Splunk Search

Community Activity

Data not being displayed with previous working query. Hi Community, I've been using Splunk enterprise search and reporting since a month now and now when I try to search w... by siddharth1479 Path Finder in Splunk Search 01-07-2020 0 8	0	8
Highlight line chart depending on value from 2nd column. I have 2 columns. First column has values on which my splunk line chart is dependent on. Second column has values onl... by raj00350 New Member in Splunk Search 01-07-2020 0 2	0	2
Calculate Maximum transaction per seconds (TPS) day wise Hi, I want to calculate max TPS on a particular day for last 3 months for some specific URL's. I just have 5 URL's so... by Shashank_87 Explorer in Splunk Search 01-07-2020 0 0	0	0
What is the difference between a "lookup" and a "lookup file"? Wildly frustrated poring over the Splunk documentation -- there are absolutely no good introductions to any topic! An... by jkotula New Member in Splunk Search 01-07-2020 0 3	0	3
Issues with props.conf and EVAL function Hi, I am trying to add new evaluation for a field in search-time. For some reason, when I run query from my search h... by shayhibah Path Finder in Splunk Search 01-07-2020 0 1	0	1
Expand two multi value field with different format using mvexpand Trying to expand two multi value field using mvexpand for below scenario: Jhon purchased Mango and Banana both. Co... by ahmadshakir1952 Explorer in Splunk Search 01-07-2020 0 6	0	6
Overlay 2 time based grouped results in a Chart Given the 2 following searches which are both over a 30 day period (and each having multiple countries in the results... by GadgetGeek Path Finder in Splunk Search 01-07-2020 0 20	0	20
Different results using stats vs timechart I'm building a dashboard that shows a stacked column chart of different items sold in the last 6 months (using timech... by wu_weidong Path Finder in Splunk Search 01-06-2020 0 3	0	3
Are there any lint type tools for the Splunk SPL? As part of a testing plan, we would like to have a tool check syntax of our block of Splunk queries. Are there any ... by miburo Explorer in Splunk Search 01-06-2020 1 2	1	2
Is there any way to customize the default list of data fields collected by Splunk Mint iOS SDK? We are using Splunk Mint SDK in our iOS app. By default it collects a lot of fields listed here - https://docs.splunk... by gorbikvv New Member in Splunk Search 01-06-2020 0 0	0	0
How can I find out the average run time of a query? Based on Can I see the top skipped searches? I got a couple of offending queries, with a message such as - The maxim... by danielbb Motivator in Splunk Search 01-06-2020 0 3	0	3
Chart not sorting dates the way I would expect Hello everyone, I have a self-service dashboard running in our Splunk Cloud V6.2 environment which displays indexed... by jeck11 Path Finder in Splunk Search 01-06-2020 0 0	0	0
How to optimize a subsearch with a wide range? I have a subsearch that I use to determine the first occurrence of the issue logged. I currently have an earliest=-4d... by lmzheng Explorer in Splunk Search 01-06-2020 0 3	0	3
Exporting search results to Amazon S3 buckets How can I export my search results or send alert results to an AWS S3 bucket? by Vijeta Influencer in Splunk Search 01-06-2020 0 1	0	1
Search '!=' does not work after upgrading to Splunk 8 Anybody else having issues with search operator '!=' after upgrading to Splunk Enterprise 8? My search is index=myi... by girtsgr Explorer in Splunk Search 01-06-2020 2 17	2	17
Charting Assistance I'm having an issue with a visualization. Works fine if I don't try to do the fancy eval but won't plot out in visual... by yepyepyayyooo New Member in Splunk Search 01-06-2020 0 5	0	5
How many concurrent searches are possible in Splunk Cloud? Hello, I am considering migrating an environment to Splunk Cloud. How many concurrent searches are possible in the ... by LWilliamson1 Explorer in Splunk Search 01-06-2020 0 6	0	6
Combine result from 2 queries into same bar chart I see such questions are frequently asked on this forum, but I still don't get a clear picture yet. I have my first ... by hardywang Explorer in Splunk Search 01-06-2020 0 4	0	4
Compare field value from different sourcetypes to list the value of the third field Hi All, i have 2 files indexed as 2 different source types. In Sourcetype1 i created: 1. Field1 presents the value o... by mardix86 New Member in Splunk Search 01-06-2020 0 1	0	1
Using 'by' clause overrides 'limit'? I have used the following source="C:\Users\spali\Downloads\products\*" host="DESKTOP-K35HBNT" \| top product_name pri... by palisetty Communicator in Splunk Search 01-06-2020 0 2	0	2
How to extract the same URL with dynamic values such as Session ID,CategoryID? I want to group all the URL with dynamic values such as sessionid , category id ,etc, and display as 1 URL with count... by raghul1117 New Member in Splunk Search 01-06-2020 0 2	0	2
Can I see the top skipped searches? Is there a way to categorize the skipped searches by volume, by time of invocation, etc? We are trying to understand ... by danielbb Motivator in Splunk Search 01-05-2020 0 5	0	5
How can I find the related search job to an error message in splunkd.log Hi, we have an error message in splunkd.log. Error Message: "Invalid value "*" for time term 'earliest'" It happe... by dietertaucher New Member in Splunk Search 01-05-2020 0 1	0	1
what's max # events I can have timestamped with a particular second? millisecond? If that limit is breached, what will stop working? Is there a way to raise the limit? Merged question: I'm running... by V_at_Splunk Splunk Employee in Splunk Search 01-05-2020 6 15	6	15
Your search did not return any events because you are in Smart Mode. @gcusello @richgalloway @woodcock Your search did not return any events because you are in Smart Mode. In what all s... by palisetty Communicator in Splunk Search 01-04-2020 0 2	0	2