Splunk Search

Community Activity

Search in eval if I want to do something like ...base search \| eval Mod=if(Module=Excel OR Module=Word, [search extension=xls OR exten... by pranaynanda Path Finder in Splunk Search 11-08-2019 0 11	0	11
time compare Hi Guys, We have a scheduled PowerShell script which will give the output in a log file which will have a status of “... by chaitup New Member in Splunk Search 11-08-2019 0 2	0	2
Field splitting on structured data Hi All, I'm struggling with a data input from the EMC Recoverpoint devices. I may be making things hard for myself,... by cdstealer Contributor in Splunk Search 11-08-2019 0 9	0	9
How to use rex command to extract two fields and chart the count for both in one search query? I have a log statement like 2017-06-21 12:53:48,426 INFO transaction.TransactionManager.Info:181 -{"message":{"Trans... by anuarora Engager in Splunk Search 11-08-2019 0 6	0	6
Multiple Values for One Tag - Only Want to Display One Hi, I've tagged my data by location, and I am now trying to run stats on it. Problem is a location can be Manual or... by alylanchester Explorer in Splunk Search 11-08-2019 0 5	0	5
How to create a field value from a group of values in the same field? I m trying to create a table were I want to display the 3 biggest values (count) from a field and the existing remain... by diabinho Explorer in Splunk Search 11-08-2019 0 5	0	5
How to compare IP and Username in Logs with Lookup File Hello, I am trying to compare IP,user field in a log and then compare it with a lookup file(having only IP and usern... by gozdeyildiz New Member in Splunk Search 11-08-2019 0 1	0	1
Help with passing search result to eval failing I'm trying you create a variable out of a search result using eval. This works fine, I get a single row, and a colu... by dhivyamu Explorer in Splunk Search 11-08-2019 0 3	0	3
Weighted Sum Hi, I'm new to splunk and am hoping to get some advice and help. I'm trying to do a addcoltotals but with differen... by cafan New Member in Splunk Search 11-08-2019 0 4	0	4
Defining all values in a tables column as a global token to use anytime... I been looking for a while now for an answer , I have read just about everything but I am not getting what I am looki... by onegame999 Explorer in Splunk Search 11-08-2019 0 7	0	7
help on join subsearch Hello The first part of the search below (before join) works fine and the second part (after join) works fine too But... by jip31 Motivator in Splunk Search 11-08-2019 0 3	0	3
understanding Localize command Hi all, Can someone explain localize command with a usecase i am not able to understand it through documentation. Al... by test4u Path Finder in Splunk Search 11-07-2019 0 0	0	0
Receiving search error by CLI error searching on remote host I'm trying to search my remote Splunk instance as detailed here: https://docs.splunk.com/Documentation/Splunk/8.0.0/A... by brendanbmw417 New Member in Splunk Search 11-07-2019 0 1	0	1
renaming search results... index=MyApp \| stats count by supportGroup, severity That search provides me a list of events and the severity associ... by DTERM Contributor in Splunk Search 11-07-2019 1 3	1	3
How to show results of multiple pie charts into one single table? Hi , I have multiple pie charts showing count of completed and pending on some filter. Now want to show the results ... by avni26 Explorer in Splunk Search 11-07-2019 0 8	0	8
How to input value prefix/suffix and delimiter per value in a text token? Is it possible to add a per value prefix and suffix, and then divide by a delimiter to multiple values pasted into a ... by donovanw Engager in Splunk Search 11-07-2019 0 5	0	5
How to change highcharts data label shape Hello, I've got a time chart and wanted to know if it is possible to change the data label so it's surrounded by a c... by kbrat New Member in Splunk Search 11-07-2019 0 0	0	0
How to create a dependent dropdown and multivalue input fields with dynamic default values on a dashboard? Hi! I have searched quite a bit, but could not find a suitable solution for the following problem: I have a csv fil... by JacobPN Path Finder in Splunk Search 11-07-2019 0 8	0	8
How to use lookup to return true or false value depending on specific result Hello, I am having trouble figuring out where to even start..... Here is my scenario. I have a search that is sho... by agolkar Explorer in Splunk Search 11-07-2019 0 4	0	4
Rex help need to capture two values returned by query as fields Hello Splunkers I have a query that returns two possible values 11/06/19 16:50:59.54-06:00 [104348] Special Financ... by irishmanjb Path Finder in Splunk Search 11-07-2019 0 2	0	2
Rex Help with capturing query results as fields Hello Splunkers I am running a query that is essentially returning two possible values in the raw table that I need t... by irishmanjb Path Finder in Splunk Search 11-07-2019 1 2	1	2
How to sort data in chronological order by month, not alphabetically? HI, For my below query, i get months in alphabetical order like april-2014, august-2014, february-2014, January-2014... by karthikTIL Path Finder in Splunk Search 11-07-2019 3 6	3	6
Why is division via EVAL is not working? My raw event is: 07 Nov 2019 01:24:49 \| INFO \| DispatchThread: 6119 \| *** Time taken to process 100 records 1009ms ... by chiennylin New Member in Splunk Search 11-07-2019 0 4	0	4
Match values from different fields in lookup and field in search I've spent considerable time trying to get this to work and have searched topics but nothing appears to get me where ... by laseeno Engager in Splunk Search 11-07-2019 0 2	0	2
_time not displaying correctly in the output Hi, I have generated a report which contains _time column in a tabular format but it is displaying differently with d... by Shashank_87 Explorer in Splunk Search 11-07-2019 0 5	0	5