 1	0	1
How to print a splunk variable? How to print a splunk default variable in search query? Actually I have two variables like $job.earliestTime$ and $jo... by satyajit7 Explorer in Splunk Search 04-06-2021 0 4	0	4
Get customer ID form logs I have a log of the form"Associated integration for customer AAA is Integration{id=1865, clientID}, carrying out deac... by bharat149 Explorer in Splunk Search 04-06-2021 0 1	0	1
Query for exclude words in a raw data Hello!As shown in the below picture, those are the events with a timestamp. I want when a "Kafka" service or "Jps" se... by phanichintha Path Finder in Splunk Search 04-06-2021 0 14	0	14
How to query an automatic lookup Hi Guys, How can I query an automatic lookup? Now, this is not the fields created through an automatic lookup, but t... by luna Explorer in Splunk Search 04-05-2021 0 1	0	1
'Error in 'fit' command' when using Machine Learning Toolkit Hi Community,I encountered the following error message when using the ML Toolkit:'Error in 'fit' command: Invalid mes... by ronaldtan1993 New Member in Splunk Search 04-05-2021 0 0	0	0
Is automatic new line insertion deprecated? A convenience feature was introduced in 7 (well I noticed it in a Splunk 7 installation and not in 5 and 6) that auto... by yuanliu SplunkTrust in Splunk Search 04-05-2021 0 1	0	1
Search events - remove events matching certain values on 3 fields Currently search will display events with "Rejected" File Status, but if this Rejected file gets fixed and then is "D... by Dirkoh Engager in Splunk Search 04-05-2021 0 3	0	3
How to Use IF or Case condition Hi,My logs are in following format:{[-]logger: .......message: ..........severity: Error}{[-]exception: .........logg... by alex5441 Explorer in Splunk Search 04-05-2021 0 3	0	3
How to get last weekday of last month and check logs for an date field in the logs having that value I have something that runs every day but i need to see it only for previous EOM which is also a weekdayI have a field... by ashutoshwalke Explorer in Splunk Search 04-05-2021 0 6	0	6
How to get environment in customized order How can I sort so that I can get the Stage_INT 1st and others after that and below is the output image. Can someone p... by Engineer_Zen Observer in Splunk Search 04-05-2021 0 1	0	1
Conditional drilldown Hi..I have a table(panel 1) with the below columns..Col_A Col_BAnd based on the values of Col_B i will have to create... by prettysunshinez Explorer in Splunk Search 04-05-2021 0 2	0	2
Search using lookup Hello, I have two indexes to which I need to compare the source ip and if it is the same, show me a message like true... by splunkcol Builder in Splunk Search 04-05-2021 0 4	0	4
Splunk ITSI Maintenance Window Hello,I need to enable alert suppression during maintenance window in splunk ITSI. I have correlation searches where ... by vijaybaskarss Loves-to-Learn Lots in Splunk Search 04-05-2021 0 0	0	0
How to calculate the index size from all indexers Is there a way to calculate total size of an index from all indexers? I can see index size from each individual index... by adityapavan18 Contributor in Splunk Search 04-05-2021 2 21	2	21
To get the greatest value for each day and graph it for a week Hi,Can you please assist with the query to get the greatest value (for one field) on that day and graph the data for ... by dinumayu Observer in Splunk Search 04-05-2021 0 1	0	1