Splunk Search

Community Activity

How do I create a histogram to show distribution of hosts having particular range of uptime? I have a search like this: index=my_index search=my_search \| stats count as no_of_hosts by uptime It gives me uptime... by asingh4177 Engager in Splunk Search 01-20-2021 0 4	0	4
Can Add-on Debug Refresh be run from a cluster Hi @MuS Sorry for the direct contact, I hope it's ok to ask you a question about "Add-on Debug Refresh".I have used i... by robertlynch2020 Influencer in Splunk Search 01-19-2021 0 1	0	1
Time range not substitued by earliest/latest On our search head cluster we are running into the following issue. When searching using the time picker everything w... by MattibergB Path Finder in Splunk Search 01-19-2021 0 4	0	4
Regular Expression in Search I currently have a search looking for specific attack_id values. For example: ("attack_id=3040" OR "attack_id=3057"... by balcv Contributor in Splunk Search 01-19-2021 2 11	2	11
How can we add original fields after using stats count? Hi,We have a use-case where responses(host_addr) returned from DNS queries are passed through AbuseIPDB API to check ... by att35 Builder in Splunk Search 01-19-2021 0 2	0	2
how to get specific item in a nested json array I have a field named "test" which has the following json. If I do:\| fields test{}.data{}{}.metric, test{}.data{}{}.va... by swin88 Engager in Splunk Search 01-19-2021 0 2	0	2
How to add value based on matrix comparison Hi all, My data is logging of support ticket. i retrieved all the change state of each ticket with the transaction co... by cros Engager in Splunk Search 01-19-2021 0 4	0	4
Assistance with Map using Map to perform a search from a table of the original search TLDR: Goal is to perform an initial search which returns table of time user authenticated, then for each row in the ... by atljoer Loves-to-Learn in Splunk Search 01-19-2021 0 3	0	3
How to lower case the value present inside double quotes (String). Hi Splunker,I would like to lower the string/value present inside the double quotes and then use as it is.Values high... by tarunmalhotra79 Engager in Splunk Search 01-19-2021 0 1	0	1
Append more 50k or other soluction like a join Hello community. I am not able to perform a sub-search between 2 sourcetypes. The 'drm' sourcetype has 5 million even... by Michell_ctba Explorer in Splunk Search 01-19-2021 0 2	0	2
How to find events between date ranges I am trying to find the events that are taking place between March 1 2021 and September 1 2021. I was hoping someone ... by riveraj1 Observer in Splunk Search 01-19-2021 0 1	0	1
help to extract value from field with rex function Hi,please help. I would like to see in table (to extract with rex) value of field paid. Log is:2020-12-23 12:14:42.74... by ivana27 Path Finder in Splunk Search 01-19-2021 0 1	0	1
Run DBX query via REST API I've checked this, but it hasn't solved the problem for me: https://community.splunk.com/t5/Getting-Data-In/Is-it-pos... by mxanareckless Path Finder in Splunk Search 01-19-2021 0 2	0	2
How to combine the values of same field into one HelloMy question is how to combine the same values into one which are getting differentiate by another fieldExamplei... by renuka Path Finder in Splunk Search 01-19-2021 0 4	0	4
Running loop on a search that takes one Id at a time Hi,I have a lookup file that contains multiple Id's, I have a search that takes one Id at a time and returns the resu... by Rajyalakshmi Explorer in Splunk Search 01-19-2021 0 8	0	8
90th percentile Hi I need to find 90th percentage avg, I tried by this way base search\| mainMethod=LostStolen OR mainMethod=Credit... by rj1408 Path Finder in Splunk Search 01-18-2021 0 5	0	5
Field Extraction from vcenter sshd logs Hi team, I would like to extract the following fields from vcenter logs that are being sent to Splunk on a dedicated ... by santosh_scb Path Finder in Splunk Search 01-18-2021 0 0	0	0
How do I remove an app? I see questions about difference between deleting apps and disabling them. I don't see how to actually delete them. by jared_anderson Path Finder in Splunk Search 01-18-2021 6 14	6	14
Min and Max Response Time Hi I want to calculate Min and Max Response time only if the status is success.Below is the table format:MicroService... by rj1408 Path Finder in Splunk Search 01-18-2021 0 3	0	3
Get current date in splunk text area Hi All,I am looking for a dashboard panel, where user can enter their comments in one column by typing themselves and... by architkhanna Path Finder in Splunk Search 01-18-2021 0 1	0	1
Having a time range based on a second time field Hi, i have extracted data from a database into a summary index which is updated every hour.The database has informati... by ssaenger Communicator in Splunk Search 01-18-2021 0 8	0	8
search field from 1 index to other index field Hi ,i have a index "otx" and having field "indicator" so i want to trigger alert if any IP address from "indicator"... by shashilendra Explorer in Splunk Search 01-18-2021 0 7	0	7
How to Extract specific word from application log Here is the sample log and I need to check which modelId is having most of the error using rex and stats count####<Ja... by iqbalintouch Path Finder in Splunk Search 01-17-2021 0 2	0	2
how to accelerate get timechart data from datamodel Hai, please I wanna ask how to accelerate to get timechart with datamodel from this query \| datamodel Intrusion_Detec... by riat New Member in Splunk Search 01-15-2021 0 2	0	2
Merging and counting 3 data sets I have 3 data sets that I'm trying to merge and count.Data set 1my_id \| company_id \| company_name \| my-type100 ... by chaalz Observer in Splunk Search 01-15-2021 0 1	0	1