Splunk Search

Community Activity

How to get evaluated result for every item in list I have the following working Query for a single product AHSDFKSD1 ns=a* DECISION IN (ELIGIBLE, INELIGIBLE) PRODUCT I... by angersleek Path Finder in Splunk Search 05-26-2020 0 2	0	2
Calculating the average duration of an entire group Good morning Splunkers, I trust everyone is remaining safe. Ultimately, I'm attempting to obtain the overage connecti... by yepyepyayyooo New Member in Splunk Search 05-26-2020 0 2	0	2
Subsearch multi queries Hi Team I have requirement to get api's triggered by per custkey in a single query query 1: /token host="test-host-... by srinivreddy New Member in Splunk Search 05-26-2020 0 4	0	4
Queries Template for McAfee ePO Hello everyone, We just integrate Splunk with McAfee ePO via DB Connect. We're trying to get some informations from... by raphaalmeida New Member in Splunk Search 05-26-2020 0 6	0	6
Why aren't alerts triggering in my search on Splunk 8? I created an alert w/ a basic search: index=_internal \| stats count Cron Expression: /1 * * * Al... by guo_dc Explorer in Splunk Search 05-26-2020 0 3	0	3
inputlookup csv I setup testing.csv lookup as followinghost,location123,HK234,US345,UK I would like to basic search if host matched i... by keyu921 Explorer in Splunk Search 05-25-2020 0 3	0	3
How to configure Chrome as a search engine for Splunk queries? Hi there, I couldn't find this question already on here. Hopefully it's a simple one. I use Splunk regularly in my ... by oxnard Engager in Splunk Search 05-25-2020 6 6	6	6
How to represent fluctuating values? Hi all, I have this search: \|table a b date \|eval c=a-b \|stats sum() as by date date a b c 2019-01 5 3 2 2019-02... by pipipipi Path Finder in Splunk Search 05-25-2020 0 1	0	1
CSV lookup only updating 10 entries in the same day. II am using this lookup for bot status. I am using the "submit" button to save the status info. (disconnected or con... by hrs2019 Path Finder in Splunk Search 05-25-2020 0 5	0	5
Rename command What does \|rename field* AS * do. How to rename the fields when there are more no.of fields. Thanks by prettysunshinez Explorer in Splunk Search 05-24-2020 0 1	0	1
How to create "for cycle" routine to generate panels/rows from a search using Splunk XML? Hi. I would like to know if there is a simple way, via Splunk XML, to create a "for cycle" like routine, to generate ... by verbal_666 Builder in Splunk Search 05-24-2020 0 6	0	6
Adding First Column to the Table I'm generating the output for Column 2, 3 from search. I want to add column to the start of the table. In the below ... by dustintroop Explorer in Splunk Search 05-24-2020 0 9	0	9
search string containing alphanumeric characters and square brackets Hello, I have the following lines in logs [Kafka Server 4], shut down completed (kafka.server) [Kafka Server 4], sta... by raghul725 Explorer in Splunk Search 05-24-2020 0 5	0	5
Use of == with or operator I want to compare some data with fields and then rename the data matched with fields. Since we have large set of data... by arabhi New Member in Splunk Search 05-24-2020 0 2	0	2
Add a for loop on eval command for number of hosts Hi, i have a query that returns two lines of results based on two hosts. i then get a result from another query that... by ssaenger Communicator in Splunk Search 05-24-2020 0 2	0	2
Plot response time from this log Hi There, Thanks in advance. I am trying to plot a graph with the request time for each request on the y-axis and m... by parekhdevang New Member in Splunk Search 05-24-2020 0 2	0	2
Rename "other" in result set When making a graph, I get my result set, limited to the number of results I wish to see. The remaining results are c... by M__rt_n New Member in Splunk Search 05-24-2020 0 7	0	7
Get values of several series during same timespan that the maximum of one series during a day Hi, I built a report that list daily maximums and averages of counts per hour on several days. (difficult to put it ... by gregory_cordier Explorer in Splunk Search 05-23-2020 0 1	0	1
Discrete count on a condition Hi Splunk team, I am trying to run a command below, I need my end output as dc(totalCustomers) and dc(Customers_520E... by priya777 New Member in Splunk Search 05-23-2020 0 1	0	1
calculate Difference between 2 time fields is not working. I tried to difference between 2 dates. It is not working properly. Here is my query, index=s_iss sourcetype=S_AD \| ... by nivethainspire_ Explorer in Splunk Search 05-23-2020 0 2	0	2
Transaction command over a large dataset Hi all, Hoping someone can give some pointers how to solve this problem: I run a transaction command on the last t... by brabagaza Explorer in Splunk Search 05-23-2020 0 7	0	7
inputlookup followed by transaction - No results found So I do the following search: \| inputlookup x \| transaction y y and z are a fields in lookup table x but the searc... by landen99 Motivator in Splunk Search 05-23-2020 0 3	0	3
How to display events in table format when same value appears multiple times? Is there a way to display events in a table when the same value appears multiple times with other values? I am lookin... by rkeq0515 Path Finder in Splunk Search 05-22-2020 0 1	0	1
How to use xmlkv in field extraction to identify values in XML? I have a huge XML file with many tiers. I use this command to limit the number of events for the XML data that I want... by 3618475 Engager in Splunk Search 05-22-2020 0 1	0	1
How to display nested tables? My events looks like this: REQUEST_NAME is the common field that ties both request and services. LogType=REQUEST st... by amerineni Loves-to-Learn in Splunk Search 05-22-2020 0 1	0	1