Splunk Search

Community Activity

	Filtering Hosts within a Transaction So I have a search that is structured as follows index=main <filtering for start and end events> OR <filtering for ev... by tbrown Path Finder in Splunk Search 07-30-2020 0 4	0	4
	Search and compare data within 3 fields to find positive and negative matches I have a search yielding data from three different email fields, call them msg.header.to{}, msg.header.cc{} and orig_... by Glioblaster Explorer in Splunk Search 07-30-2020 0 6	0	6
	Cannot convert a rex pattern variable to use in a chart I have the following splunk event:2020-Jul-30 18:19:02.891Z level=DEBUG thread=https-jsse-nio-2720-exec-9 pid=20 code... by gsbpp Explorer in Splunk Search 07-30-2020 0 2	0	2
	How to search for machines that are not reporting? We are using 100+ machines...Could you please help me in splunk search...The scenario is I am having 100 machines and... by shweths New Member in Splunk Search 07-30-2020 0 3	0	3
	How to merge two charts which have different stats by in Splunk Hi, I wanted a single graph to show values. One search is index="cumu_open_csv" Assignee="ram"\| eval open_field=if(i... by priyaramki16 Path Finder in Splunk Search 07-30-2020 0 6	0	6
	Lookback search for related event I'm trying to perform a search that will be used for a notable event that looks for the creation of a load balancer l... by tbrus Engager in Splunk Search 07-30-2020 0 2	0	2
	trying to generate an alert but The problem is that the logs are different Good morning, I am trying to generate an alert for productive applications when they are in "debug" modeThe problem i... by yeisonv Explorer in Splunk Search 07-30-2020 0 7	0	7
	How to filter out the logs during indexing using regex? Hi Team, I want to filter out the logs during the indexing level itself i.e. If the event comes with the following fo... by anandhalagaras1 Contributor in Splunk Search 07-30-2020 0 6	0	6
	How to pass the time of a transaction to drill down for custom search I have a panel on my dashboard that is a list of transactions. I edited the drill-down to link to the search of the t... by tbrown Path Finder in Splunk Search 07-30-2020 0 2	0	2
	How to display a latest time or last received time from a custom time field. Hi Folks, I am been trying to display latest time results. I have a logs where time stores under a custom field (Patc... by inayath_khanin Explorer in Splunk Search 07-30-2020 0 4	0	4
	Why am I getting this error when using regex for URI search? I have the following query to search results which contain a specific rest endpoint which has a UUID path parameter: ... by ghildiya Explorer in Splunk Search 07-30-2020 0 3	0	3
	How to retrive a Date column from another search(index) Hello Everyone!I have a scenario to get a Date column from index1 in search1 and remove the rows with null values in ... by kiru2992 Path Finder in Splunk Search 07-30-2020 0 9	0	9
	Hide/reset drill down panel/fields Hi,I have my dashboard with two views --radio buttonView AView BView A has 2 panels and view B also has 2 panel and i... by vikashperiwal Path Finder in Splunk Search 07-30-2020 0 1	0	1
	Single value from multiple values renuka_0-1596095140908.pngIn my data i am getting multiple dates for single id.i need only recent date for each date.... by renuka Path Finder in Splunk Search 07-30-2020 0 4	0	4
	How do I show/hide panels based on multiple checkboxes? I have multiple checkboxes which depending on the selections, it would hide or show different panels. Consider one pa... by timyong80 Explorer in Splunk Search 07-30-2020 0 1	0	1
	How do I set up a static start time in alerts? How do I set up a static start time in alerts? I want my search to run from say June 15, 6:00 AM to now. The start ti... by aniketb Path Finder in Splunk Search 07-30-2020 0 2	0	2
	eval if to post on part of a string I have a question on the use of eval on a UA String. I want to do a lookup on a UA String and call out the version of... by Bassik Path Finder in Splunk Search 07-29-2020 0 11	0	11
	Filtering values within JSON searching Hi, i'm trying to filter values greater than zero.I have this search: index="prod_super_cc" source=ETL_GRO_01ReadMess... by Rodrigo_Larios Explorer in Splunk Search 07-29-2020 0 4	0	4
	How to extract multiple values with the same delimiter? Hi I'm trying to regex my way into this puzzle, let me explain my problem. event 1 (field 2) raw value = log:word1 lo... by christopheducha Explorer in Splunk Search 07-29-2020 0 2	0	2
	How to rename fields having the same name in JOIN command? Hi, I am executing a right join on two searches. Unfortunately, both search results have the same field names. How ca... by piscriddo New Member in Splunk Search 07-29-2020 0 2	0	2
	What’s wrong with Splunk search? HiI have several log files that add to Splunk, now try to search this string:index="Myindex" \| search "HQL query plan... by indeed_2000 Motivator in Splunk Search 07-29-2020 0 1	0	1
	Reading an Environment Regkey and using in Searches I am trying to figure out the best way to utilize a regkey we set on Windows server which indicates the Environment t... by jeffbat Path Finder in Splunk Search 07-29-2020 0 0	0	0
	How to wrap text in Show Source How do you wrap text in the "Show Source" page, after clicking on Events Actions > Show Source? by kristenlim New Member in Splunk Search 07-29-2020 0 0	0	0
	How to increase execution speed of multiples searches in Splunk JavaScript Web Framework? Hi all,I have developed an app that has a custom dashboard. On that custom dashboard, I am using Splunk's JavaScript ... by umairahmad3985 Path Finder in Splunk Search 07-29-2020 0 0	0	0
	Splunk search to find ip suspicious address that have accessed a host How to find ip suspicious address that have accessed a host? I have a list of host ip's,but I need a splunk search th... by ephrem3232 Explorer in Splunk Search 07-29-2020 0 1	0	1