Splunk Search

Community Activity

join multiple searches into field values I would like to create Cache_Hit, Cache_Miss and Revalidate_Hit based on the below and doisplay them in the pie graph... by glennstolz New Member in Splunk Search 05-07-2020 0 3	0	3
How can we deal with a negation of a transaction? We have a working code that captures transactions from the firewall into the windows servers and all is perfect as th... by danielbb Motivator in Splunk Search 05-07-2020 0 2	0	2
Bundle reload is in progress. Waiting for all peers to return the status. My splunk environment is: 1 Search Head 1 Deployment Server (Master Node) 2 Indexers (Cluster) I tried to implement ... by phanichintha Path Finder in Splunk Search 05-07-2020 0 2	0	2
subtract meterRead from Yesterday’s meterRead My electric meter sends a number but I want to subtract the current from the number an hour ago, so I can chart the u... by myron12 Explorer in Splunk Search 05-07-2020 0 8	0	8
How do I change the value of a field if a condition occurs? Hi community! I'm using Splunk Entreprise to create dashboards with my client's ServiceNow incident information. My... by diogenesloazeve Engager in Splunk Search 05-07-2020 0 10	0	10
Weekly Average Append Subsearch Optimization Hello, I have a search where I would like to compare the count of one search result against its running weekly averag... by jasonmadesometh Explorer in Splunk Search 05-07-2020 0 3	0	3
Summarized mail with multiples reports as single Pdf Hello Team, I have requirement that is I need to send the schedule mail with PDF which should contain the multiple re... by a5pw7zz New Member in Splunk Search 05-07-2020 0 1	0	1
How to join and get stats from same index? Hi Experts, I have data set like below from same index but from different sourcetype, common field on which I can j... by vikas_gopal Builder in Splunk Search 05-07-2020 1 2	1	2
Checking latest version of microservice I have got a query to check container metric for micro-services. There are currently multiple versions of micro-servi... by bsaujla131984 Path Finder in Splunk Search 05-07-2020 0 1	0	1
Why does my division of two fields return nothing? I have the following query that is inteded to divide the "stats.hypervisor_cpu_ppm" field by 10000 and then show that... by sjcoluccio67 Explorer in Splunk Search 05-07-2020 0 16	0	16
Need every time interval as a row even though the count of records is 0 in that interval Hi, I am using below query to get the stats o/p of Total, Failure & Failure percent by couple of fields for every 15 ... by poddraj Explorer in Splunk Search 05-07-2020 0 4	0	4
Why am i unable to search a value in an extracted field? I have a log file with three lines. 09-05-2018 10:12:15,123 ABC12I_AAA 09-05-2018 10:12:15,123 ABC12I_BBB 09-05-2018... by gtonti Explorer in Splunk Search 05-07-2020 1 7	1	7
color a splunk table collumn based on value I have a statistical table with rows and columns I need to color a particular column values either red or green based... by architkhanna Path Finder in Splunk Search 05-07-2020 0 2	0	2
Howa to Extract only MPid field with the value from the raw data. hello all How to Extract only MPid field with the value from the raw data. so that MPID=127746 i can list {"MPid":... by hrs2019 Path Finder in Splunk Search 05-07-2020 0 2	0	2
count number of grouped events hello i have this query : index="prod" eventtype="csm-messages-dhcpd-lpf-eth0-sending" OR eventtype="csm-messages-dh... by sarit_s Communicator in Splunk Search 05-07-2020 0 2	0	2
How to do the addition of content loaded from a Page Hi, I have a requirement where I have a page say https://www.abc.com/mobile and this page loads various assets like c... by Shashank_87 Explorer in Splunk Search 05-06-2020 0 4	0	4
Regex to match part of a multiline string delimited by timestamps I'm searching through several long blocks of free text (from a csv file uploaded into splunk) and I'm interested in t... by anelson1 New Member in Splunk Search 05-06-2020 0 11	0	11
E-Mail notification with table How can I insert a table in the e-mail notification message? Can I solve that with normal html codes? by igschloessl Explorer in Splunk Search 05-06-2020 0 1	0	1
Finding last event What is the best (the most efficient) way of finding last (the most recent) events for certain hosts? For example, I... by bojanz Communicator in Splunk Search 05-06-2020 3 8	3	8
How to compare when a field value changes from current to previous? I am looking to find events where IP address changes from previous to current, however using fist(ip) and last(ip) ... by Glasses Builder in Splunk Search 05-06-2020 0 4	0	4
extract custom filed and display value in the table output Query index=java networkenv=prod stackenv=prod source="/opt/jboss/standalone/custom_engine.log" \|convert ctime(_time)... by narenpg Explorer in Splunk Search 05-06-2020 0 5	0	5
How can i aline the field output in the table so that it ll not take more space. Hi everyone, How can i aline the field output in the table so that it ll not take more space. if you see in the scre... by hrs2019 Path Finder in Splunk Search 05-06-2020 0 2	0	2
Is there a way to remove extra separator(s) when using the strcat command? I have a search that is using the strcat command to string together text fields. My data looks something like this Na... by scottrunyon Contributor in Splunk Search 05-06-2020 0 3	0	3
Extract field with regex issue I'm trying to only extract the value of 'value' with regex. 2020-03-04 12:14:26,363 - measurement:34- sensor=43, va... by j3r0n Explorer in Splunk Search 05-06-2020 0 2	0	2
subquery not returning results Hi, I have two queries one from 1st_index and another from 2nd_index both are separately are giving correct outputs ... by surekhasplunk Communicator in Splunk Search 05-06-2020 0 2	0	2