Splunk Search

Community Activity

Splunk dashboard single value trendinterval time as dynamic Hello, I' m currently working on how to make dashboard with our Server's VM Count logs.Our logs are being collected a... by splunkkid Path Finder in Splunk Search 03-13-2021 0 1	0	1
Use eval (or other) to make automatic calculation in xyseries Hi,I have an automatic process that daily writes some information in a CSV file [1]. Then I have a dashboard that pi... by goncalosilva123 Engager in Splunk Search 03-13-2021 0 6	0	6
how to display multiple field values from different searches in pie chart I have following query to display the results in pie chart. Problem here is I could not see the all the values in the... by sbollam Explorer in Splunk Search 03-13-2021 0 4	0	4
compare two field values for equality I have the output of a firewall config, i want to make sure that our naming standard is consistent with the actual fu... by EricPartington Communicator in Splunk Search 03-13-2021 0 9	0	9
Palo Alto Networks vendor_action query to list all I'd like to run an efficient search over an index to find all of the types of 'vendor_action' field present in the da... by splunkymcsnypr Engager in Splunk Search 03-13-2021 0 1	0	1
vendor_action Field Hi!I'm trying to find more information about the vendor_action field, however I've not managed to do so with much suc... by splunkymcsnypr Engager in Splunk Search 03-13-2021 0 1	0	1
Splunk query to check variation in processing time and volume in 5 minutes each (in last 10 minutes) Hi, Can anyone help, As I want to get an alert if : The volume gets drop or if processing time gets increased of a sp... by sahil237888 Path Finder in Splunk Search 03-13-2021 0 1	0	1
Splunk query to filter logs In my search result i am getting AD & Login locations.Now I want to filter result, if both AD and Login locations are... by alexspunkshell Contributor in Splunk Search 03-12-2021 0 3	0	3
Eval Usage data to percentage as 1d span base, and table today, 1month ago, 3months ago, 6months ago Hello, I'm trying to make time based table to check trend right away.The data is currently accumulated on daily basis... by splunkkid Path Finder in Splunk Search 03-12-2021 0 2	0	2
How do I extract the dirname from the filepath hello How can I get the dirname from the filepath. I am looking something like thisAnkits-MacBook-Pro:~ akotak$ dirn... by kotak86 Explorer in Splunk Search 03-12-2021 0 1	0	1
Display the different color based on status value and Client Wise. run the below query and got the outputindex=xxx sc_status=201 OR sc_status=200\| stats count(eval(sc_status)) as "Tota... by sachdeva_2007 Explorer in Splunk Search 03-12-2021 0 1	0	1
search auto-finalized after time limit: 60 seconds / limits.conf Hello, Unfortunately, my complete query does not go through because of the following error:The search auto-finalized ... by exchanger Path Finder in Splunk Search 03-12-2021 1 1	1	1
How to compare output of a search to a lookup file? So I've got a lookup table full of hostnames that I want to compare to a search that returns only the active hosts so... by jtelep New Member in Splunk Search 03-12-2021 0 8	0	8
a little search assistance Hello all, I need some assistance using the search below to produce a timechart of the number of events per day for t... by tkerr1357 Path Finder in Splunk Search 03-12-2021 0 3	0	3
Splunk Table with data from multiple points in time I have a datasource that drops data into Splunk every 10 minutes that contains data about my team's workflow.The data... by TedWhite Engager in Splunk Search 03-12-2021 0 2	0	2
A value remains for a length of time I am looking for a search that returns an events(s) when the searched value remains for a set length of time. Using W... by troyhochsprung New Member in Splunk Search 03-12-2021 0 3	0	3
How many hours required to upgrade 7.2.1 version to latest version Hi Everyone,Can anyone please share your comments, how many hours required to upgrade the Splunk version from 7.2.1 t... by phanichintha Path Finder in Splunk Search 03-12-2021 0 1	0	1
extract some text into a field with rex I'm using Splunk to examine the event logs on some servers looking for details regarding application crashes with the... by leandromatperei Path Finder in Splunk Search 03-12-2021 0 3	0	3
Query to compare presence of fields Hi everyone,I am new to splunk and was unsuccessful with my query.Let's say many events are aggregated in an index fr... by jt New Member in Splunk Search 03-12-2021 0 1	0	1
Extracted fields in same table Hi,I have extracted 2 fields i.e. field1 & field2, while using the stats count command how do i use these extracted f... by SS1 Path Finder in Splunk Search 03-11-2021 0 3	0	3
query for transactions or grouping events Hi Team,I have the below logs in splunk and i'm looking for query to get the time taken to compete the run by each bo... by splunk_ier Engager in Splunk Search 03-11-2021 0 1	0	1
Search to group different fields from different events Hi! So ive been at this for hours attempting to use stats and transactions to do this.I have two events that look lik... by johnangelo Loves-to-Learn in Splunk Search 03-11-2021 0 5	0	5
Computing column differences This is result of a query that reflects license consumption by dayIndex3/2/20213/3/20213/4/20213/5/20213/6/20213/7/20... by ldnail_at_TI Path Finder in Splunk Search 03-11-2021 0 2	0	2
Using Regex to search events from a specific ip range Hello, I am new to Splunk and REGEX for that matter. What I am trying to accomplish is creating an alert when a speci... by 813_Gerb Engager in Splunk Search 03-11-2021 0 3	0	3
Working with periods in spath command I have a lot of json data that contains periods in the keys. I want to be able to expand one of the arrays in the dat... by Rjbeckwith Explorer in Splunk Search 03-11-2021 0 4	0	4