Splunk Search

Community Activity

Trying to filter out multivalue rex returns when they have a specific value. Hi all, I have run in to a wall on a query I am attempting. I am receiving an error on my log, and one of the items i... by mknezel1 Engager in Splunk Search 09-17-2020 0 2	0	2
If statement help I have a table generating fields Assignee, Support_tier, HR_Country, Hostdomain,I have to Assign some values to 'Assi... by priya0709 Path Finder in Splunk Search 09-17-2020 0 1	0	1
multiple host input listing in splunk query (search & Reporting) i am seeking a way to define a variable where i can define a static list of hosts to (re-)use in adhoc searchesExampl... by p544gm Explorer in Splunk Search 09-17-2020 0 2	0	2
EVAL with Sub search Hi Friends,If I execute below highlighted query I am getting the result where when I supply the result as search it i... by Reddy_dash Engager in Splunk Search 09-17-2020 0 1	0	1
regex to cull particular dest and src IP's before indexing Hi All, I have an issue where I need to cull certain IP sources and destinations from syslog sources before it gets i... by dthompsonsplunk Explorer in Splunk Search 09-17-2020 0 7	0	7
Splunk Logging I have a XML payload like below which is getting logged in Splunk. However when i search in Splunk with customer emai... by sumanth_sun New Member in Splunk Search 09-17-2020 0 1	0	1
Matching a lookup table using rex or regex to match to data in the result of a query field Hello, I am trying to use a lookup table to search against the URL field inside of the proxy logs. The use case is to... by CyberCyberSec Loves-to-Learn in Splunk Search 09-17-2020 0 1	0	1
table sort columns numerically I would like to be able to sort table columns numerically. Right now it sorts based on 1 11 111 2, but I want 1 2 11 ... by pethier Explorer in Splunk Search 09-17-2020 4 15	4	15
help on rename which doesnt works HelloI use the search below but I don't know why the rename command doesn't worksThanks for your help \| inputlookup f... by jip31 Motivator in Splunk Search 09-17-2020 0 6	0	6
extracting a field from message Hello Team,I have below event and I am trying to extract this number 29120120 as a field and tried with below search... by chandukreddi Path Finder in Splunk Search 09-16-2020 0 4	0	4
maxKBps option and limiting a Forwarder's rate of thruput Within the doc page on limits.conf, http://docs.splunk.com/Documentation/Splunk/latest/Admin/Limitsconf I found thi... by maverick Splunk Employee in Splunk Search 09-16-2020 8 9	8	9
monthly Chronology order. HI All,am having trouble getting below table in monthly order. please help me in this. Query : index=moogsoft_e2e ... by jerinvarghese Communicator in Splunk Search 09-16-2020 0 2	0	2
Populating top 2 failed-policy counts for each cycledate I am trying to write a search for getting the top two failed policy count for each cycledate. The below works for a s... by AC New Member in Splunk Search 09-16-2020 0 2	0	2
What time does @d snap to? Does it change? I am searching IIS logs, trying to calculate the number of GB transferred each day for the last 7 days. Here is my s... by DaClyde Contributor in Splunk Search 09-16-2020 0 2	0	2
Split and display My requirement is to display just domain (eg Corp)From below ComputernameComputername - <host>. Corp. <Domain>. Com by priya0709 Path Finder in Splunk Search 09-16-2020 0 4	0	4
Sort Function In splunk Hi ,I have a string fields like '28 Aug-1233456' , '05 Jan-5678999' ,'02 Feb-6789011'. I want to sort the field on t... by romansha Loves-to-Learn Lots in Splunk Search 09-15-2020 0 5	0	5
Sort in an order Is there a way to sort field 09 Sep-256789 in descending order? For example, if we have sample fields 10 Sep-26789 ,... by romansha Loves-to-Learn Lots in Splunk Search 09-15-2020 0 2	0	2
Returning results that match one search but not another I have the following query working in SQL and am struggling to get a working Splunk query that will return the same r... by bnwww Engager in Splunk Search 09-15-2020 0 15	0	15
How to search for url fields that only contain IP address I'm trying to do a search that will show me only IP address for the field url, example = sourcetype=fakename url=(on... by mrtolu6 Path Finder in Splunk Search 09-15-2020 0 6	0	6
Reason field using multiple criteria Hello all, I trying to get a reason field to generate based on field values as to why a system is showing up in a re... by codedtech Path Finder in Splunk Search 09-15-2020 0 3	0	3
Return previous row when record matches I have a log that contain records for tables processed in a database. For each table, a log entry is added showing th... by marc_ukg Explorer in Splunk Search 09-15-2020 0 4	0	4
Search bash_history Adhoc search of bash_history files and attempting to just pull out listing of commands regardless of the timestamp va... by p544gm Explorer in Splunk Search 09-15-2020 0 2	0	2
Average Failed Logins by Day of Week For Last 90 Days Greetings,The search I am using currently is giving me the total number of failed logins by day of the week for the l... by SplunkLunk Path Finder in Splunk Search 09-15-2020 0 5	0	5
transpose and xyseries Hi,I have search results in below format in screenshot1. I need that to be the way in screenshot 2. I used transpose ... by mbasharat Builder in Splunk Search 09-15-2020 0 1	0	1
How to compare counts on two different indexes on fields I have two indexes and it has similar fields and need to compare counts on these two indexes.For exampleIndex AId st... by AshChakor Path Finder in Splunk Search 09-15-2020 0 8	0	8