Splunk Search

Ask a Question

Discussions

Thread Info

Why am I getting error "File has no line endings" when trying to upload my lookup CSV file?

Every time I try I try to upload my CSV, I receive the following message: Encountered the following error while tr...

by Path Finder in

How do I use the rex field to extract the last digit from the time value in my sample data?

[2015-11-05 00:48:03,058] [/172.21.21.171:57533] [K123456789] created event: 8 How do I use rex field to extract ...

by New Member in

Convert Seconds To Hours, Minutes, Seconds and Milliseconds

Hi, I wonder whether someone may be able to help me please. Using a solution I found here I'm converting a fiel...

by Motivator in

How to set up search so that the events tab matches the logs corresponding to the statistics tab?

I've got the following search to identify when a user has more than 20 auth failures. I'm trying to find a way to re...

by Explorer in

Fetch the last 30 days values based on date value from a field.

Hi Experts, In this search i want to fetch results only from last 30 days to current. taken_date is one of the fie...

by Explorer in

Issues adding columns from a subsearch

My first subsearch – and its not going well. I have two queries I need to combine to get a single results table. M...

by Engager in

Align multiple charts in one panel horizontally

I am using Simple XML. I put 4 charts inside one Panel. Since I have other panels in the same row. I am struggling...

by Communicator in

Status of nested hourly fields within daily chart (Screenshot attached)

Hi All, I am fetching data from the data base and have the below fields (no raw time provided): 1. Date field (eg....

by New Member in

How can I delete the event data when some event fields value is "None" or "Nan" in Splunk?

Hello Guys,Sorry for blasting...When I input data into Splunk, I find some field values in the events are "None" or "...

by Engager in

using rex to extract from json

Hi, I'm working on a akamai json and I want to extract the OS name from the message.UA field. Basically, if you look ...

by New Member in

Accum statement

My data as following Location|No.of active US|200 UK|20 SZ|30 How to accum all those location by month by area cha...

by Explorer in

Hi , I want to show 3 data points/values/counts on each daily column for last 7 days in column chart, TIA.

Hi, Currently I am showing 1 datapoint per column with below query: application="my-app" "*test-path*" | rename te...

by Explorer in

Can I use splunk's time range in a calculation?

I have a question. Can I use splunk's time picker in a calculation? Now he always searches for 30 days |eval minP...

by New Member in

How to truncate the number of results in my table?

I have a table that shows me the username, the web resource they accessed, total number of times they accessed each f...

by Builder in

need help with forming a regex command for extracting some fields

Hi, Can someone please help in getting the field extracted: "x-hello-abc":["101.2.10.1, 102.3.4.3, 12.3.45.5"] ...

by Engager in

Assessing an Avg on an seen IP

Hello, I'd like to run an average over the course of May 16, 2020 (24-hours), on a particular IP address. I'd li...

by Communicator in

Why do we get this error when scheduling a search as a report: "line contains NULL byte")?

We have a search that runs fine but when we schedule it as a report, we don't get the e-mail and in _internal we see ...

by Motivator in

Tabulate list of exception in logs

Hi Splunkers, My logs are like below with same set of logs for different WAS ear's.. earFile=abc.ear .............

by Explorer in

How to find the User ID that was used for the original splunk installation

I want to upgrade a system. How do I find the ID for the user that installed it? Is it somewhere in the system?

by Explorer in

Can't we use NOT in searchmatch function

Hi Splunkers! I've a doubt regarding searchmatch function, when I tried excluding some string using NOT boolean in...

by Explorer in

Calculate disk space growth over time

I am providing summarized reports on disk space over several hosts using this query: index=os sourcetype=df host=h...

by Path Finder in

calculate min and max time of event

hello im trying to calculate min and max time of event (the time when the event started and when its ended) when im a...

by Communicator in

How to rex field in unstructured flat file events

I am breaking every line in flat file and trying to fetch the field using rex, this is how my events looks like: ...

by New Member in

extract json files fields

I have json logs that I want to extract.I did All items related to field extraction in props.conf file. my log {"expo...

by Explorer in

count problem

I have following dataemail|country|licenseaa|HK|365E1bb|US|365E2cc|HK|non-officedd|HK|non-officeee|UK|non-office I...

by Explorer in

Get Updates on the Splunk Community!

Splunk Search

Discussions

Why am I getting error "File has no line endings" when trying to upload my lookup CSV file?

How do I use the rex field to extract the last digit from the time value in my sample data?

Convert Seconds To Hours, Minutes, Seconds and Milliseconds

How to set up search so that the events tab matches the logs corresponding to the statistics tab?

Fetch the last 30 days values based on date value from a field.

Issues adding columns from a subsearch

Align multiple charts in one panel horizontally

Status of nested hourly fields within daily chart (Screenshot attached)

How can I delete the event data when some event fields value is "None" or "Nan" in Splunk?

using rex to extract from json

Accum statement

Hi , I want to show 3 data points/values/counts on each daily column for last 7 days in column chart, TIA.

Can I use splunk's time range in a calculation?

How to truncate the number of results in my table?

need help with forming a regex command for extracting some fields

Assessing an Avg on an seen IP

Why do we get this error when scheduling a search as a report: "line contains NULL byte")?

Tabulate list of exception in logs

How to find the User ID that was used for the original splunk installation

Can't we use NOT in searchmatch function

Calculate disk space growth over time

calculate min and max time of event

How to rex field in unstructured flat file events

extract json files fields

count problem

Can’t make it to .conf25? Join us online!

Community Content Calendar, September edition

Splunkbase Unveils New App Listing Management Public Preview

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Help me with splunk query to monitor CPU and Memor...

How can i export a list of all services in APM

Splunk Answers Content Calendar May 2025!

MLTKC how should i check jupyter notebook func in ...

ITSI thresholds: adaptive vs static

Splunk Search

Are you a member of the Splunk Community?

Discussions

Can’t make it to .conf25? Join us online!