Splunk Search

Community Activity

	How to extract portion of the different strings using Regex? Hi Eveyone, Can anyone help me out in this. I have a field name Request_URL which is different each time. Below ar... by aditsss Motivator in Splunk Search 08-21-2020 0 10	0	10
	Analyzing logs Hi Guys,I was hoping you can help me.I am using Splunk to analyze some logs that I got from a company, but I don't ... by eparmeza New Member in Splunk Search 08-21-2020 0 1	0	1
	Filter on table with javascript (not on the search for the table) Hi,I have made a (html) dashboard with a table and a search. Now, I would like to add some filtering, but i want to f... by ThibaultC Loves-to-Learn Lots in Splunk Search 08-21-2020 0 0	0	0
	How to add in timechart on an addcoltotals search Hello I am running the following search, which works as it should. What I am trying to build off of it is a way to ad... by eb1929 Explorer in Splunk Search 08-21-2020 0 2	0	2
	Using transforms and props to search and replace multiple fields in an event If I have an event that looks like this: META1 META2 {foo:bar,color:green,size:medium} some text ({client: x, ip: z}... by brettcave Builder in Splunk Search 08-21-2020 0 5	0	5
	Convert a time field and use that time to search Hi,I have a search which returns a filed name: create_time and the results are like this: 2020-08-11T17:10:00+0000Wha... by FraserC1 Path Finder in Splunk Search 08-21-2020 0 3	0	3
	DB Query Hi All,Can someone advice what is wrong with this following query.\|dbquery wmsewprd "select * from sys_code_type whe... by rahul2gupta Path Finder in Splunk Search 08-21-2020 0 3	0	3
	Predicting when sourcetypes will send data - map command too slow Hi,I have hundreds of sourcetypes and the intervals when sourcetypes are sending data are not realtime, some are send... by jorjiana88 Path Finder in Splunk Search 08-21-2020 0 3	0	3
	How to add a pop-up message to a table? HelloI have a table in dashboard like below when I hover my mouse on any of the result a pop-up should appear and sho... by vinod0313 Explorer in Splunk Search 08-21-2020 0 1	0	1
	Fetch incident from subject I am using below query to fetch Incident from the subject line:—rex field=subject max_match=0 “(?<Incident>INC\d+)”ho... by priya0709 Path Finder in Splunk Search 08-21-2020 0 4	0	4
	splunks HelloI have a log as shown belowFeatureDetails [tokenValidatorInfo=false, requestValidationRequired=false, requestPa... by vinod0313 Explorer in Splunk Search 08-21-2020 0 7	0	7
	Eval a token value and pass it on a search Hi,I have a dashboard where I have a drop down which returns me a string. The xml of the drop down is below:<input ty... by subhrangshu Explorer in Splunk Search 08-21-2020 0 4	0	4
	Scheduled search shows no events, but later searching the same time frame shows that there were There is a search that runs every 30 minutes and normally it runs okay. But in few instances seemingly at random the ... by PeterWalker8 New Member in Splunk Search 08-21-2020 0 0	0	0
	automatic lookups I've got 3 automatic lookups:host::ORAC : LOOKUP-game titlegame_titles id AS title_id OUTPUTNEW publisher_id AS publi... by friskyapple Explorer in Splunk Search 08-21-2020 0 2	0	2
	Regex for fetching number how to use regex yo fetch Incident (eg: INC0000453245 or INC0000342568)to fetch INC and exactly 10 numbers after INC?... by priya0709 Path Finder in Splunk Search 08-21-2020 0 1	0	1
	strftime day and month: Splunk vs Python My question is about day and month components of a date without leading zeroes.Python docs provide %-d and %-m respec... by pm771 Communicator in Splunk Search 08-20-2020 0 1	0	1
	How to share ML fit result to multiple tiles in dashboard I have a custom ML model which does anomaly detection and once the fit and apply is done , i need the ML result to be... by kumarviv Explorer in Splunk Search 08-20-2020 0 0	0	0
	how to chnage "mmss" format strings to mm:ss format I have searched this but I have not found a suitable answer yet,Here I have a field as belowtime"0""7""56""101""3045"... by K2 Engager in Splunk Search 08-20-2020 0 2	0	2
	Combining similar results If I have the below results:server_name secondary_idserver1 KB4571703server1 KB4570508server1 KB4566425server2 KB4578... by FraserC1 Path Finder in Splunk Search 08-20-2020 0 2	0	2
	force dynamic multiselect to set its default to all possible values returned from the search Hi there!I have a multi-select input that gets dynamically populated by a search and I would like it to automatically... by azulgrana Path Finder in Splunk Search 08-20-2020 0 1	0	1
	Help getting search that includes LOOKUP that are merged into one row for each result I am trying to get the following results for date, email and answer with the other data into separate rows:Results I ... by CSULeigh Explorer in Splunk Search 08-20-2020 0 1	0	1
	Search for events occurring outside of two different transactions. I have the following scenario:There are two transactions that I want to monitor. Both occur randomly, and multiple ti... by tbrown Path Finder in Splunk Search 08-20-2020 0 0	0	0
	Need help selecting values from two events and calculating percentage change Hello,First of all, thanks for any help you may be able to give me. I would appreciate some help with a problem I'm h... by jmattheson Engager in Splunk Search 08-20-2020 0 3	0	3
	unable to add input to yahoo api Hi team, i was trying to add input for yahoo api , getting below error . Argument validation for scheme=yahoo_weat... by sunfacepriya New Member in Splunk Search 08-20-2020 0 1	0	1
	Storing queried data so that it can be accessed across search head clusters attached to the same idexer I have begun to accumulate some reference information about my company's AWS environment based on a bunch of queries.... by MonkeyK Builder in Splunk Search 08-20-2020 0 2	0	2