Splunk Search

Community Activity

	Macro not working while used in dashboard, while it is working in search bar. Hi All,I have written a macro to get a field. It has 3 joins. When i used the macro in dashboard , in a base search, ... by anooshac Communicator in Splunk Search 09-19-2024 0 6	0	6
	How to use stats to join data and avoid the use of mvexpand? Hello, I'm joining data from two different sources, basically I have a table with 3 fields: host, source1, source2. C... by ndaniel88 Explorer in Splunk Search 09-19-2024 0 9	0	9
	regx Hi , I want to extract the color part.RAISE-ALARM:acIpGroupNoRouteAlarm: [KOREASBC1] IP Group is temporarily blocked.... by Siddharthnegi Contributor in Splunk Search 09-19-2024 0 1	0	1
	How do I give same rank for same score? Hello,How do I give same rank for same score?Student d and e has the same score of 73, thus they both Rank 4, but stu... by LearningGuy Motivator in Splunk Search 09-19-2024 0 11	0	11
	removing the year from area chart Time Labels I am trying to remove the year from from the time labels on the area chart without it messing up the charts format. I... by Matt09 New Member in Splunk Search 09-19-2024 0 1	0	1
	Splunk dashboard studio single value static font size Hello there, im creating a visualization using dashboard studio and showing some field with single value. But the dat... by elend Communicator in Splunk Search 09-19-2024 0 4	0	4
	How to Change Y-Axis Scale to K, M, G, T? Hi everyone,I’m trying to visualize the network traffic of an interface in Splunk using an area chart. However, the Y... by jg91 Path Finder in Splunk Search 09-18-2024 0 3	0	3
	timechart - add some columns and values are 0 Hello, Based on this Splunk Query: index=* AND appid=127881 AND message="\|NGINX\|" AND cluster != null AND names... by TSamon Engager in Splunk Search 09-18-2024 0 2	0	2
	Receiving a '401 Unauthorized' error when querying the 'services/search/jobs' API Hi, I'm working with .NET and using the 'services/search/jobs/' API.After successfully connecting through the 'servic... by cymulate Observer in Splunk Search 09-18-2024 0 3	0	3
	Create a new field using other field values concatenated I am trying to create a new field called "description" that contains values from two other existing fields. If field... by scout29 Path Finder in Splunk Search 09-18-2024 0 1	0	1
	Encountered the following error while trying to save: File has no line endings I get the error showed in the title when tying to upload a csv as lookup. I tried the solution mentioned here: https... by atebysandwich Path Finder in Splunk Search 09-18-2024 0 2	0	2
	Fields Extraction in Splunk We are using v9 format of logs in splunk. It is working fine and we are able to see logs in splunk as expected. We ad... by Alankrit New Member in Splunk Search 09-18-2024 0 1	0	1
	Time field not reflecting along with the inputlookup query Hi Team,I am using below query to get the DNS lookup query, everything is fine but I am not getting the time field al... by Prashant Explorer in Splunk Search 09-18-2024 0 3	0	3
	Device online status dashboard Hello everyone,New and trying to learn, I've searched for hours trying to get a dashboard to display computers within... by TTAL New Member in Splunk Search 09-17-2024 0 3	0	3
	splunk stats group and count by fields need query to remove duplicates from count statsSample inputevent emailabc xyz@email.comabc xyz@email.comabc... by Ameenulla Engager in Splunk Search 09-17-2024 0 1	0	1
	removing duplicate with maximum value Hi All, Can anyone please help me on this ... I am framing a SPL query to get list of hosts with their last eventtime... by RanjiRaje Explorer in Splunk Search 09-17-2024 0 3	0	3
	Help with a join search Hi All - I need help with a fairly complex search i am being asked to build by a user. The ask is that the below fie... by tomjb94 Observer in Splunk Search 09-17-2024 0 4	0	4
	Splunk lookup file - lookup field question Hi all, I've got a lookup file called devices.csv that contains 2 fields, hostname and ip_address.The index I'm searc... by Pellecrino Engager in Splunk Search 09-16-2024 0 3	0	3
	Comparing Multivalue Fields I've done a fair amount of searching over the forums and am still having issues with comparing multi-value fields. I'... by wilcomply13 Explorer in Splunk Search 09-16-2024 0 9	0	9
	Basic KV Store Question - Updating Thousands of Records at Once Hello all, I have a requirement to list all of our assets and show the last time they appeared in the logs of many di... by alferone Explorer in Splunk Search 09-16-2024 0 6	0	6
	Timewrap command grouping by field Hello, I've seen many others in this forum trying to achieve something similar to what I'm trying to do but I didn't ... by n3w4z4 Explorer in Splunk Search 09-16-2024 0 10	0	10
	how stats count any fields , top 3 valus for example i have this fields and valus:stats count by username . i got this:usernameroot \| 102admin \| 71yara \| 34th... by siv Explorer in Splunk Search 09-16-2024 0 6	0	6
	Creating dashboard with 4 columns Hi Team,I am sending json data to Splunk server and I want to create a dashboard out of it.My data is in the below fo... by shenoyveer Path Finder in Splunk Search 09-16-2024 0 4	0	4
	Filter Feilds and suppress output data Dear All,We have splunk index with data like pattern and the pattern was recently changed.{"Feild1":"DATA1","Feild2":... by Satyapv Engager in Splunk Search 09-16-2024 0 3	0	3
	saved search Hi , I have a saved search which is cron scheduled , but it is not showing on the saved search panel .(setting->Searc... by Siddharthnegi Contributor in Splunk Search 09-15-2024 0 2	0	2