Splunk Search

Community Activity

	How to display only the test name if key "failure" is in the same object in JSON event I am sending sauce labs test results to splunk and they are in this format: { "testsuite": { "@name": "'PR-108... by sloh_splunk Splunk Employee in Splunk Search 08-10-2020 0 3	0	3
	How to make table from two queries with common field HiI have one index with two sources (source=source1 and source2). Both events have two common fields (common_field1 a... by edrivera3 Builder in Splunk Search 08-10-2020 0 4	0	4
	issue with dividing two numbers Hi, Can someone help me with this.I have fields with values SP=3390510 and TP=3394992I am trying to get Success per... by sravankaripe Communicator in Splunk Search 08-10-2020 0 1	0	1
	Dedup field values using if"match"? Hello all, I am attempting to put together a search where I'm taking website status (200=allowed, etc) and breaking i... by BB34 Explorer in Splunk Search 08-10-2020 0 6	0	6
	Saving License on Windows Events - Regex "This event..." Hi! i've been trying to regex some part of the windows events to save license. Many windows events contains a large p... by dieguiariel Path Finder in Splunk Search 08-10-2020 0 9	0	9
	Can't get timechart average to work I'm trying to get the average time that a case is open in a system.To get the latest event per case that's closed and... by benhooper Communicator in Splunk Search 08-10-2020 0 13	0	13
	How to search span for 1 day and 2 hours ? This is my query and I have some challenges in the log. The thing is my daily job will start at 11 PM. If the job run... by karthi2809 Builder in Splunk Search 08-10-2020 0 6	0	6
	How can I compare values from a lookup and alert when there is no mach? Hi, I have a lookup tables with user names (ftp_users.csv).Every day I'm getting one line from a particular system wi... by yossefn Path Finder in Splunk Search 08-10-2020 0 5	0	5
	Tstats Summary Join Different Search Ranges Hey Guys,I am struggling arround a few days now, but I cant find a good/efficient solution for my problem.I want to c... by sarausch New Member in Splunk Search 08-10-2020 0 3	0	3
	SPL Search - Alert if not true (transaction) I have written a rule that is trying to use a transaction and based on the transaction value to either alert or not. ... by willadams Contributor in Splunk Search 08-09-2020 0 1	0	1
	How to change a single panel color based on text result with unit format ? HiIn the search below, I would be able to change the background color following the value of the FreeSpace fieldIt wo... by jip31 Motivator in Splunk Search 08-09-2020 0 9	0	9
	Comparisons If suppose i have two Phases with first and last datePhase 1=1 JAN 2020, 1 March 2020Phase2=1Apr 2020,1jun 2020if i g... by renuka Path Finder in Splunk Search 08-09-2020 0 7	0	7
	How to calculate Uptime? Splukers, I want to calculate uptime for my network. By this I mean, I need uptime in hours like time diffrence betwe... by amandeepsingh Explorer in Splunk Search 08-09-2020 0 6	0	6
	How to change the background color table fieldname Can some one please help me to change the background color of Table fieldname.By default I am getting the fieldname b... by skodak Explorer in Splunk Search 08-09-2020 0 4	0	4
	Timechart of values This is probably a really simple question but I have events coming in every minute.I've used \| rex field=_raw .... t... by tbrown Path Finder in Splunk Search 08-09-2020 0 2	0	2
	How to set a splunk token in a search query I've created a text form input called 'username' to search for usernames in my dashboard panels and i've set the toke... by rkris Explorer in Splunk Search 08-09-2020 0 3	0	3
	Search Json Field Using Dynamic Variable Hello, I have json data and I am trying to search a specific field using a dynamic variable. I can properly search if... by joemarty82 Explorer in Splunk Search 08-09-2020 0 5	0	5
	How do i extract backdoor info from a linux log file into my splunk dashboard ? splunk_qns3_p1.PNGsplunk_qns3_p2.PNGsplunk_qns3_p3.PNGsplunk_qns3_p4.PNGsplunk_qns3_p5.PNGI have uploaded the log fil... by rkris Explorer in Splunk Search 08-08-2020 0 1	0	1
	Why do i get 'Search is waiting for input' error? I've created a dropdown field for New User Accounts Created(Failed Attempts)splunk_qns_p1.PNG And this is the search ... by rkris Explorer in Splunk Search 08-08-2020 0 1	0	1
	How do i extract virus info from a linux log file into my splunk dashboard ? splunk_qns2_p3.PNGsplunk_qns2_p2.PNGsplunk_qns2_p1.PNGI have uploaded the log file containing the virus information ... by rkris Explorer in Splunk Search 08-08-2020 0 1	0	1
	use source within map command Hi,I have several log files that I´m "batch indexing".for example: file01.log file02.log file03.log file04.log Now I´... by chrkohm Path Finder in Splunk Search 08-07-2020 0 4	0	4
	stats count by generating inconsistent result I have a very simple search:index=logs_glbl sourcetype=kube:container:app-name namespace=prod status=500 \| stats coun... by noman377 Explorer in Splunk Search 08-07-2020 0 2	0	2
	How to extract multiple values for multiple fields within a single event? I have syslogs from our load balancer which has 4 servers on it.When one of the servers states changes from UP to DOW... by cbwillh Path Finder in Splunk Search 08-07-2020 0 9	0	9
	How to combine two field values into one I have got a query like this index=* request in (request1, request2, request3)eval request&& = request1 + request2Pl... by skodak Explorer in Splunk Search 08-07-2020 0 3	0	3
	Table with true and false (column) counts for specific users (rows) Hi there, I have just started using Splunk and it is quite alien to me. Hope you guys can help me out! I have the fo... by Matthew86 Explorer in Splunk Search 08-07-2020 0 2	0	2