Splunk Search

Community Activity

Query to find devices are Commissioning and Decommissioning Need Query which we can track to find which Log sources are Commissioning and Decommissioning in SPlunk and generate ... by sahildb Engager in Splunk Search 02-09-2021 0 5	0	5
Extract distinct values from an response array that has partial text using RegEx I have an array that would be presented in an API response which is being logged in Splunk and the array format is li... by balamurugandha7 Observer in Splunk Search 02-09-2021 0 5	0	5
Splunk TA for Symantec Brightmail Anyone have TA for Symantec brightmail. by laklubinsplunk New Member in Splunk Search 02-09-2021 0 11	0	11
help for retrieving events during the week only hiI use this search in order to retrieve events between 9h and 17hNow I also want to catch the events only between th... by jip31 Motivator in Splunk Search 02-09-2021 0 3	0	3
How to have field populate once Hello Splunk Community, I have encountered a easy, yet tricky situation. I was told chart command works just like sta... by Mary666 Communicator in Splunk Search 02-09-2021 0 3	0	3
csv file exclude Hi,I will create an alert that tracks Windows (event id = 4726 - A user account was deleted) events.I have a user lis... by sfurkan Explorer in Splunk Search 02-09-2021 0 3	0	3
Retrieve result from list I have a field in log like:"policies":["Test1"]for which I am not able to search through the keyword when I have the ... by Nidd Path Finder in Splunk Search 02-09-2021 0 4	0	4
How to extract only unique email ID's from a detailed log Hi Team, Here is a sample log: 2016-07-11 16:19:52,689 [9] INFO AdidasCoach.EmailProcessorConsumer.EmailProcessorC... by vasuit1242 New Member in Splunk Search 02-08-2021 0 12	0	12
Require help with rex query Hi,I have the below type of logs:log1: Mon Feb 8 02:57:36 EST 2021 41% /logslog2: Mon Feb 8 02:57:36 EST 2021 73% /op... by Mrig342 Contributor in Splunk Search 02-08-2021 0 2	0	2
Finding difficulty in extracting count of browser type from user agent Hi I need help in determining the browser that appear in our logs. I believe the simple way to use the app TA - UA pa... by jaibalaraman Path Finder in Splunk Search 02-08-2021 0 10	0	10
Count the number of different value of a field, and get the average per minute I have some domain like this:domain \|A \|B \|C \|D \|......One domain can be called in one request, now I want to know wh... by zonglin123 New Member in Splunk Search 02-08-2021 0 2	0	2
Can splunk do this? search command -> mvexpand -> with more than one multi value field I have a data set that could have more than one multi-value field "MV-Field". Each value of each MV-field corresponds... by lpolo Motivator in Splunk Search 02-08-2021 2 12	2	12
Dashboard with /var/log/sudo.log, /var/log/secure and /var/log/audit/audit.log Events Hello, I am working on dashboard for our Linux admins. They require being able to view all events from /var/log/sudo.... by genesiusj Builder in Splunk Search 02-08-2021 0 8	0	8
List of host from Syslog-ng server. Hi Team I could see my license limit has reached for my syslog-ng. Can you please let me know how can I get a list of... by arjit Path Finder in Splunk Search 02-08-2021 0 2	0	2
how to group similar messages into one message and get count of them Example: errormessages total user a not found. 7 user b not found. ... by REACHGPRAVEEN Explorer in Splunk Search 02-08-2021 0 4	0	4
Reconciliation from 3 different sourcetypes Hi All,I have an issue while trying to reconcile events from 3 different source types, the events from each sourcetyp... by ashrafsj Path Finder in Splunk Search 02-08-2021 0 7	0	7
Join Two Events- Showing log on and log off activity and duration I have a project that I am working on that will display when a user logs onto a server and logs out then calculates t... by Becherer Explorer in Splunk Search 02-08-2021 0 5	0	5
How to create a time chart with row data? I have search that runs every day that populates a CSV that looks like this (I have more sources, but wanted to keep ... by UMDTERPS Communicator in Splunk Search 02-08-2021 0 2	0	2
How do we extract multiple events from xml response from REST API call Hello Spunkers,I am trying to ingest the data using REST APIs and as a response i do see xml response in below format... by sunilbhogayta New Member in Splunk Search 02-08-2021 0 1	0	1
Left join - find missing data from second index Hello, I am quite new to Splunk and this is my first post. Hoping that I can get some help from this awesome communit... by mattiasrs Explorer in Splunk Search 02-08-2021 0 7	0	7
Bubble Chart How do I display the below as a bubble chart? When I click the bubble chart for my search query its not working prope... by supreme_coder Engager in Splunk Search 02-08-2021 0 1	0	1
Understanding how to append to a lookup following an example Currently going over the Splunk App for Windows Infrastructure and found a saved search that updates a lookup table t... by ricotries Communicator in Splunk Search 02-08-2021 0 2	0	2
How to find the perple who leave in the next day We have a game and login log. I want to anyalize the people that login today and don't login tommorow, which is to an... by Minghao Explorer in Splunk Search 02-08-2021 0 4	0	4
Using Rex to pull out a file path , file name and extension from verbose message field Hi all, I'm new to splunk searches and would appreciate some help to find out how to pull out the file path, file nam... by ViperV Explorer in Splunk Search 02-08-2021 0 6	0	6
Adding lookups to App? Ok not sure if in the right section. So I have been using Zeek for Splunk and TA_suricata and we are getting a lot o... by ddecker03 Loves-to-Learn Everything in Splunk Search 02-07-2021 0 3	0	3