Splunk Search

Community Activity

How to calculate the percentage and create an alert condition that triggers for a drop of 5%. My Search has the below format data. A single host has multiple parameters consists of LED 1..to.20 for each TV and ... by pkumar2 Explorer in Splunk Search 05-15-2020 0 9	0	9
How to post a bulletin message that is visible for everyone via Splunk WebUI? I am trying to post a bulletin message via the Splunk WebUI. Strangely enough it does not seem to be visible to anyon... by jthunnissen Path Finder in Splunk Search 05-15-2020 0 5	0	5
Splunk Alert when search result drop below defined threshold possibile? Hello fellow splunkers, i want to create an alert for the following search. The search creates a statistics matrix wh... by vessev Path Finder in Splunk Search 05-15-2020 1 6	1	6
How to chart total runtime for the last 15 days for a job running overnight? I have to report out my job logs which spans from night 9PM to Morning 10AM. I have a field called total_run_time an... by sjafferali Explorer in Splunk Search 05-15-2020 0 1	0	1
Is it possible to extract the field name itself from the logs I have a data source where the log format is the same but one attribute changes for various logs. I want to extract t... by anubhp New Member in Splunk Search 05-15-2020 0 3	0	3
Difference in columns as output of 2 different searches Hello , I have data from 2 diff source with same fields as shown below : index= sourcetype= source= test.txt device... by atulitm Path Finder in Splunk Search 05-15-2020 0 2	0	2
Bar + line in chart? I have two types of events, where the important data looks like this: [ { "acknowledged": false, "time": 1... by robingg New Member in Splunk Search 05-15-2020 0 2	0	2
Calculating 5xx error and getting alerted Hi all, Well i have a data and i want to get alerted when we hav spike in 5xx errors corresponding to endpoints. All... by ksharma7 Path Finder in Splunk Search 05-14-2020 0 4	0	4
How can I count which different lines My Data as followingAA \|\| Disabled \|\| Region11@abc.com \|\| Yes \|\| HK12@abc.com \|\| No \|\| US13@abc.com \|\| No \|\| US14@abc... by keyu921 Explorer in Splunk Search 05-14-2020 0 1	0	1
how to match value in events using Rex Hi experts, please help me with regular expression to match the value in each event at search time as shown below ... by james_n Path Finder in Splunk Search 05-14-2020 0 4	0	4
Re design fields and values I have fields as shown below: _time field1 field2 2020-05-12 40-35-32 ... by Muwafi Path Finder in Splunk Search 05-14-2020 0 2	0	2
sort not working as expected I used the following query where I used '-' just beside "Total bytes" without space. As per my understanding, if we h... by palisetty Communicator in Splunk Search 05-14-2020 0 4	0	4
Help with segmenters.conf search. I tried to segment the log below using \s but it does not work, even after modifying segmenters.conf and props.conf.... by khalidewaidah Explorer in Splunk Search 05-14-2020 0 0	0	0
o365:management:activity field extractions Has anyone had any success writing field extractions for O365 based events collected via the API? The messages that ... by adalbor Builder in Splunk Search 05-14-2020 0 4	0	4
How to get list of users for specific search,How to get list of users for message Hi All, I am very new to splunk, wanted to get the list unique users for below criteria. I need query to get the ac... by rajawccm16 Engager in Splunk Search 05-14-2020 0 3	0	3
Separate multiple same name Multivalue fields We are trying to alert on O365 service messages data. Under the "Messages" multivalue field, we are trying to pull th... by joeybroesky Path Finder in Splunk Search 05-14-2020 0 4	0	4
How to restrict one group to see only 1 log file in Splunk I have the following from a client: I was about to make is for a new AD group “Splunk_CAPS_CAS_Payments” so that they... by nls7010 Path Finder in Splunk Search 05-14-2020 0 2	0	2
how to add a new column to existing inputlookup Hi Experts, Hi have existing inputlookup file like test.csv which contains 3 fields like host source sourcetype, i w... by james_n Path Finder in Splunk Search 05-14-2020 0 1	0	1
How to do log analysis using splunk I am working on approach to upload logs to splunk,I have set of queries to query in logs and extract the values.How t... by srinivas0704 New Member in Splunk Search 05-14-2020 0 11	0	11
Extract an value from logged sentence Hi, I'm trying to make a Splunk panel display a value from a log that gets added to every 4 minutes. I need to be abl... by j3r0n Explorer in Splunk Search 05-14-2020 0 3	0	3
regex only first occurrance logs source=/api/docker/docker-snapshot-demo/v2/pdap/pdap-validator-router/manifests/1.0.aws source=/api/docker/docke... by sreesh New Member in Splunk Search 05-14-2020 0 4	0	4
Get fields associated with the earliest event in a search Hi all, I am still a Splunk novice but I am looking for some help using the earliest command. I am calculating a du... by aaloisi Explorer in Splunk Search 05-14-2020 0 4	0	4
Splunk Regular Expression Hello, Attached here the list of roles we have. But my regular expression is showing results of only RSI - VPN Use... by vasuparvatham New Member in Splunk Search 05-14-2020 0 6	0	6
Workflow actions ranking order Hello Experts, We are having list of workflow actions in field menu and event menu which are sorted alphabetically. M... by xoriantkbisht Explorer in Splunk Search 05-14-2020 0 0	0	0
match dates between an appencol and inputlookup I have a search from an input looup and i have appended search results from an index so i can overlay some results bu... by Sfry1981 Communicator in Splunk Search 05-14-2020 0 5	0	5