Splunk Search

Community Activity

How to use streamstats to evaluate events from different sourcetypes? Background: I'm trying to create a monthly report that tracks how many terminals we Add and how many terminals we Re... by bhavlik Path Finder in Splunk Search 06-15-2020 0 0	0	0
Splunk Web UI - Getting "Cannot get username when all users are selected" along with some web elements not loading Hi,We have setup our Splunk cluster, version 7.3.3 in AWS and seeing that on logging into splunk UI, some of the web ... by vtalanki Path Finder in Splunk Search 06-15-2020 0 4	0	4
Join fields with partly matching Hi All, I have query below that needs to modified for sub string matching condition - splunk query: sourcetype=sour... by msrama5 Explorer in Splunk Search 06-15-2020 0 3	0	3
How to get a column chart to show count between two dates?? Hi everyone, hope u r all doing good. So i have a query i am not able to figure out.I need to show a visualisation of... by nikitha15 Explorer in Splunk Search 06-15-2020 0 5	0	5
How to optimize the search with join command Hi, I have a query where I need to join it by a lookup to match the records. This is horribly slow and could be becau... by shashank_24 Path Finder in Splunk Search 06-15-2020 0 6	0	6
Search against lookup table with both CIDR and regular addresses I have a lookup table consisting of both CIDR addresses and regular x.x.x.x addresses under the field named "IP_Addre... by tromero3 Path Finder in Splunk Search 06-15-2020 0 0	0	0
How to count data from different time and use it in the same chart? Hi all, Can someone help me on this problem? I'm working on a dashboard that I need to show how many users logged in... by Batidou Loves-to-Learn in Splunk Search 06-15-2020 0 2	0	2
I lost all my account history and am unable to link to my old account since upgrade.. Hi, Since the new site I lost my old Splunk answers account. Or when I logged in there was no Splunk answers user lin... by zeemelaar Engager in Splunk Search 06-15-2020 0 1	0	1
Map command - How to make different searches in different indexes ? Hello, I am currently trying to relate "front" logs to "back" logs depending on their sessionIds and their timestamp... by bdfr49 Engager in Splunk Search 06-15-2020 0 4	0	4
Compare words in a string against all other words in another string Hi there, I'm new to Splunk, but I've been making some progress. I'm trying to compare traffic going from one zone t... by Logginz New Member in Splunk Search 06-15-2020 0 2	0	2
Concat 2 input file and apply on date search Hello, I have 2 input fields like :time_val: 1 (any number)(dropdown)time_span: Hour/Day/Month (value:[h,d@d,@w0,@m... by souradeepdas New Member in Splunk Search 06-15-2020 0 1	0	1
how to get both values after finding duplicate Hi I'm trying to find duplicate values of a field by using below query.index = internal source type="" Space="" App... by kirrusk Communicator in Splunk Search 06-14-2020 0 1	0	1
how to execute multiple saved searches Hi,I am currently using a scheduled search (or master search) that uses the Splunk REST API to get a list of specific... by vanvan Path Finder in Splunk Search 06-14-2020 0 2	0	2
Remove duplicate rows based on condition testName values 'VerifyBtagsTest' and 'Test_AcceptTAndCModal' values occurred 2 times wanted to take the latest exec... by nesa246 Engager in Splunk Search 06-14-2020 0 2	0	2
Get domain name from urls Hello,I'm trying get the domain name alone from any given urls. Please see the list of url formats i'm dealing with a... by Sagarvadlamani Engager in Splunk Search 06-14-2020 0 3	0	3
How do you search results produced from a timechart...by command? I have a query similar to below: ... \| timechart span=30s count by host resulting in output that looks like: _tim... by saltmills Explorer in Splunk Search 06-14-2020 1 8	1	8
Get number of occurrences of an event in a period over a larger period I would like to search for two consecutive ocurrences of an event (separated let's say 1 minute appart). I don't care... by fvarvar New Member in Splunk Search 06-14-2020 0 1	0	1
Join query with common fields from different logs Hello everyone,I need to find common fields from two different logs. After finding common fields I need to extract th... by alico Observer in Splunk Search 06-13-2020 0 3	0	3
How to pass parameters in custom search command without field camp? How can i run a search command passing an argument to python script via sys.argv? My script: import requests impor... by rmenchio Engager in Splunk Search 06-13-2020 0 2	0	2
how to pass arguments in custom search command Hi, I am trying to write a script in which i can pass arguments from search bar. My basic script $cat mytest.sh ... by kamal_jagga Contributor in Splunk Search 06-13-2020 0 3	0	3
Need help with REX, PLEASE Hello, I am new to using REX wich is I believe is what I need. I have a field that has data that looks like this...10... by nathbe01 Explorer in Splunk Search 06-12-2020 0 2	0	2
How to search data which is not present in the last 60 days Hi experts, I have a multiple errors like "*error occured" , "failed error ** " and etc, I need to check what ar... by james_n Path Finder in Splunk Search 06-12-2020 0 9	0	9
Search to find the total number of ALL searches across the deployment in 24h Hi there,Any thoughts on how I can get a list/count of all searches, both saved/ad-hoc etc that run on all servers in... by mwdbhyat Builder in Splunk Search 06-12-2020 0 1	0	1
Strip datetime and group by filename Hello,I have the following logs from CronFile successfully sent - AllOpenItemsPT_YYYYMMDD_HR-MM.csv.zip @08:00File su... by raghul725 Explorer in Splunk Search 06-12-2020 0 14	0	14
CLI search with FATAL: The search job terminated unexpectedly Hello,I try to export a large log with CLI search below. It works well with a smaller log return, but giving error on... by vnguyen46 Contributor in Splunk Search 06-12-2020 0 2	0	2