Splunk Search

Community Activity

How to setup scheduled search to run after fulfillment of another? Hi! We have some searches on a dashboard that work way too long as they include several subsearches and calculate dat... by iKate Builder in Splunk Search 03-25-2021 1 7	1	7
Time from a search Hi All,I have a query like below.index="abc" host=xxx \| eval Indicator=if(state=="RUNNING", "10", "0") \| timechart sp... by mariamathewtel Explorer in Splunk Search 03-25-2021 0 7	0	7
Calculate total duration when many transactions are overlap in the time Hello dear community,help me on this issue please.When using the concurrency command to find out if transactions over... by wcastillocruz Path Finder in Splunk Search 03-25-2021 0 14	0	14
How can i search for two concatenated strings? I need to search for a string composed of the month - year in Italian.Example: "March-2021"If I enter "March-2021" in... by antonio147 Communicator in Splunk Search 03-25-2021 0 4	0	4
Splunk query working fine in search but not working in dashboard which has single display I have the below query which works fine in the 'Search' but when I take the same query to a dashboard which has panel... by vn50b7z Engager in Splunk Search 03-25-2021 0 3	0	3
help on rex command hello My field sounds like this 03/01/2019 07:10 0 MBAM CLIENT (2.5_64b) EN.$w$ And I need to catch everything after ... by jip31 Motivator in Splunk Search 03-25-2021 0 17	0	17
help on join command which truncate events HelloThe join comamnd below truncate events because I have results if I execute the ode before the join command but I... by jip31 Motivator in Splunk Search 03-25-2021 0 2	0	2
Compare two different values from two different periods I saw a few exampleshttps://community.splunk.com/t5/Splunk-Search/How-do-I-compare-search-results-from-two-different-... by exocore123 Path Finder in Splunk Search 03-25-2021 0 4	0	4
Sort Column Value in Table from Rex Field Hi,I'm trying to sort a value on a table from a rex field in Splunk Search. For instance, I have below value:DateHos... by bruceaperez New Member in Splunk Search 03-24-2021 0 5	0	5
Post-tstats manipulation I'm working to transition a traditional search to utilize accelerated datamodels my environment has available. My ori... by wilcompl1334 Explorer in Splunk Search 03-24-2021 0 0	0	0
Splunk script to update VA report weekly using lookup file I am running a search job to view Vulnerability results/data. The search runs every week Saturday evening. I want to... by aferns0804 Engager in Splunk Search 03-24-2021 0 3	0	3
Use the value of my first search in my second search (append) Hello, With Appendcols I now have both values in one line. However, I would like to compare the values with each othe... by exchanger Path Finder in Splunk Search 03-24-2021 0 2	0	2
How do I get a complete list of users logging into Splunk Enterprise & ES How do I get a complete list of users logging into Splunk Enterprise & ES. Please share SPL strings used. How to prep... by SamHTexas Builder in Splunk Search 03-24-2021 0 3	0	3
Time taken for a lookup vs Time taken for a KVstore Hi,I have a lookup file which takes some time to load (Look up has 19Lakhs data) - This lookup is used in a dashboard... by VijaySrrie Builder in Splunk Search 03-24-2021 0 1	0	1
resolving username from uid in a splunk query Greetings-I'm putting together a dashboard query that shows uid's and systems as a result. I would like to resolve th... by mullica1 Engager in Splunk Search 03-24-2021 0 6	0	6
trigger an alert if a process is taking more than the expected time Hi Splunkers,I have the below logs and trying to create an alert if a process run is taking more than the expected ti... by kranthimutyala Path Finder in Splunk Search 03-24-2021 0 1	0	1
Search for more than 1 url hit on a src_ip Hi I have this search here where I want to limit the results to only events that have more than 1 url hit on an src_i... by fdevera Path Finder in Splunk Search 03-24-2021 0 3	0	3
pass time filters from lookup to saved search or macro or search Hi team,I am trying to send earliest and latest time values from lookup to saved search but i am not able to get resu... by vinothn Path Finder in Splunk Search 03-24-2021 0 1	0	1
How to create a new lookup from my local machine to clustered environment using curl command? i have to upload the .csv file that gets generated on my local machine through a script to SH clustered environment u... by vn_g Path Finder in Splunk Search 03-24-2021 0 8	0	8
Append color values to field value I have a query result . i want to append the three colors based on values and the table is dynamic based on the tim... by Vignesh-107 Path Finder in Splunk Search 03-24-2021 0 1	0	1
Join two events and publish the fields Hi Everyone, I have two events like below on the same index though. I captured all fields through rex command but una... by rbachu1 Explorer in Splunk Search 03-24-2021 0 5	0	5
Consolidating data from different indexes into one table I have 4 applications integrated with each other - their names let's say A, B, C, D respectively. All these applicat... by jonthree Explorer in Splunk Search 03-23-2021 0 2	0	2
Statistics data in GB, MB values Hi Ninjas, I'm trying to make a table that should list date, domains, action_types, action_type_usage_in_MB, Domain_u... by jeganl Engager in Splunk Search 03-23-2021 0 2	0	2
Difference between outputs of same query as search and subsearch Noob here. Can anyone tell me why the following search:search sourcetype=srt \| table serialNumberwill give me a one-... by ebarnhill Engager in Splunk Search 03-23-2021 0 1	0	1
Creating a correlation search between two different indexes (DHCP and Firewall Data) Hi all- we want to get a bit more elegant with correlation searching between two different indexes. There seems to b... by daryllj Path Finder in Splunk Search 03-23-2021 0 2	0	2