Splunk Search

Community Activity

Multiple Server New Field Can we create a new field which contains the group of multiple servers name and that field I can use directly in all ... by Chirag812 Explorer in Splunk Search 08-06-2024 0 2	0	2
Regex issue Hi Teami am trying to make below field regex which is coming in every single event. but its not allowing me to use sa... by cbiraris Path Finder in Splunk Search 08-06-2024 0 3	0	3
How to loop through times for same search Hi Splunk Experts,I'm not sure how easy it's using Splunk, I've a field (_time) with list of epoch_time values in it.... by Thulasinathan_M Contributor in Splunk Search 08-06-2024 0 2	0	2
How to extract the json based key value pair for defined match? below is my json file. I want to notify whenever there is a change in last property , "displayName": Included Update... by nb662x Observer in Splunk Search 08-06-2024 0 6	0	6
Fill field with first value I have a data set for web traffic. A sessionID ties all traffic for an individual browsing session together - all ev... by cxs6345 Engager in Splunk Search 08-05-2024 0 1	0	1
Regex to query csv raw data I have a CSV raw data which has files names and data inside the files which is seperated by double quotes and comma. ... by ravir_jbp Explorer in Splunk Search 08-05-2024 0 14	0	14
Getting unique values of a field. Hi all. I have a field called TaskAction that has some 400 values. But, I only want the distinct values of that field... by splunkpoornima Communicator in Splunk Search 08-05-2024 17 4	17	4
How to use eval with If ,AND Hello Splunkers,I have the following query returning the search results, index="demo1" \| search "metrics.job.overall_... by Gaya3_devi Explorer in Splunk Search 08-05-2024 0 3	0	3
Optmise dedup Splunk search Hi - I am looking to optimise this search by removing dedup, the idea of the search is to remove duplicate paymentId... by tomjb94 Observer in Splunk Search 08-05-2024 0 1	0	1
Export I want to export results of a search in pdf format but it shows by Siddharthnegi Contributor in Splunk Search 08-05-2024 0 1	0	1
Users who are logged in right now Hey, Is there a search that shows all of the users that are logged in to my Splunk instance right now? I have some ... by Ant1D Motivator in Splunk Search 08-04-2024 5 11	5	11
Stuck in writing complex query I want to get below in single query1. dc of field1 overall2. dc of field2 by field1 by Pathik Path Finder in Splunk Search 08-04-2024 0 4	0	4
splunkd_ui_access logs Im trying to create some dashboards to make reading _internal logs easier. I'm trying to figure out what all for the ... by Abass42 Communicator in Splunk Search 08-03-2024 0 2	0	2
How to extract a csv data fields message data into fields? I have a field message that whenI run the search index=example123 host=5566 \|search "specials word" I table message... by Cheng2Ready Communicator in Splunk Search 08-02-2024 0 6	0	6
[Advice/Help] Lookup Table search taking long Hello All, Can ya'll give me advice on why my query taking so long? In a dashboard it just times out and regular verb... by Player01 Engager in Splunk Search 08-02-2024 0 3	0	3
Field from Automatic Lookup (KV Store) not usable I have a KV Store with replicate turned on, a lookup definition with WILDCARD(match_field), and an automatic configur... by ejwade Contributor in Splunk Search 08-02-2024 0 7	0	7
How to join two queries and show not contain value Good day, I am pretty new to Splunk and want a way to join two queries together.Query 1 - Gives me all of my assets \|... by JandrevdM Path Finder in Splunk Search 08-02-2024 0 4	0	4
Want To extract values from query output and create a table Here is the my output data. i want to create a table for path and responsetime . can you please help.Expecting output... by RKP Loves-to-Learn Everything in Splunk Search 08-02-2024 0 16	0	16
Emulating FULL OUTER JOIN Hi, I have to tables: ID name 1..A 2..B ID Error 1..bla1 1..bla2 so Id like a table which is like the following... by andreafebbo Communicator in Splunk Search 08-02-2024 3 12	3	12
BIN - incorrect buckets In my case there is an index with field OP which has a duration TT . Of course there are a lot of records with differ... by kp_pl Path Finder in Splunk Search 08-02-2024 0 5	0	5
Reuse token across different indexes/ searches HiBased on a Multiselect reading from index="pm-azlm_internal_prod_events" sourcetype="azlm" I define a token with t... by Ste Path Finder in Splunk Search 08-01-2024 0 3	0	3
Find all assets in splunk Hi, I am new to Splunk and would like to build a dashboard to find all hosts in environment. This should query all lo... by JandrevdM Path Finder in Splunk Search 08-01-2024 0 4	0	4
Field that exist is not showing in search report Hello all,I have a query which creates a table similar to the following: \| table S42DSN_0001 S42DSN_0010 The table po... by trevor7 Engager in Splunk Search 08-01-2024 0 3	0	3
unable to use loadjob to access field value of a previous savedsearch I am trying to get value of a field from a previous scheduled savedsearch in a new field using loadjob, however unabl... by newsplunker2024 Explorer in Splunk Search 08-01-2024 0 9	0	9
Log Analysis Request for IP Address Values I need to perform an analysis based on a lookup file named checkin_rooms.csv, which includes a column confroom_ipaddr... by Tajuddin Explorer in Splunk Search 08-01-2024 0 2	0	2