Splunk Search

Community Activity

After 10000 records in lookup, new records are not getting appended. Any solution? Hi,I have used the below saved search to append the data every 15 mins into the lookup file. I use the lookup file in... by spkriyaz Path Finder in Splunk Search 06-26-2020 0 6	0	6
Looking to rewrite a join across several indexes with somewhat unusual relationships (I am reposting this question from email, with permission from the person who emailed)I need to basically join 3 inde... by sideview SplunkTrust in Splunk Search 06-26-2020 0 5	0	5
Using fireall logs to find hosts that do not use a specific protocol I have the following query for PAN firewall logs:index=pan app=ssl\| stats count by srcThis would give me a list of al... by john_byun Path Finder in Splunk Search 06-26-2020 0 3	0	3
Summary Index - Eval Issue - Need both combined & segregated data Hi Splunk ExpertsI've created a summary index where it contains 6 eval cases, for example:eval 1=case(match(something... by gopiven Explorer in Splunk Search 06-26-2020 0 3	0	3
How to show data from different regions as Today's Hi Splunkers,I have different queries that get the age of a ticket only counting the business hours. I need to do dif... by Wheresmydata Explorer in Splunk Search 06-26-2020 0 3	0	3
Splunk is not working. localhost refused to connect. This site can’t be reached localhost refused to connect. Did you mean http://localhost8000.com/? Search Google for lo... by clgzcom New Member in Splunk Search 06-26-2020 0 12	0	12
How to find last of A and first of B in one query? Considering the following two messages: sourcetype="PCF:log" cf_app_name=app1 msg="launch processing started" UserID:... by mrhodes93 Explorer in Splunk Search 06-26-2020 0 3	0	3
read (or get) file data without monitoring how can i read or get data from .txt file without monitoring(indexing) the file data. by medsy Explorer in Splunk Search 06-26-2020 0 1	0	1
timechart to display calculated values Trying to display Percentages on Timechart , but it's not working. Base search \| fields APP Usage_kb \| eval Usage_gb=... by kirrusk Communicator in Splunk Search 06-26-2020 0 3	0	3
Correlate one field with other field to locate repeated value aid SHAabc 12345 12345ujdk ... by kuriakose Explorer in Splunk Search 06-26-2020 0 2	0	2
The values of the table are made to come to the start of the column instead of filling zeros Hi,I am writing a search to create 3 columns of data P,F and C based on Teams.The table which I expect is thisTeamsPC... by priyaramki16 Path Finder in Splunk Search 06-26-2020 0 2	0	2
TimeChart Display query result in text format Hello, I have a timechart with multiple fields, I want to append existing query or add new query to display one field... by smahuja Explorer in Splunk Search 06-26-2020 0 3	0	3
How can I merge search results from two different indexes based on common fields? Hi everyone,I'd be eternally grateful if someone could help point me in the right direction here. I'm trying to outpu... by driva Path Finder in Splunk Search 06-26-2020 0 1	0	1
How to pass list string as an arguments to Splunk macro Hi Splunk experts,I am a new face here. I have a task for multiple alerts creating. I am wondering is it possible to ... by thinhdinh Path Finder in Splunk Search 06-26-2020 0 9	0	9
Retain special characters at the end of field value I have an ID among other things that is extracted by Splunk DB Connect from a mySQL database. Whats special with the... by okheggdal Explorer in Splunk Search 06-25-2020 0 0	0	0
Filtering fields using a common field in two different sourcetypes fields in sourcetype1 --> A,B,C, txid ( always has a value)fields in sourcetype2--> D,E,F, txid ( may occur value for... by infotork Explorer in Splunk Search 06-25-2020 0 1	0	1
I need to split the requestPath eliminating the data Hi,Need one Help. I have the below mentioned requestPath where I am able to capture the whole path..But can't take a ... by vijaysubramania Path Finder in Splunk Search 06-25-2020 0 4	0	4
Monitoring .txt file, indexation problem \| inputlookup file.csv \| search NOT [search index=sph \| dedup DMC \| table DMC ] \| dedup numberIn my scenario I have t... by medsy Explorer in Splunk Search 06-25-2020 0 0	0	0
Join and pass value to sub search HI Team,I would like to use join to search for "id" and pass it to sub search and need the consolidate result with ti... by harkirat9712 Explorer in Splunk Search 06-25-2020 0 4	0	4
Search optimization for rare event and date other than _time I am want to improve the response time for search with rare event and searching with date variable.Note: I am interes... by yogip86 Explorer in Splunk Search 06-25-2020 0 2	0	2
how to compare and replace fields value on an indexA from a different fields on indexB Hi,I have an an indexA which have logs which includes data in each raw like:User=11111,Language=English,Usage=btn_sec... by skylabsit Engager in Splunk Search 06-25-2020 0 3	0	3
How to exclude web crawlers from site traffic Hi, I'm trying to exclude as many crawl bots from my search and show only human hits on our website. I found the sear... by chuckeelos New Member in Splunk Search 06-25-2020 0 1	0	1
Search based on results of another search? Is it possible to perform a search on a whole dataset using a subset of terms from a previous search? For example, I... by lnetherton Engager in Splunk Search 06-25-2020 2 4	2	4
Need help in eval case - nested eval possible ? I've created a summary index where it contains 6 eval cases,for example: eval 1=case(match(something,"a",...."b","c")... by gopiven Explorer in Splunk Search 06-25-2020 0 0	0	0
Count To Boolean Hi All,I have a requirement wherein I count a specific log in the last minute. The count is supposed to be 1. I need ... by sharadrk Engager in Splunk Search 06-25-2020 0 4	0	4