Splunk Search

Community Activity

Name Extraction needed Hi,I have below scenario where a sample gym has many customers and their accounts. Some are individual and some are I... by mbasharat Builder in Splunk Search 09-24-2020 0 10	0	10
Error when trying to search Network Traffic data model with tstats I am trying to search the Network Traffic data model, specifically blocked traffic, as follows:\| tstats summariesonly... by jwalzerpitt Influencer in Splunk Search 09-24-2020 0 3	0	3
What is the permissible field value length ? What is the character limit of a field allowed in splunk? If we use a longer names would the values get truncated or ... by zacksoft Contributor in Splunk Search 09-24-2020 0 3	0	3
Searching for an Event that occured before a Specific Event Windows does not provide an accurate user who performed an audit policy change on the system (EventCode 4719), it lis... by Simple_Search Path Finder in Splunk Search 09-24-2020 0 2	0	2
How can I write a search query to retrieve release/installed date for all app on Splunk? I try to search with comand \| rest /services/app/local but the value of the "updated" field is "1970-01-01T07:00:00+0... by nareerat_pr Explorer in Splunk Search 09-24-2020 0 1	0	1
Regex Hi,I am trying to find unique id's the have 3 letters followed by 6 numbers for example bhg111111 My issue is I want ... by nathanluke86 Communicator in Splunk Search 09-24-2020 0 5	0	5
Filter sender email which not contains specific subdomain and domain Dear all,I try to filter sender email which not contains specific 3 subdomains and domain.For example:sender:user1@aa... by silverem78 Engager in Splunk Search 09-24-2020 0 2	0	2
Where command not filtering the data Hi all ..I need a help on a query ...My query looks like this Index=* ......... \| Eventstats count as total_count \| ... by appu Explorer in Splunk Search 09-24-2020 1 10	1	10
Splunk query format issue I have a correct working query but for some reason splunk doesn't return the results and shows no event sampling as a... by rgupta18 New Member in Splunk Search 09-24-2020 0 1	0	1
total vm's in esxi server i have extracted from logs how many are running but not able to write query for how many are present in server.can an... by dall Path Finder in Splunk Search 09-24-2020 0 20	0	20
How to use search and regex command to filter events The events have fields like below:description, codeAAxxxxx, 200AAxxxx,301AAxxxx,401BBxxxx,200BBxxxx,303AAxxx, 502 I w... by umou7 Explorer in Splunk Search 09-24-2020 0 2	0	2
searching for multiple destination ports I have a search query for:dest_port=4402 I want to include 4404. what would the syntax for dest_port look like? by allenhau Engager in Splunk Search 09-23-2020 0 2	0	2
splunk predict period limit 2000 ?? Dear All expert ~we have some data that every 5 minutes generated. and we want to predict it , we need to use the sea... by wt0217 New Member in Splunk Search 09-23-2020 0 0	0	0
Windows Servers - High CPU usuage of process that is greater than 90 Hi Team,I wanted to set up alert in Splunk cloud for windows machines when CPU% of a single process is greater than 9... by Supriya Path Finder in Splunk Search 09-23-2020 1 2	1	2
Splunk rest api , if hostname matched Hi,I try to if saved search result hostname is matched, reload deploy-server with rest API. But When saved search run... by burakatabay Path Finder in Splunk Search 09-23-2020 1 2	1	2
How to create a table which matches a lookup file and fields created at search time? Hi All I am trying to create a search which will give me an output similar to below Index Server Name Application... by aparnaa Path Finder in Splunk Search 09-23-2020 0 5	0	5
How can I force a timechart to snap to the end of the week rather than beginning? I have a very simple search to count the amount of emails delivered by week and display this in a timechart over the ... by andimnf Explorer in Splunk Search 09-23-2020 0 3	0	3
Splunk Add-on for microsoft cloud services not getting loaded in splunk cloud instance. I installed Splunk Add-on for microsoft cloud services in splunk cloud. I am splunk cloud admin. When I installed App... by sang New Member in Splunk Search 09-23-2020 0 0	0	0
how to ignore a column using addtotals/addcoltotals Here is my search index="aries" splunk tt=HL7* \| chart count by si , tt \| addtotals \| addcoltotals\| rename si as G... by mjhamm75 New Member in Splunk Search 09-23-2020 0 3	0	3
上位XX位とその他の合計値の集計についてお世話になります。集計のサーチ文の書き方についてご教示ください。やりたいことは下記の通りです。・販売数で集計し、Top3を出力する。・その他は合計して集計する。・販売数で集計した結果に、商品名をキーとして割引販売数の集計値をマージする... by clio706 Explorer in Splunk Search 09-23-2020 0 2	0	2
How to get a logging hours report of the employee in splunk Hi Community,I Need to find the login hours of the user/employee. Did we see those results in splunk...? Please help ... by mputtam Path Finder in Splunk Search 09-23-2020 1 6	1	6
Curl command error - b"/bin/sh: -c: line 1: syntax error near unexpected token `?P'\n/bin/sh: When im trying to pull data using Curl on my mac for command :' curl -s -ku admin:admin -o ?Users/Vivek/Desktop/09012... by kumarviv Explorer in Splunk Search 09-23-2020 1 4	1	4
Splunk query find percent of Indexes and hosts used in last 24 hours. Please help me with splunk query to find below 2 things.1. To find percent to events/logs utilized by differents Inde... by alexspunkshell Contributor in Splunk Search 09-23-2020 1 1	1	1
fit command in MLTK detecting categorial outliers Hi,I tried the below query to fit my model,sourcetype=files command="cmd.exe" earliest=-90d@d latest=-1d@d\|stats co... by Janani_Krish Path Finder in Splunk Search 09-23-2020 1 5	1	5
Upgrading Splunk as root modified file system using tar.gz Hello,looks like upgrading Splunk as root modified our file system using tar.gz, is this normal behaviour? [root@xhos... by splunkreal Influencer in Splunk Search 09-23-2020 0 1	0	1