Splunk Search

Community Activity

memory SH cluster Hello! I ran out of memory for the search head located in the cluster. The status is "AutomaticDetention". Is it poss... by gitingua Communicator in Splunk Search 04-05-2021 0 1	0	1
How to efficiently calculate max events per second (eps) by hour over long timeranges, like 30 days? I could count against the raw data but it takes a long time. How can I more efficiently count on such stats? by the_wolverine Champion in Splunk Search 04-04-2021 2 3	2	3
How to dynamically compare and come up with new fields Using the extract function, I can arrive with the below columns: I need to compare the values, and come up with a... by yoshilog Explorer in Splunk Search 04-04-2021 0 4	0	4
Using a resulting time from one query as the latest time in another query Hello!I am having trouble with a query where I want the results to depend on the time results of another query. This ... by Traer001 Path Finder in Splunk Search 04-04-2021 0 1	0	1
Why use eventstats and stats together? Hello,I have seen eventstats and stats used together, but I’m not clear on why and when the use of the mentioned woul... by luna Explorer in Splunk Search 04-04-2021 0 2	0	2
Chart Percentage Issue Percentage is miscalculated Hello Splunk Community, Here is my code and explanation of the issue below:I am having a very annoying issue that I c... by Mary666 Communicator in Splunk Search 04-03-2021 0 3	0	3
How to replace hostnames with own names When i use below query i can see multiple servers in the index.Index=abc sourcetype=vmstat (host=windows1* OR host=... by svalivarthey New Member in Splunk Search 04-03-2021 0 1	0	1
How To Get First and Last Events within a Set of Events Hi, I'm having trouble grabbing the first event of a specific type and the last consecutive event after that with the... by Traer001 Path Finder in Splunk Search 04-02-2021 0 1	0	1
Splunk REST API Hi Splunkers!!I'm working with a team where they have to access to one of the saved search results through Splunk AP... by revanthammineni Path Finder in Splunk Search 04-02-2021 0 7	0	7
Is it possible to hide the filed value for one index but keep it for the other index? Hey Guys, I am new to Splunk, and want to know if there is an easy way of hiding the value of one filed from one inde... by MeMilo09 Path Finder in Splunk Search 04-02-2021 0 1	0	1
Find the duration between two events Hello,I need to find the duration between two events. I went over the solutions on Splunk, but still can't get the ca... by luna Explorer in Splunk Search 04-02-2021 0 2	0	2
splunk search {<!-- -->Exams : { “Message” : “Passed in Maths paper 1 exam” ,”Result”:”Passed”, ’Name’ : “s3”}SubjecctName:Passed-Maths-Sem... by satheesh121 Observer in Splunk Search 04-02-2021 0 6	0	6
Find Job Duration from two separate events. Jobs Running on daily basis.Events like-1) "Job_Name": "XYZ", "status":" Start"2) "Job_Name": "XYZ", "status":" SUCCE... by saty586 Explorer in Splunk Search 04-02-2021 0 1	0	1
How to update geoip database for iplocation command? Hello, I use Splunk's iplocation (not Maxmind or other) command extensively in our monitoring dashboards. Since thi... by echojacques Builder in Splunk Search 04-02-2021 8 20	8	20
Find highest and lowest salary taker employee Hi i need to find the name employee name who are taking high salary and low salary. please help in thisField Names:Mo... by SA2 Explorer in Splunk Search 04-02-2021 0 4	0	4
Industry standard salary expectation is year of experience * 1.5. Find out employees who are all not matching these crit HiI need to count the employee numbers who are not match with experience*1.5. i tried lot with eval and where command... by SA2 Explorer in Splunk Search 04-02-2021 0 1	0	1
Bar chart comparing 2 values Hi,I have this stats tableColumn1 Column2400 500 I want to have a bar chart which shows 2 bars s... by SS1 Path Finder in Splunk Search 04-02-2021 0 1	0	1
Multivalue fields match issue Hi,I have below sample dataset. This dataset is for an asset being compliant or not compliant. What I need is:If an a... by mbasharat Builder in Splunk Search 04-01-2021 0 1	0	1
rex extract Value session_value containg this info:not found, name: user@mycompany.com more text here Trying to use this:rex fiel... by jenkinsta Path Finder in Splunk Search 04-01-2021 0 1	0	1
JSON vector of vector I have a data source which I collect using DB CONNECT from an oracle database which brings the information in JSON fo... by splunkcol Builder in Splunk Search 04-01-2021 0 6	0	6
What causes delayed searches alerts in Splunk Enterprise - Error says "searches delayed" What do I need to check / do to resolve this please?What causes delayed searches alerts in Splunk Enterprise - Error ... by SamHTexas Builder in Splunk Search 04-01-2021 0 8	0	8
Rex Command with multiple formatting options Trying to get the rex command to extract the last name when the user field has multiple formatting outputs below. Is ... by Dude Engager in Splunk Search 04-01-2021 0 3	0	3
Grouping data by multiple attribute values I have basic web logs with username and jsessionid. I want to group (assume a single index, with one set of data). So... by alphadog00 Splunk Employee in Splunk Search 04-01-2021 0 7	0	7
Querying Events in Splunk for MS vs MS Add-on for splunk I'm sending data from Azure SQL via event hub. Been using the MS add on for splunk, which as been working pretty we... by zippo706 Explorer in Splunk Search 04-01-2021 0 0	0	0
How to use rex in Calculated Fields? Hi, I'm new to this forum and Splunk in general, so thank you in advance for all your help. I'm trying to use rex in... by mmagnuson Engager in Splunk Search 04-01-2021 0 4	0	4