Splunk Search

Community Activity

How to return events in the original, actual sequence as appear in the log file? Hello experts and splunkers, I have batch job log files being indexed into Splunk. The actual log looks like below.... by takashi6 Explorer in Splunk Search 03-29-2020 0 8	0	8
Issue with generating a table from accelerated data model with default fields and internal fields, Hello, 1st off I hope everyone out there is staying safe an healthy. As a result of wahats going on I am being aske... by wolanm1 Explorer in Splunk Search 03-29-2020 0 6	0	6
Question on calculating statistics for a field with different values in one event I have a difficulty in calculating statistics when different (multiple) values are present for a field in the same ev... by prettysunshinez Explorer in Splunk Search 03-29-2020 0 4	0	4
How to filter duplicate KV entries? Hi guys, I was wondering if someone could point me in the right direction with an issue I've been having. Basical... by RHogg Engager in Splunk Search 03-29-2020 0 2	0	2
How do I avoid using an eval for a fixed value parameter in a custom command? Hello, I have a custom command, let's call it customcommand. This command takes two parameters, parameter1 and para... by andrewtrobec Motivator in Splunk Search 03-29-2020 0 1	0	1
I need help me using dedup and dc count? I have the following search based on this i just want to see unique values for the search index=one eventtype=one_t... by sunnyft Explorer in Splunk Search 03-28-2020 0 11	0	11
Search uniq into array, new search Where uniq array into another search to get percentage Hi, Can you please point me into right direction or already answered good topic about one Splunk search where I have ... by jbanhome New Member in Splunk Search 03-28-2020 0 2	0	2
Time difference calculation between events grouped under transaction command I have an use case to calculate time difference between events grouped together by transaction command. Example is gi... by M46196 Engager in Splunk Search 03-27-2020 0 3	0	3
Is it possible to use an extracted field inside a regex? Hi I already extracted a field (block_num) in my event, but now I would like to use it as part of a new regex. I wa... by edrivera3 Builder in Splunk Search 03-27-2020 0 26	0	26
Join (Inner or left) or Eval to join events from same source via common field logs from an email server throws multiple events (each a different detail) for one email and each event has a numeric... by kelie Path Finder in Splunk Search 03-27-2020 0 3	0	3
Change colour of column based on variable/token Hi, I have a table with 2 columns and I want to change the colour of one of them based on whether or not its bigger ... by jimmyting93 New Member in Splunk Search 03-27-2020 0 7	0	7
if satisfy stat count by eval1 else stat count by eval2 Hi bro, I have a problem with display next version to compare with current version selected The code bellow is work, ... by akira2211 Explorer in Splunk Search 03-27-2020 0 5	0	5
From InputStream to JsonArray I would like to know how to get a Json array from an InputStream Object. Actually I am trying to store some splunk r... by kalyani1184 New Member in Splunk Search 03-27-2020 0 3	0	3
Obtain a count of hits in a query of regexes I am searching for a list of regexes in a splunk alert like this: ... \| regex "regex1\|regex2\|...regexn" Can I modi... by kimberlytrayson Path Finder in Splunk Search 03-27-2020 0 2	0	2
Summary of stats from multiple events for each identifier based on specific columns by combining Hi.. I have a dataset with each identifier having multiple events. Each event can have a TransactionType which can ha... by pavanml Path Finder in Splunk Search 03-27-2020 0 5	0	5
Summarize IDs from several log entries Hey, i have a Firewall Log and want to count the sending/receiving domains. My problem is that there is for one em... by friziqz New Member in Splunk Search 03-27-2020 0 1	0	1
Remove irrelevant 0's from a field value Hey, I have a field called externalID with values like the following 1766000000009834 1766000000009835 176600000000... by paulw10 Explorer in Splunk Search 03-27-2020 0 6	0	6
Start and Endtimes I have this scenario: log 1: contains - message: "app started" _time: 1234 log 2: message: "ended" _time: 1235 re... by ibekacyril Explorer in Splunk Search 03-27-2020 0 4	0	4
Where is the "state" information stored? How can I create this filter? Hi all, I'm trying to create a view according to "geo_us_states" for Germany. So far I was able to add/create the ... by MMCC Path Finder in Splunk Search 03-27-2020 0 10	0	10
Not able to convert field from string to number The below is my query to extact fields from screenshot attached. index=*** host=* source=**** \| rex field=... by nilbak1 Communicator in Splunk Search 03-26-2020 0 4	0	4
Display "Zero" when 'stats count' value is '0' I would like to display "Zero" when 'stats count' value is '0' index="myindex" "client.ipAddress" IN ( 10.12.12.13... by sriniavula66 New Member in Splunk Search 03-26-2020 0 2	0	2
Splunk Field Extraction inside a bracket Hi All, Is there any faster way to extract fields with this format on props and transforms file? like Key value pair... by jadengoho Builder in Splunk Search 03-26-2020 0 4	0	4
Why is my map command returning an error when there are no results from the main search? Hi, I'm having issues where the map command returns an error when there are no results from the main query. In my us... by packland Path Finder in Splunk Search 03-26-2020 1 13	1	13
How to sum up numeric value for a matching string pattern? Hi, I have following pattern in my logs and i have need to sum up the numeric values. I want to sum up how many prod... by modipawan8126 New Member in Splunk Search 03-26-2020 0 5	0	5
rex and eval I have a rex statement that parses multiple events and extracts the servers and its state:, something like below. in... by garumuga New Member in Splunk Search 03-26-2020 0 2	0	2

Get Updates on the Splunk Community!

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

AI is one of the biggest topics in the market today, and for security teams, its value goes far beyond the ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

[REGISTER HERE] This thread is for the Community Office Hours session on Detection Engineering Office Hours: ...

Splunk Search

How to return events in the original, actual sequence as appear in the log file?

Issue with generating a table from accelerated data model with default fields and internal fields,

Question on calculating statistics for a field with different values in one event

How to filter duplicate KV entries?

How do I avoid using an eval for a fixed value parameter in a custom command?

I need help me using dedup and dc count?

Search uniq into array, new search Where uniq array into another search to get percentage

Time difference calculation between events grouped under transaction command

Is it possible to use an extracted field inside a regex?

Join (Inner or left) or Eval to join events from same source via common field

Change colour of column based on variable/token

if satisfy stat count by eval1 else stat count by eval2

From InputStream to JsonArray

Obtain a count of hits in a query of regexes

Summary of stats from multiple events for each identifier based on specific columns by combining

Summarize IDs from several log entries

Remove irrelevant 0's from a field value

Start and Endtimes

Where is the "state" information stored? How can I create this filter?

Not able to convert field from string to number

Display "Zero" when 'stats count' value is '0'

Splunk Field Extraction inside a bracket

Why is my map command returning an error when there are no results from the main search?

How to sum up numeric value for a matching string pattern?

rex and eval

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation