Splunk Search

Community Activity

	Compare today's search with yesterday's search Hello Team, I have below search but I want to compare today's data with Yesterday's data in same way this week data w... by chandukreddi Path Finder in Splunk Search 06-24-2020 0 1	0	1
	Combining searches that look for a lack of data without using append Hi All,Hoping someone can point me in the right direction with this one. The use case is there are some processes th... by hoangtony Explorer in Splunk Search 06-24-2020 0 1	0	1
	How to see the sequence of logs Hello, Is there any way, I can check the sequence of logs. For example:I have following list of msg 1. "Message arriv... by smahuja Explorer in Splunk Search 06-24-2020 0 2	0	2
	Event count variation between base and non-base search dashboard panels I have a dashboard which counts the number of times a user performed an action. I have 3 time frames (last 24h, 7d, ... by DEADBEEF Path Finder in Splunk Search 06-24-2020 0 2	0	2
	Select a column (named as days of the week) and copy over to a new column Hello,I have an inputlookup table (test.csv) with a few columns including 7 columns (for 7 days of the week) as shown... by rahul0621 Explorer in Splunk Search 06-24-2020 0 5	0	5
	Multiple Where Clause I'm running the below query across the network and would like it to pinpoint that search towards two users rather tha... by itsmevic Communicator in Splunk Search 06-24-2020 0 1	0	1
	Does Splunk Log if a lookup file is modified? Does Splunk generate logs when a lookup file is modified? I have some searches that use lookup files. I'd like to mo... by AndySplunks Communicator in Splunk Search 06-24-2020 0 2	0	2
	Scatterplot elapsed time by date with both earliest and latest query matches I'm trying to track the elapsed time it takes a user to complete a web application based on the earliest and latest o... by mrhodes93 Explorer in Splunk Search 06-24-2020 0 0	0	0
	How to attract a specific word from string using rex? Hello Splunk Experts!I have a string like belowrex " - - (?<text>foo\|bar) " \| .....I want to take the text when a wor... by thinhdinh Path Finder in Splunk Search 06-24-2020 0 5	0	5
	Distribution function using bin I am trying to create a PDF and CDF with limited amount of buckets:... \| bucket bins=10 fs as fsBinned\| stats count(f... by mtatulda New Member in Splunk Search 06-24-2020 0 0	0	0
	Extracting Key Value Pairs from a JSON object and convert them to fields Hello Splunk Community,We have two types of logs being forwarded to splunk a simple .log file and json logs that are ... by thenino Loves-to-Learn Lots in Splunk Search 06-24-2020 0 0	0	0
	How to find the no of days different between indexed date time and the field exists date in my search? Hi, i am new to splunk, i need to find the number of days different between indexed time date and the field exists da... by karunagaraprabh Explorer in Splunk Search 06-24-2020 0 14	0	14
	InfoSec App Datamodel Searches I'm trying to use the CIM to look at some firewall data in the InfoSec app. I've setup the event tagging and field al... by moogmusic Path Finder in Splunk Search 06-24-2020 0 0	0	0
	how to find differnce between epoch When i try to find the difference between two epoc1)find the days range i get blank values2) and i need to filter onl... by karunagaraprabh Explorer in Splunk Search 06-24-2020 0 2	0	2
	Repeat index and host time in tablerow Hi, i need index time and host time to repeat for each data for host, printedA_epoch & printedb_epoch, how can i achi... by karunagaraprabh Explorer in Splunk Search 06-24-2020 0 6	0	6
	eval status=if ("inputlookup line x<70% and x+1>50%) Boolean While Loop? Hello,I am looking for some help on status evaluation. What I am trying to do is create a eval column where you eithe... by wblewis Engager in Splunk Search 06-24-2020 0 5	0	5
	How to sum one field values based on other fields values i'm trying to sum one of the fields values based on the other field values.For exampleSource Remediated Space... by kirrusk Communicator in Splunk Search 06-24-2020 0 3	0	3
	inputlookup in search macro generates error message My search consists solely of a call to a search macro. It looks like this:`blabla1(host="blabla2", mon-host="blabla3"... by MarcRiese Explorer in Splunk Search 06-23-2020 0 5	0	5
	Use of predict command for alerting Well , I want to create an alert which alert me whenever there is spike in Errors. Currently we are comparing say pas... by ksharma7 Path Finder in Splunk Search 06-23-2020 0 2	0	2
	Using multivalue field as field-list for transaction When multivalue field is given as field-list for transaction, transaction does not attempt to combine the events desp... by Puliyo Engager in Splunk Search 06-23-2020 0 2	0	2
	How to fetch mathed fileds values from index with lookup table ? Hi Team,I tried all possibilities to extract the data from index which are matched field values with lookup table .th... by 90509 Engager in Splunk Search 06-23-2020 0 0	0	0
	How to optimize a search which contains a join of 2 queries having different time picker each ? Hi, I have a performance issue with a query using a "join" command.The problem is that the first search using a time ... by mah Builder in Splunk Search 06-23-2020 0 3	0	3
	I'd like to get an idea for data grouping. I have numeric data.I'd like to group the data.It is easy to use 'Kmeans' command, but it cannot be necessarily k=3.I... by youngrap Explorer in Splunk Search 06-23-2020 0 1	0	1
	Joining search in Splunk using Ticket Number Field Greetings, I am new to Splunk and I have an assignment where I needed to extract data based on ticket number and time... by leymandudu Explorer in Splunk Search 06-23-2020 0 8	0	8
	Regex assistance - Blacklist host. Team,I would like assistance with creating regex,specifically to blacklist 1 host name - happens to be the spunk serv... by jmasat Observer in Splunk Search 06-23-2020 0 5	0	5