Splunk Search

Community Activity

Metric Index problem with null values I am running Splunk Enterprise 8.0.1 monitoring files with a universal forwarder and putting info from csv files into... by drezanka Explorer in Splunk Search 02-26-2020 0 0	0	0
Compare columns in same table Hello, I have the following table: column1 column2 Andrew Andrew George George Paris Berlin I would... by carlospalma03 Engager in Splunk Search 02-26-2020 0 2	0	2
DB Connect - another "index 1 is out of range" - how to fix it? Trying to pull specific fields out of the database tables "LastContact" and listing the output with a timestamp (Last... by arimaldo Explorer in Splunk Search 02-26-2020 0 1	0	1
How do I do sparklines based on lookup table data Trying to create a sparkline from data in a lookup table monitor_user_traffic.csv has fields -user -traffic_dest_ip ... by MonkeyK Builder in Splunk Search 02-26-2020 0 3	0	3
Why Isn't My String Value (a multivalue field) Being Converted to a Number? Hello, I've checked many of the Answers pages, but to no avail. In my table, the value "appears" to be converted fro... by genesiusj Builder in Splunk Search 02-26-2020 1 2	1	2
How can I get the occurrence of a field in events as a percentage, when the field names are unknown (dynamic per event)? I have events with JSON in them and I need to know what % of the time each field appears. The fieldset in the events... by nicholmikey Explorer in Splunk Search 02-26-2020 0 4	0	4
GeoLite IPLocation discrepancy Good Afternoon everyone! We seem to be encountering a discrepancy with our IPLocation database. We're running Splun... by mbraiman Explorer in Splunk Search 02-26-2020 0 3	0	3
permissions are not granted for Office 365 Management Activity API and permissions are not granted for ThreatIntelligence Read not able to get logs into splunk regarding O365 Management activity and threatintelligence. due to this MSO365 app fo... by ashisrma New Member in Splunk Search 02-26-2020 0 0	0	0
delta command doesn't return accurate results if i have multiple delta in the search My search is index="xxx" sourcetype="yyy" topic=IN* \| stats list(message_count) as message_count by _time topic \| ... by ssyed2009 New Member in Splunk Search 02-26-2020 0 1	0	1
rex command help... Hi All, my data is like below-- I want to extract when it has string ignore numbers 853727-gcplusrspcndb01.usa.corp... by harishalipaka Motivator in Splunk Search 02-26-2020 0 6	0	6
How can I list all the scheduled searches? We have some spikes for concurrent search jobs? therefore, how can I list all the scheduled searches for a given mome... by danielbb Motivator in Splunk Search 02-26-2020 0 1	0	1
How to change the timechart x-axis label I did a timechart and span= 1w, my time range is from Jan1. 2020(Wednesday) but the label on x-axis is Mon Dec30. 201... by t900502 New Member in Splunk Search 02-26-2020 0 3	0	3
Looking for way to explain why subsearches are so slow I've seen it suggested before and definitely have witnessed myself that for searches involving any significant amount... by bcronrath Path Finder in Splunk Search 02-26-2020 0 1	0	1
change x axis value hi i plot a graph in the dashboard, the x axis is series from 1 to 2001 i want to replace 1-2001 to 500-3000 (yes, t... by erez10121012 Path Finder in Splunk Search 02-25-2020 0 0	0	0
Prevent Horizontal Overflow in TableView Hello, I am using the Splunk Web Framework TableView Component on a custom dashboard. I have enabled the "wrap" prop... by jinseong Path Finder in Splunk Search 02-25-2020 0 0	0	0
validate access to knowledge object Good afternoon I am trying to perform an audit of the environmental lookups and I need to know if there is any query... by efaundez Path Finder in Splunk Search 02-25-2020 0 1	0	1
How to search and isolate any multifields that equal true Hi all, I am racking my brains on this one. The business has built field names containing years and volumes in the... by stephenreece New Member in Splunk Search 02-25-2020 0 3	0	3
How to only keep the rows related with process Hello, in the below data I have a lot of processes and the ParentProcesses of them. I would like to keep only the ro... by vpaschalidis Loves-to-Learn in Splunk Search 02-25-2020 0 11	0	11
Lookup vs join with inputlookup We were testing performance and for some reason a join with an inputlookup is faster than a direct lookup. Sample que... by sboogaar Path Finder in Splunk Search 02-25-2020 0 2	0	2
How to export the key and values in a CSV format cf_app_id: ***************88 cf_app_name: *******888 cf_ignored_app: false cf_org_id: *************8... by harishhari390 New Member in Splunk Search 02-25-2020 0 1	0	1
Splunk Query provided wrong results Hello, Splunk query provided in correct responses. I have A query which filters the data on a specific day and prov... by Gowtham0809 New Member in Splunk Search 02-25-2020 0 6	0	6
Why is conditional stats count not working with basic example? The following query is pulled directly from the Splunk documentation and for whatever reason always returns 0, even w... by Cuyose Builder in Splunk Search 02-25-2020 0 3	0	3
lookup table question Hello everyone. Question: I'm periodically given a .csv file provided to me from a team in my company.I need to cre... by shandman Path Finder in Splunk Search 02-25-2020 0 1	0	1
Field extraction for Log File Entries with Pipe delimiters Hi, I have a log file I am monitoring. Log file entries have pipe delimited field entries as below: LE Variation 1:... by mbasharat Builder in Splunk Search 02-25-2020 0 6	0	6
How to calculate percentage based on 2 different searches? Greetings to the pro's, I have 2 panels, one brings me the Total Active Hosts and the other brings me the Total Host... by albinortiz Engager in Splunk Search 02-25-2020 0 11	0	11