Splunk Search

Splunk Search
Community Activity
harshparikhxlrd
I'm fairly new to splunk and have just learned how to use the rex/regex. I am trying to add a column in my string se...
by harshparikhxlrd Path Finder in Splunk Search 11-04-2019
0 3
0
3
lsy9891
Hi, I have this search and basically it shows a table with the channel. Error type, total error, and the sum total ...
by lsy9891 Engager in Splunk Search 11-03-2019
0 1
0
1
balash1979
There was an issue with our Splunk forwarders and it appears our application sent duplicate logs. I am seeing a sudd...
by balash1979 Path Finder in Splunk Search 11-03-2019
0 3
0
3
skirven
Hi! I'm wrestling with performance on our Production Splunk installation and have been reading on Search Concurren...
by skirven Communicator in Splunk Search 11-03-2019
1 1
1
1
gopiven
Hello Experts Actually I am trying to show the usage trends across one application on different platforms (Online, M...
by gopiven Explorer in Splunk Search 11-03-2019
0 1
0
1
jjwallaby
The panel depends is been ignored and is still running the query which causes performance issues. How can you only r...
by jjwallaby Engager in Splunk Search 11-03-2019
0 5
0
5
rajaguru2790
Please help me with the script below. This script is not running in Unix and Windows machine. Please help tweak and ...
by rajaguru2790 Explorer in Splunk Search 11-03-2019
1 2
1
2
bsaujla131984
I have created a splunk alert which runs after every one hour to check for certain pattern in last one hour. Most of ...
by bsaujla131984 Path Finder in Splunk Search 11-02-2019
0 1
0
1
whitehaven
Specifically at this stage of the tutorial "https://docs.splunk.com/Documentation/SplunkCloud/8.0.0/SearchTutorial/Ab...
by whitehaven Explorer in Splunk Search 11-02-2019
1 1
1
1
igschloessl
index=proxy earliest=-1month@month latest=@month|fields host month | eval month=strftime(_time, "%m") | stats count b...
by igschloessl Explorer in Splunk Search 11-02-2019
0 7
0
7
jip31
Hi, With the search below, I would like to be able to display in my table the host which have also "No SPLUNK Agent"...
by jip31 Motivator in Splunk Search 11-02-2019
0 9
0
9
staze
All, I had Splunk Light installed (version 6.4.0). Tried to log in, but noticed that the license had expired, so I s...
by staze Path Finder in Splunk Search 11-02-2019
0 5
0
5
aishwaryabh
I am trying to run a transaction command for all the patrons where startswith=(Action=CardIn) endswith=(Action=CardOu...
by aishwaryabh New Member in Splunk Search 11-02-2019
0 3
0
3
asearson
BACKGROUND: My Disaster Recovery team is compiling a list of all IPs endpoints, and has requested that I query all of...
by asearson Explorer in Splunk Search 11-01-2019
0 4
0
4
rithick
index=something | rex field=_raw ".*\&WST=(?P<MMMId>[^&]+).*" | search Googly | dedup MMMId | bucket_...
by rithick New Member in Splunk Search 11-01-2019
0 2
0
2
alkhaldi
Hi I created a chart panel in a dashboard. The panel is based on an sql query. Everytime i click on the chart it sel...
by alkhaldi Engager in Splunk Search 11-01-2019
0 4
0
4
iamsplunker31
Hello All, I have an existing lookup file newlookupfile.csv. I'm trying to update the lookupfile with new row. I di...
by iamsplunker31 Path Finder in Splunk Search 11-01-2019
0 6
0
6
rashi83
Need to extract Insurer , User , Dealer name 2019-11-01 06:54:20 W3SVC4 AUSYD11AS90 172.29.5.28 GET /Areas/Framewor...
by rashi83 Path Finder in Splunk Search 11-01-2019
0 7
0
7
abhishekbhasin
Trying to setup up an alert with multiple fields extracted through Field. For example A,B, C etc and each having a d...
by abhishekbhasin Explorer in Splunk Search 11-01-2019
1 12
1
12
bapun18
Hi I want to improve my search for better search performance, please find the attachment enclosed.![alt text
by bapun18 Communicator in Splunk Search 11-01-2019
0 8
0
8
mozukun3
お世話になります。 サーチ文の書き方についてご教示ください。 まず、以下の検索結果を出しています。 ・サーチ文 「soucetype="test1" | table host, user, state」 ・サーチ結果 ------...
by mozukun3 New Member in Splunk Search 11-01-2019
0 5
0
5
ktn01
Hello, I have events in the following format: 20/08/19 16:34:17 login1 command RunAsUsers="web,tomcat,embed" wit...
by ktn01 Path Finder in Splunk Search 11-01-2019
0 2
0
2
Robbie1194
Hi guys, I was wondering if anyone knew of a method of appending data to a lookup, but not overwriting anything in ...
by Robbie1194 Communicator in Splunk Search 11-01-2019
0 2
0
2
bsaujla131984
I have created an alert which basically checks the occurrence in particular keyword in two log files , however there ...
by bsaujla131984 Path Finder in Splunk Search 11-01-2019
0 1
0
1
ahuseid
I need to join two searches on a common field in which I want a value of the left search matches all the values of t...
by ahuseid New Member in Splunk Search 11-01-2019
0 6
0
6
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...