Splunk Search

Community Activity

Search query using REST in JSON format? Hello, I am trying to do a search query using JSON. It works if I use the normal form format, but not JSON.Working ... by locobiker Loves-to-Learn in Splunk Search 11-09-2020 0 0	0	0
Join multiple lookup table to get result in single table Hi,This is the case scenario:when I run this search query:index = "global" productIDI get the following result:{ "pro... by basics Explorer in Splunk Search 11-09-2020 0 3	0	3
Count of API calls over X time_taken, only if average time_taken is over a threshold Hi, I currently have a query that returns the a chart of API's whose calls average over a specific time limit (uniqu... by pzhou07920 Explorer in Splunk Search 11-09-2020 0 4	0	4
How do you calculate the growth of each Index on a monthly basis? We have a requirement to show the data growth of each index on a monthly basis. I tried with the below query from _in... by akarivaratharaj Communicator in Splunk Search 11-09-2020 0 10	0	10
timechart conditional result Hello, i have objects with names that all carry a unique and constant "Software-Signature" with them.This signature i... by light_of_sirius Explorer in Splunk Search 11-09-2020 0 2	0	2
Dashboard As Per below screenshot, i getting results the difference between last week host and this week host count. But i wa... by uagraw01 Motivator in Splunk Search 11-08-2020 0 2	0	2
Search result from different App Hi , Is it possible to get the search result from a specific app to my own application?Example:The result of the APP_... by jadengoho Builder in Splunk Search 11-08-2020 0 2	0	2
Extracting multiple values for single field I'm trying to extract multiple values for a single field. I've got the beginnings of the regex sorted to extract it, ... by ebs Communicator in Splunk Search 11-08-2020 0 3	0	3
Charting diff of events with running total I have some firewall session state logs which get sent to Splunk every minute. The session state events contain a uni... by rtadams89 Contributor in Splunk Search 11-08-2020 0 2	0	2
Top 10 stores for each state Hello folks;Completely new to SPLUNK.I am trying to get a table of the 10 stores for each State for the current week ... by Smiddy Loves-to-Learn Lots in Splunk Search 11-08-2020 0 0	0	0
Updating maximum value I have a data set with values in a specific moment in time. Each day can have multiple values (but in different event... by michaelbosch Observer in Splunk Search 11-08-2020 0 4	0	4
Lookup from multiple table Hello,my goal is to find and combine data from multiple source.Here:employee_lookup: the table for all employee datab... by basics Explorer in Splunk Search 11-08-2020 0 3	0	3
Splunk Keywords definations HI, I am new to Splunk and I am looking forward to learning more. I wanted to know where do I learn what keywords/cod... by basics Explorer in Splunk Search 11-08-2020 0 2	0	2
Query to find out users belong to a particular role Is there any query to find out users belong to a particular role . For example , if i have a role called "least_role"... by kteng2024 Path Finder in Splunk Search 11-07-2020 0 3	0	3
Splunk Education - Down for Maintenance Hello I see that Splunk education is down for maintenance and was wondering when the site would be back up? Kind rega... by fmohideen New Member in Splunk Search 11-06-2020 0 0	0	0
How to use eval with IF? eval A=if(source == "source_a.csv", "1" , "0") The result is 0 in every entry. What is wrong? I have two sources sou... by LH_SPLUNK Explorer in Splunk Search 11-06-2020 1 6	1	6
Run a generating command over a set of values I have a search that will return a number of search ids.index=_audit \| <various modifications>\| table search_idExampl... by burwell SplunkTrust in Splunk Search 11-06-2020 0 3	0	3
Need last logon for a user Need to know what was the last time a domain AD account “username” was logged into and from what server/machine pleas... by chrodriguez Engager in Splunk Search 11-06-2020 0 5	0	5
extract string from _raw data Hello need help to extract the number from this result:Total number of files under /wmq/logs/AMXDEVRC120/active is: 1... by owie6466 Explorer in Splunk Search 11-06-2020 1 2	1	2
Manipulate Token Value and use in search Hopefully, I can explain this to where it makes sense. I have a forum where I use a TEXT input to generate a token to... by ekammer1 Engager in Splunk Search 11-06-2020 0 2	0	2
Sub Search failing due to return with no items I am very close but need some assistance. I am attempting to create an alert based upon the criteria "Free Megabytes... by jmo1 Path Finder in Splunk Search 11-06-2020 0 5	0	5
Predict: In dashboards can we keep bar chart in stacked from even after using predict command?My Case:In my case after using predict command... by renuka Path Finder in Splunk Search 11-06-2020 0 0	0	0
How to exclude computer account name from results I am running a very simple search to determine accounts locked out: server01 OR server02 OR server03 OR server04 Eve... by arkonner Path Finder in Splunk Search 11-06-2020 0 10	0	10
Stats count and field with oldest event I'm sure it's out there somewhere and maybe I'm just brain fried from looking at Splunk for too long, but I wasn't ab... by dangeloma Explorer in Splunk Search 11-06-2020 0 5	0	5
how can i perform a filter after i do a search date reportid notificationid status10/1/2020 5555 1 ... by thaghost99 Path Finder in Splunk Search 11-05-2020 0 2	0	2