Splunk Search

Community Activity

Log file validation based on serverhost and source Hi Team,For a business requirement, I need to validate log file generated for last an hour with combination of host a... by ganeshkumarmoha Explorer in Splunk Search 06-13-2024 0 2	0	2
Search for deleted Splunk users? I had some Splunk users who were deleted from UI Manager page. Is there some way to search for deleted Splunk users ... by the_wolverine Champion in Splunk Search 06-13-2024 1 6	1	6
Use timechart after stats command to show percentage of Successful transaction for each day Hi Team, I am trying to put conversion of transaction for all days of the week in a line chart for successful trans... by Jitendra33 Engager in Splunk Search 06-13-2024 0 1	0	1
Multiple operations from a single if condition Is it possible to action multiple operations in a single if condition, like what can be done in other languages?For e... by cjohnk Explorer in Splunk Search 06-12-2024 0 3	0	3
combine results from index search with fields machine inputlookup Newbie here. Trying get the results from the index to match result int he inputlookup to only return result from the ... by MH1 Engager in Splunk Search 06-12-2024 0 4	0	4
How to use variable on mvfilter regex match? If I used variable in the mvfilter match, i got the following errorError in 'EvalCommand': The arguments to the 'mvfi... by LearningGuy Motivator in Splunk Search 06-12-2024 0 3	0	3
Remove leading zeros from IP address using regex Hello All,I'm trying to remove leading zeros in IP addresses using rex and mode=sed . the regular expression I'm tryi... by Splunk_sid Explorer in Splunk Search 06-12-2024 0 4	0	4
How to handle JSON object extraction with tstats? Hi,I have the following JSON object that is indexed via the default JSON extraction (INDEXED_EXTRACTIONS){ "asset... by ClubMed Path Finder in Splunk Search 06-12-2024 0 5	0	5
https error percentage Hi,I am trying to get the error percentage of the https response request but its not working as expected. index="john... by harpr86 Explorer in Splunk Search 06-12-2024 0 2	0	2
spath - extracting data from groups within JSON Hi All, Hopefully someone can help with this. We have logs that contain JSON where one of the fields can have multi... by Mick_OBrien Path Finder in Splunk Search 06-12-2024 0 2	0	2
Concat query in Azure advanced hunting app Hi there,I am trying to get some data from MS Defender into a Splunk query. My original KQL query in azure contains \|... by heskez Engager in Splunk Search 06-12-2024 0 1	0	1
How can I add list of field values into an array I have a search that outputs the hostlist by test.index=abc \| stats count by host test \| stats count as total_count v... by power12 Communicator in Splunk Search 06-11-2024 0 3	0	3
How to extract the string which is between the two different special characters using regex Hi Team,I need to extract the string which is between the two different special characters using regex. Could you ple... by SureshkumarD Explorer in Splunk Search 06-11-2024 0 2	0	2
how do I create a variable(or new field name) with its value another field name This is my sample search/data: \| makeresults \| eval data = " 1 2017-12-01 00:00:00 A 0 131... by HattrickNZ Motivator in Splunk Search 06-11-2024 0 6	0	6
TRUCANTE Logs Hello,I am using Splunk Cloud, for some our sourcetypes we have defined specific TRUNCATE values. I have a couple of ... by andgarciaa Explorer in Splunk Search 06-11-2024 0 1	0	1
rename and add 2 count results Hello community,I'm having a problem with a probably stupid addition but I can't find a solution. I make a simple que... by Rajaion Path Finder in Splunk Search 06-11-2024 0 2	0	2
saved searches can I find all the saved searches which are using index=* rather than giving specific name. And all the saved searche... by Siddharthnegi Contributor in Splunk Search 06-11-2024 0 2	0	2
How to use token value in stats group by field in Splunk dashboard Hi Team,I have stats group by fields as token it will change dynamically based on time selection. for example if sele... by kasimanikandan Engager in Splunk Search 06-11-2024 0 3	0	3
Need to pull the Top 100 Hosts License Usage In Splunk Cloud Need to pull the License Usage in GB for the top 100 Host along with their respective Index Source and Souretype info... by anandhalagaras1 Contributor in Splunk Search 06-11-2024 0 6	0	6
trace if a server in a network path behind a firewall How do I trace if a server in a network path behind a firewall?The data is presented in the table below.For example: ... by LearningGuy Motivator in Splunk Search 06-10-2024 0 1	0	1
Conditional Search String based on Time Hi community, I need to write a query which can adjust its search string based on event time. For example, if the eve... by syk19567 Explorer in Splunk Search 06-10-2024 0 2	0	2
Getting different results in Splunk dashboard for different users I've made a dashboard to show some statistics on it. The information that appears on my dashboard differs from that o... by paragg Loves-to-Learn Lots in Splunk Search 06-10-2024 0 1	0	1
Splunk basic left join not working I am on Splunk 7.0.2 and trying to join two search strings with a common field but for reason this is not working. i... by karthikmalla Explorer in Splunk Search 06-10-2024 0 6	0	6
Embed Saved Search with API (preferably Python SDK) I'm programmatically generating saved searches with the Python SDK, which is great. I then want to embed those saved... by zcianflone Engager in Splunk Search 06-10-2024 0 1	0	1
Accelerating report that uses bucket _time Hi All,I have a report running every 6 hour with below search query. This is fetching hourly availability of haproxy ... by jpillai Path Finder in Splunk Search 06-10-2024 0 9	0	9