Splunk Search

Community Activity

Limiting duration to 2 decimal places (without round function) Hello, I was using the round function in my search to limit the results to 2 decimal places. I have gotten it to wor... by harshparikhxlrd Path Finder in Splunk Search 12-02-2019 0 1	0	1
Can anyone suggest how I can create a join query using pattern Eg eg in fuse.log I have a entry like userId=abc while in access.log i have entry like sessionid-12232 \| abc \| xyz O... by ayush8878 New Member in Splunk Search 12-02-2019 0 5	0	5
Field extraction not working (props.conf) I have one props placed in location , opt splunk etc apps appname local props Below is the code [db_accounts] ... by pal_sumit1 Path Finder in Splunk Search 12-02-2019 0 1	0	1
How to remove a row in a table _time A B C D 6:05 1 1 5 8 6:10 0 3 2 2 6:15 5 0 6 2 6:20 8 9 2 7 6:25 9... by kishan2356 Explorer in Splunk Search 12-02-2019 0 4	0	4
InputLookup search query Hello everyone! My initial search give me events with the URLs that users clicked using the outlook client. After a... by dyrm1 New Member in Splunk Search 12-02-2019 0 8	0	8
single value visualization sorting issue Hi, i have a query which sorts the results, but when i change it to single value its not getting sorted can anyone h... by Puvi New Member in Splunk Search 12-01-2019 0 4	0	4
Visualizations: Why is there a dot in my time chart graph? Just want to ask why sometimes there is a dot in my time chart graph? and how to erase that? The dot looks like pictu... by everynameIwanti Explorer in Splunk Search 12-01-2019 0 3	0	3
Percentage chart Hi. I have a query that makes the difference of a query comparing today with last week. I would like to generate a g... by leandromatperei Path Finder in Splunk Search 12-01-2019 0 9	0	9
How to count until a specific number and go to next value in field Here is my current query: index=abc* \|stats count by user,date \|eval highcount=(if count >=1000,1000,count) This g... by rvalli Explorer in Splunk Search 12-01-2019 0 5	0	5
Searching and matching from two different indexes and retrieving values from one index I have two indexes that contain the same ip address but only one index contains hostnames for the ip addresses. How c... by cald0002 New Member in Splunk Search 12-01-2019 0 1	0	1
create table from database schema hi i have database schema, and want to extract a table like in picture. i try to use regular expression but it's not... by indeed_2000 Motivator in Splunk Search 12-01-2019 0 17	0	17
Change graphics in XML Hello, I have the splunk chart structure and would like to leave the 03 charts that are of numbers together within t... by leandromatperei Path Finder in Splunk Search 12-01-2019 0 5	0	5
AD User logon/Destination host report Hello Community, I am new in splunk. I want to make a report with all AD User logon with the details the source and ... by fgottilu New Member in Splunk Search 11-30-2019 0 3	0	3
How to input a single epoch time from a dashboard URL as a time range inside the time picker Hey gang, I have an external system which can call a dashboard URL - but it can only supply a single epoch time How ... by pkol Explorer in Splunk Search 11-29-2019 1 1	1	1
Is it possible to have a joined search with condition A in the first search OR condition B in the second search? Is it possible to have a joined search with condition A in the first search OR condition B in the second search? by ramsnazz New Member in Splunk Search 11-29-2019 0 4	0	4
Why is the timechart command not working properly? Hi All, Hope you all are good. I was working on displaying the number of machines which are active for last one hou... by niks987 Explorer in Splunk Search 11-29-2019 0 4	0	4
search problem Hello , I'm getting the following error in the Search head. How do I troubleshoot? Search process did not exit cle... by aalaa Path Finder in Splunk Search 11-29-2019 0 6	0	6
add time constraint for web site avilability check condition Referring below query: index=f5 \| rex field=headers "Host: (?<host_url>[a-zA-Z0-9\-\.]+\.[a-zA-Z]{2,3})" \| eval por... by riqbal47010 Path Finder in Splunk Search 11-29-2019 0 2	0	2
Why am I getting error "problem replicating config (bundle) to search peer..." on one search head and am getting no search results? Hi, I see the following error on one of my search heads since yesterday. Tried different things but haven't been ab... by dmenon84 Path Finder in Splunk Search 11-29-2019 1 6	1	6
Custom Command in Splunk I have created a python script and it is taking an argument . I have declared it ,like this` hash = Option( ... by ansusabu Communicator in Splunk Search 11-29-2019 0 0	0	0
search with same field diferent dates into a table side by side i want to verify if there is a difference in 2 counts made that relate to diferent timelines. This is what i've came... by rsaude Path Finder in Splunk Search 11-29-2019 0 3	0	3
Timechart issue Hi all, I have extracted a field (exit_status) in log file. I want to know if a process exit properly. I have 3 us... by clementros Path Finder in Splunk Search 11-29-2019 0 4	0	4
Is it possible to display events of multiple _time-values at once? I am trying to build a decent drilldown option and my current state is the following. I have a timechart with the nu... by MBehm New Member in Splunk Search 11-29-2019 0 5	0	5
refresh for sub set of admin role @MuS I would like to give access to some user to do refresh, i know they need admin role. However admin has 99 capa... by robertlynch2020 Influencer in Splunk Search 11-28-2019 1 2	1	2
index syntax question Within Splunk cloud 7.2.6 - If I run a search without specifying index or sourcetype it will search the main index b... by trojan_81 Path Finder in Splunk Search 11-28-2019 0 4	0	4