Splunk Search

Community Activity

Correlate one field with other field to locate repeated value aid SHAabc 12345 12345ujdk ... by kuriakose Explorer in Splunk Search 06-26-2020 0 2	0	2
The values of the table are made to come to the start of the column instead of filling zeros Hi,I am writing a search to create 3 columns of data P,F and C based on Teams.The table which I expect is thisTeamsPC... by priyaramki16 Path Finder in Splunk Search 06-26-2020 0 2	0	2
TimeChart Display query result in text format Hello, I have a timechart with multiple fields, I want to append existing query or add new query to display one field... by smahuja Explorer in Splunk Search 06-26-2020 0 3	0	3
How can I merge search results from two different indexes based on common fields? Hi everyone,I'd be eternally grateful if someone could help point me in the right direction here. I'm trying to outpu... by driva Path Finder in Splunk Search 06-26-2020 0 1	0	1
How to pass list string as an arguments to Splunk macro Hi Splunk experts,I am a new face here. I have a task for multiple alerts creating. I am wondering is it possible to ... by thinhdinh Path Finder in Splunk Search 06-26-2020 0 9	0	9
Retain special characters at the end of field value I have an ID among other things that is extracted by Splunk DB Connect from a mySQL database. Whats special with the... by okheggdal Explorer in Splunk Search 06-25-2020 0 0	0	0
Filtering fields using a common field in two different sourcetypes fields in sourcetype1 --> A,B,C, txid ( always has a value)fields in sourcetype2--> D,E,F, txid ( may occur value for... by infotork Explorer in Splunk Search 06-25-2020 0 1	0	1
I need to split the requestPath eliminating the data Hi,Need one Help. I have the below mentioned requestPath where I am able to capture the whole path..But can't take a ... by vijaysubramania Path Finder in Splunk Search 06-25-2020 0 4	0	4
Monitoring .txt file, indexation problem \| inputlookup file.csv \| search NOT [search index=sph \| dedup DMC \| table DMC ] \| dedup numberIn my scenario I have t... by medsy Explorer in Splunk Search 06-25-2020 0 0	0	0
Join and pass value to sub search HI Team,I would like to use join to search for "id" and pass it to sub search and need the consolidate result with ti... by harkirat9712 Explorer in Splunk Search 06-25-2020 0 4	0	4
Search optimization for rare event and date other than _time I am want to improve the response time for search with rare event and searching with date variable.Note: I am interes... by yogip86 Explorer in Splunk Search 06-25-2020 0 2	0	2
how to compare and replace fields value on an indexA from a different fields on indexB Hi,I have an an indexA which have logs which includes data in each raw like:User=11111,Language=English,Usage=btn_sec... by skylabsit Engager in Splunk Search 06-25-2020 0 3	0	3
How to exclude web crawlers from site traffic Hi, I'm trying to exclude as many crawl bots from my search and show only human hits on our website. I found the sear... by chuckeelos New Member in Splunk Search 06-25-2020 0 1	0	1
Search based on results of another search? Is it possible to perform a search on a whole dataset using a subset of terms from a previous search? For example, I... by lnetherton Engager in Splunk Search 06-25-2020 2 4	2	4
Need help in eval case - nested eval possible ? I've created a summary index where it contains 6 eval cases,for example: eval 1=case(match(something,"a",...."b","c")... by gopiven Explorer in Splunk Search 06-25-2020 0 0	0	0
Count To Boolean Hi All,I have a requirement wherein I count a specific log in the last minute. The count is supposed to be 1. I need ... by sharadrk Engager in Splunk Search 06-25-2020 0 4	0	4
uas_lookup error Hi all, I am using this plugin in order to extract the info from User Agent: uas_lookupSPL looks like this:"mysearch.... by me74fhfd Path Finder in Splunk Search 06-25-2020 0 0	0	0
Display count of two field in a same dashboard I have two fields in two different log lines and want result something like below sample table :-product_code_pauseco... by naved77 Loves-to-Learn Lots in Splunk Search 06-25-2020 0 0	0	0
Parse decoded HTTP data Hi all, I am new to Splunk and trying here to parse decoded HTTP data to table with unique fields like "Method", "URI... by me74fhfd Path Finder in Splunk Search 06-25-2020 0 2	0	2
correlating of events I want to correlate the login events of aws console to login events of cyberark.people login to aws console via cybe... by ayu15 Engager in Splunk Search 06-24-2020 0 3	0	3
Compare today's search with yesterday's search Hello Team, I have below search but I want to compare today's data with Yesterday's data in same way this week data w... by chandukreddi Path Finder in Splunk Search 06-24-2020 0 1	0	1
Combining searches that look for a lack of data without using append Hi All,Hoping someone can point me in the right direction with this one. The use case is there are some processes th... by hoangtony Explorer in Splunk Search 06-24-2020 0 1	0	1
How to see the sequence of logs Hello, Is there any way, I can check the sequence of logs. For example:I have following list of msg 1. "Message arriv... by smahuja Explorer in Splunk Search 06-24-2020 0 2	0	2
Event count variation between base and non-base search dashboard panels I have a dashboard which counts the number of times a user performed an action. I have 3 time frames (last 24h, 7d, ... by DEADBEEF Path Finder in Splunk Search 06-24-2020 0 2	0	2
Select a column (named as days of the week) and copy over to a new column Hello,I have an inputlookup table (test.csv) with a few columns including 7 columns (for 7 days of the week) as shown... by rahul0621 Explorer in Splunk Search 06-24-2020 0 5	0	5