Splunk Search

Splunk Search
Community Activity
jerinvarghese
Hi Team,need help in getting few nodelabel highlighted.  "WANRT"  & "DCNDC".sitecodenodelabelPJSLANCUA001PCWLANCUA001...
by jerinvarghese Communicator in Splunk Search 10-20-2020
1 1
1
1
jerinvarghese
Hi All,Need to combine 2 index together and also need the values to be added/summed together.Code 1 :  index=nw_syslo...
by jerinvarghese Communicator in Splunk Search 10-20-2020
0 3
0
3
hettervik
Hi. We are trying to do some stats on the "component" field in the internal splunkd logs, but have encountered a stra...
by hettervik Builder in Splunk Search 10-20-2020
1 1
1
1
Administrator
Hello, the server only says "Server error" in search&reporting without showing "inspect job", how can I debug it? Reg...
by Administrator Explorer in Splunk Search 10-20-2020
0 2
0
2
chaday00
I have created the search below which: Filters out by only hostnames that I wantThen extracts the STIG ID from those ...
by chaday00 Path Finder in Splunk Search 10-20-2020
1 17
1
17
Administrator
Hi, the times splunk shows in "inspect job" are totally unrelated to reality: This search has completed and has retur...
by Administrator Explorer in Splunk Search 10-20-2020
0 2
0
2
ronaldtanhj
Hi all,I am trying to present data for a specific month and breaking it down by the day.  Using my splunk  search, I ...
by ronaldtanhj Path Finder in Splunk Search 10-20-2020
1 6
1
6
Pmeiring
Hi All, I'm currently in trying to extract the second IP address in each log as an field, but I'm simply not able to ...
by Pmeiring Explorer in Splunk Search 10-19-2020
1 5
1
5
sdkp03
I have created a metrics dashboard in which I have configured column chart. By default scale used is "Linear", this h...
by sdkp03 Communicator in Splunk Search 10-19-2020
1 4
1
4
Mai_splunk
 Hi team! How can I optimize the following search?I want to find ips that have made an attack and have been blocked b...
by Mai_splunk Explorer in Splunk Search 10-19-2020
1 5
1
5
strehb18
Hello, I am looking to create a new field based on a section from a longer string/web address. I didn't see what i wa...
by strehb18 Path Finder in Splunk Search 10-19-2020
1 10
1
10
goalkeeper
I am very new to Splunk.I have two log files, the first one,  let's call it accessLog, contains the access log for th...
by goalkeeper Explorer in Splunk Search 10-19-2020
1 2
1
2
benj851
Hello; I'm a bit stuck and looking for assistance. Base query returns the following values: Brand SystemId ResponseSt...
by benj851 Explorer in Splunk Search 10-19-2020
1 4
1
4
vrmandadi
Hello ,I see lot of warning internal logs for one of the csv which says unable to find filename property for lookup ....
by vrmandadi Builder in Splunk Search 10-19-2020
1 2
1
2
weetabixsplunk
Hi guys,I can see how this question comes across as dumb but I would like to remove duplicated entries from my ip_int...
by weetabixsplunk Explorer in Splunk Search 10-19-2020
1 2
1
2
gustavomichels
Hi everyone, I am running Splunk 6.2.2 on a distributed setup with 3 search heads in a search head cluster and 4 non...
by gustavomichels Path Finder in Splunk Search 10-19-2020
2 11
2
11
mohlatif
I would prefer that the search heads not be visible to everyone on the internet. Is it possible to restrict the abili...
by mohlatif Explorer in Splunk Search 10-19-2020
1 2
1
2
tg_to
Hi, I have a main search that generates counts of events table by date, UID and host something like for example:dateU...
by tg_to Loves-to-Learn in Splunk Search 10-19-2020
0 2
0
2
sphiwee
i have regular expression that i use to extract the below words, but i dont want to show the Results fiels or column,...
by sphiwee Contributor in Splunk Search 10-19-2020
1 13
1
13
SplunkHead10
Hello community,I used the search to find a possible solution for my problem but without success. My problem looks th...
by SplunkHead10 Explorer in Splunk Search 10-19-2020
1 1
1
1
fervin
Hi, I've recently noticed the recommendations the move to search-time versus index-time field extractions. I'm tryi...
by fervin Path Finder in Splunk Search 10-19-2020
4 10
4
10
dtccsundar
Hi,Facing a strange issue in splunk .First of all we are ingesting data into splunk from sql server as a view .The sq...
by dtccsundar Path Finder in Splunk Search 10-19-2020
0 9
0
9
email2vamsi
Hello Experts, search.. |search "json attribute" |stats sum(latest("_attributes.xxx.total")) by servername |append [s...
by email2vamsi Explorer in Splunk Search 10-19-2020
0 3
0
3
mitag
If there's an error in a props.conf stanza for a particular sourcetype, where would it show up in the logs? E.g. a ke...
by mitag Contributor in Splunk Search 10-19-2020
0 4
0
4
dfraseman
I'm looking to create a chart that shows the pass/fail rate of an export process by code release dates rather than di...
by dfraseman Explorer in Splunk Search 10-18-2020
0 1
0
1
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...