Splunk Search

Community Activity

how to track if a transaction is taking more time with non real time alert Hi Splunkers,we have a transaction which runs for every 4hours and usually take 5mins to complete.Im trying to set up... by kranthimutyala Path Finder in Splunk Search 03-23-2021 0 1	0	1
Populating a new field with data based on existing field value I have a field with similar values:myFieldJCH CornJCH CarrotJCH AppleME/OrangeI would like to populate a new field de... by jason_hotchkiss Communicator in Splunk Search 03-23-2021 0 2	0	2
scheduled searches Hi all,I have two scheduled searches, is there the possibility to launch the second one at the end of the first?can y... by simo Path Finder in Splunk Search 03-23-2021 0 3	0	3
Display search result as a label text or non editable text on the dashboard I am trying to retrieve and display the user name of the logged in user as a label or a non-editable text on the dash... by sh254087 Communicator in Splunk Search 03-23-2021 0 1	0	1
Transactions with conditional Endswidth or different ordering of events. I have a series of events that always start with EventTypeName = "Node Down" but there are three scenarios I'm trying... by ocallender Explorer in Splunk Search 03-23-2021 0 0	0	0
Splunk Alert I am trying to create a Splunk alert where the log line is delimited with comma,I need to get the field 4 and check i... by sshanmua New Member in Splunk Search 03-23-2021 0 3	0	3
Syslog Filteration We are receiving around 300gigs of syslog data everyday and we want to filter all the logs and index only what the ne... by novotxms Loves-to-Learn in Splunk Search 03-23-2021 0 3	0	3
appendcols with proper info Hi, Following search query produces output in table below:index=_pods pod=* project=project_name state="Running"\| ev... by jugarugabi Path Finder in Splunk Search 03-23-2021 0 1	0	1
Create custom table Is it possible to have particular result in custom column which will fetch values from existing search and will show ... by himanshuqb Loves-to-Learn in Splunk Search 03-23-2021 0 0	0	0
Is there a way to only search * (asterisk)? Dear Experts , Please suggest an answer on a silly question If my log contains *(star) as a word/character . How w... by abhaybhagat08 New Member in Splunk Search 03-23-2021 0 4	0	4
Color results of pie chart based on a token Hi,My search returns a pie chart that is a sum of a variable (memory_usage_GB) and ploted by another variable (user).... by andres Loves-to-Learn Lots in Splunk Search 03-23-2021 0 0	0	0
Timechart stats I have simple search: index=xyz logLevel IN (ERROR, INFO)How do I plot two different color in a timespan chart?See... by noman377 Explorer in Splunk Search 03-23-2021 0 1	0	1
To generate two sets of values from one field Hi all,I am new to Splunk and I would like to seek help from the Splunk Community to generate the net power consumpti... by splunk_rookie Engager in Splunk Search 03-23-2021 0 4	0	4
ipinfo I am executing a query in splunk which is below : \| makeresults \| eval ip="$ip$" \| makemv delim="," ip \| mvexpand ip ... by ismail_salma198 Explorer in Splunk Search 03-22-2021 0 4	0	4
Dashboard panel statistic using extracted field not working HiI have a dashboard panel that displays (for a given server) 4 statistic values. Backups started, running, successfu... by owulz Explorer in Splunk Search 03-22-2021 0 0	0	0
collect command generates multiple rows in summary index for single event I am using the collect statement to collect a single event to a summary index. When run as a search, it will generate... by bowesmana SplunkTrust in Splunk Search 03-22-2021 0 0	0	0
_time and the timestamp in the row data are having slight variation I could see there is a slight difference ( in seconds - from 1 to 10) between the _time and the timestamp field in th... by ethanthomas Path Finder in Splunk Search 03-22-2021 0 3	0	3
SPL data input to SQL search? Hello All,I have a situation in which I need to use local lookup file as input in another search, however, the second... by sarge338 Path Finder in Splunk Search 03-22-2021 0 2	0	2
FieldSelector - p-values higher than >.05 in selected fields I've recently begun exploring the FieldSelector command to better understand what fields are the best predictor for a... by jpawloski Path Finder in Splunk Search 03-22-2021 0 0	0	0
How to make _time field to get the exact value of timestamp ? I have diffeence between _time and timestamp in terms of second . ( 5 to 50) . How to make the _time to get the exac... by ethanthomas Path Finder in Splunk Search 03-22-2021 0 1	0	1
How to view the contents of .kmz lookup files I do \| inputlookup geo_ocean.kmz for example but get an error. Please advise by SamHTexas Builder in Splunk Search 03-22-2021 0 0	0	0
Average alarms per reader So I'm having trouble figuring this one out. Basically for example we have 1000 alarms per day and 100 readers in our... by msage Path Finder in Splunk Search 03-22-2021 0 1	0	1
The "Where" command How do I search multiple field values with the "where" command. I am trying to search multiple field values that are... by antaeuslogan New Member in Splunk Search 03-22-2021 0 1	0	1
How do i get a count of each value of a field, and then extract the values whose count matches a certain number Hi,I have the below SPL which gets the count of each value of the field named "subject". I want to be able to select ... by ezmo1982 Path Finder in Splunk Search 03-22-2021 1 3	1	3
REgex to extract fields AZImaging/Projects/IMG2012002/WSI/D419BC00001/E7004004/SM/96b819b9-fc86-b81b-a999-55a72df0e05a.svsHi ,Above is the st... by hashsplunk Loves-to-Learn Lots in Splunk Search 03-22-2021 0 2	0	2