Splunk Search

Community Activity

How can I delete the event data when some event fields value is "None" or "Nan" in Splunk? Hello Guys,Sorry for blasting...When I input data into Splunk, I find some field values in the events are "None" or "... by samfisher1 Engager in Splunk Search 05-27-2020 0 2	0	2
using rex to extract from json Hi, I'm working on a akamai json and I want to extract the OS name from the message.UA field. Basically, if you look ... by gds506 New Member in Splunk Search 05-27-2020 0 1	0	1
Accum statement My data as following Location\|No.of active US\|200 UK\|20 SZ\|30 How to accum all those location by month by area chart... by keyu921 Explorer in Splunk Search 05-27-2020 0 2	0	2
Hi , I want to show 3 data points/values/counts on each daily column for last 7 days in column chart, TIA. Hi, Currently I am showing 1 datapoint per column with below query: application="my-app" "test-path" \| rename test... by neha_h Explorer in Splunk Search 05-27-2020 0 2	0	2
Can I use splunk's time range in a calculation? I have a question. Can I use splunk's time picker in a calculation? Now he always searches for 30 days \|eval minPer... by markin0s New Member in Splunk Search 05-27-2020 0 0	0	0
How to truncate the number of results in my table? I have a table that shows me the username, the web resource they accessed, total number of times they accessed each f... by DEAD_BEEF Builder in Splunk Search 05-27-2020 0 2	0	2
need help with forming a regex command for extracting some fields Hi, Can someone please help in getting the field extracted: "x-hello-abc":["101.2.10.1, 102.3.4.3, 12.3.45.5"] Ple... by s0m073r Engager in Splunk Search 05-27-2020 0 8	0	8
Assessing an Avg on an seen IP Hello, I'd like to run an average over the course of May 16, 2020 (24-hours), on a particular IP address. I'd like... by itsmevic Communicator in Splunk Search 05-27-2020 0 3	0	3
Why do we get this error when scheduling a search as a report: "line contains NULL byte")? We have a search that runs fine but when we schedule it as a report, we don't get the e-mail and in _internal we see ... by danielbb Motivator in Splunk Search 05-27-2020 0 1	0	1
Tabulate list of exception in logs Hi Splunkers, My logs are like below with same set of logs for different WAS ear's.. earFile=abc.ear ................. by thaara Explorer in Splunk Search 05-27-2020 0 4	0	4
How to find the User ID that was used for the original splunk installation I want to upgrade a system. How do I find the ID for the user that installed it? Is it somewhere in the system? by jlongworth Explorer in Splunk Search 05-27-2020 0 1	0	1
Can't we use NOT in searchmatch function Hi Splunkers! I've a doubt regarding searchmatch function, when I tried excluding some string using NOT boolean insi... by sarahnazzar Explorer in Splunk Search 05-27-2020 0 1	0	1
Calculate disk space growth over time I am providing summarized reports on disk space over several hosts using this query: index=os sourcetype=df host=hos... by jackpal Path Finder in Splunk Search 05-27-2020 0 0	0	0
calculate min and max time of event hello im trying to calculate min and max time of event (the time when the event started and when its ended) when im a... by sarit_s Communicator in Splunk Search 05-27-2020 0 7	0	7
How to rex field in unstructured flat file events I am breaking every line in flat file and trying to fetch the field using rex, this is how my events looks like: 98... by jhantuSplunk New Member in Splunk Search 05-27-2020 0 3	0	3
extract json files fields I have json logs that I want to extract.I did All items related to field extraction in props.conf file. my log {"expo... by khanlarloo Explorer in Splunk Search 05-26-2020 0 9	0	9
count problem I have following dataemail\|country\|licenseaa\|HK\|365E1bb\|US\|365E2cc\|HK\|non-officedd\|HK\|non-officeee\|UK\|non-office I wo... by keyu921 Explorer in Splunk Search 05-26-2020 0 3	0	3
Unable to get the matching files using join command. We used the inner join command to get the matching files. However, the same command does not work with the current fo... by chinmay25 Path Finder in Splunk Search 05-26-2020 0 6	0	6
How to search buckets to find one index of many, and limit how many to unfreeze? After searching the answered questions, I do not see my question addressed. If I have several indexes that are frozen... by stevenshea New Member in Splunk Search 05-26-2020 0 3	0	3
Timechart - How to add trendlines based on column total Hi, I am new to splunk and trying to create a timeline with several individual calculated trend lines, but I simply c... by hethu Path Finder in Splunk Search 05-26-2020 0 3	0	3
How to split event data? Hi! In the Event column, I get the following: 26/05/2020 11:24:51 > Invoice Val Increase on History Report process c... by nwoolley Engager in Splunk Search 05-26-2020 0 2	0	2
The maximum number of concurrent historical scheduled searches on this instance has been reached I often see the below entries in the scheduler.log[1] which are getting skipped. We have 15 alerts set in which 2 run... by pdantuuri0411 Explorer in Splunk Search 05-26-2020 1 3	1	3
split transactions in exported excel Hello, I have a list of strings that are more meaningful when grouped and viewed together by time. This is great and... by user93 Communicator in Splunk Search 05-26-2020 0 2	0	2
How to create an alert threshold for value by count (current search gives error "Application.errorMessage)? I have a search using timechart count by [value] and I'd like to set up an alert for when any of the values reach mo... by trever Loves-to-Learn in Splunk Search 05-26-2020 0 0	0	0
How to convert time format? I have a column duration with this time format: 01:20:00.000000. How do I convert time format from 01:20:00.000000 ... by ashanka Explorer in Splunk Search 05-26-2020 0 3	0	3