Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk Search
Splunk Search
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | Hi all, brand new to splunk search syntax. I have a command like so: ... | stats count by userAgent, browserVersion,... by benkeen Engager in Splunk Search 11-05-2019 0 2 | 0 | 2 | |
 | I have the followinf query sourcetype="server" host=*localqa* | stats count by Path | rex field=Path "\/a... by JyotiP Path Finder in Splunk Search 11-05-2019 0 3 | 0 | 3 | |
| | Hi experts! Since I am new to Splunk, I understand that we cannot use a time chart with inputlookup(?). But I am usi... by gopiven Explorer in Splunk Search 11-05-2019 0 2 | 0 | 2 | |
 |   Greetings all, Noob here. I have the following timechart: index=fileshare user_login=john_doe@mycompany.com (event_... by mitsost Path Finder in Splunk Search 11-05-2019 1 19 | 1 | 19 | |
| | Hi all, I'm working with a sample log snippet below. The overall goal is to get stats about long-running operations. ... by justinsplunk_12 Explorer in Splunk Search 11-05-2019 1 7 | 1 | 7 | |
 | We have a critical dashboard where users need to click on the magnifying glass to open up that search in a search win... by mchang_splunk Splunk Employee  in Splunk Search 11-05-2019 0 1 | 0 | 1 | |
 | I have a set of log data that is basically in this format: Event timestamp user 6 10/14/2019 1:29 Use... by rschuetzler Explorer in Splunk Search 11-05-2019 0 4 | 0 | 4 | |
| | We need to decide soon how much storage to allocate to the hot/warm volume versus the cold one. Therefore, I would li... by danielbb Motivator in Splunk Search 11-05-2019 0 7 | 0 | 7 | |
| | Hi all, In the middle of a search, I have two string fields, one is called A and the other B (both have the ";" as d... by edoardo_vicendo Builder in Splunk Search 11-05-2019 1 4 | 1 | 4 | |
| | The search I am using is below and in the output for few I am getting 3 records in the filed manage. Please help me t... by surekhasplunk Communicator in Splunk Search 11-05-2019 0 5 | 0 | 5 | |
 | If a certain incident is in resolved/closed state I want all logs pertaining to that incident to be excluded from the... by bineetadas New Member in Splunk Search 11-05-2019 0 3 | 0 | 3 | |
| | Hello, I am currently trying to do a search across two different sourcetypes using the map command: sourcetype=sour... by chrishartsock Path Finder in Splunk Search 11-05-2019 0 7 | 0 | 7 | |
| | Hi, I would want to have the count of a string (say "abcdef"). sometimes the string occurs multiple times in the sam... by prettysunshinez Explorer in Splunk Search 11-05-2019 0 1 | 0 | 1 | |
| | Hi, I want to show how many lines contains some value even if no line return. My data : Row 1 : F1: a Row 2 ... by matimat Explorer in Splunk Search 11-05-2019 1 4 | 1 | 4 | |
| | I have the data field "user" with data like: user1, user1, user2, user2, user3, user3, user3, ... How do I get/coun... by steffen1 Engager in Splunk Search 11-04-2019 0 4 | 0 | 4 | |
 | Hi , My current index when done table shows: Name| Attendance | Class abc | Present | 2A efg ... by ayush1906 Communicator in Splunk Search 11-04-2019 0 3 | 0 | 3 | |
 | How differences named capturing group expression between "(?<name>)" and "(?P<name>)"? by basplunk New Member in Splunk Search 11-04-2019 0 2 | 0 | 2 | |
| | There are 3 different values for one particular field say field1 - "INTPAY\ITS\TD_EFT\can contain other data", "INTPA... by gndivya Explorer in Splunk Search 11-04-2019 1 2 | 1 | 2 | |
| | Hi how to disable the hover functionality for line charts? I've tried disabling tooltips but it just hides the label-... by lsy9891 Engager in Splunk Search 11-04-2019 0 0 | 0 | 0 | |
| | Is there a way to set sampling for subsearches separately from the main search? For example, given a search of a hug... by amesbury Engager in Splunk Search 11-04-2019 1 2 | 1 | 2 | |
 | I created a Splunk Health Dashboard for myself on the server that runs my Monitoring Console. The MC server is not ... by esalesapns2 Communicator in Splunk Search 11-04-2019 1 1 | 1 | 1 | |
| | I'm working on creating either a report with a table or a dashboard to visualize the status of my Windows Audit Polic... by danielransell Path Finder in Splunk Search 11-04-2019 0 8 | 0 | 8 | |
| | Hi Team, I am trying to run stats splunk search using c# SDK and getting task cancelled error. Kindly help me on th... by gsureshkumarcse New Member in Splunk Search 11-04-2019 0 0 | 0 | 0 | |
 | Hello fellow Splunkies, is there a method to programatically list the objects/resources used by (scheduled) searches... by Olli1919 Path Finder in Splunk Search 11-04-2019 2 9 | 2 | 9 | |
| | Hello, I am trying to compare two time windows in the same index but I would like the chart comparing them to be ba... by bencooper1 Engager in Splunk Search 11-04-2019 0 3 | 0 | 3 |
Upcoming Events
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Become An Expert
Top Labels
-
administration
3 -
alert action
3 -
alert condition
2 -
Analytics Workspace
2 -
authentication
1 -
chart
946 -
Classic dashboard
1 -
configuration
2 -
correlation search
1 -
count
1,007 -
Dashboard Studio
3 -
data
3 -
data model
1 -
development
6 -
distributed search
1 -
drilldown
1 -
email
1 -
eval
2,616 -
field extraction
2,022 -
fields
2,064 -
host
1 -
index
4 -
indexer
2 -
inputs.conf
1 -
intermediate forwarder
1 -
introduction
5 -
join
1,060 -
JSON
2 -
Linux
2 -
login
1 -
lookup
1,567 -
metadata
310 -
monitoring console
2 -
Other
188 -
panel
2 -
PDF
1 -
Python
1 -
regex
1,499 -
report acceleration
2 -
rex
1,250 -
SAML
1 -
saved search
5 -
scheduled search
4 -
scripted input
1 -
search
2 -
search head
3 -
search job inspector
685 -
search peer
1 -
simple XML
1 -
source
1 -
sourcetype
4 -
Splunk Web Framework
1 -
splunk-assist
1 -
splunkd
1 -
stats
3,566 -
subsearch
1,732 -
summary indexing
4 -
table
1,756 -
time
1 -
timechart
1,158 -
transaction
453 -
transforms.conf
1 -
troubleshooting
8 -
tstats
570 -
universal forwarder
5 -
using Splunk Cloud
2 -
using Splunk Enterprise
13 -
Windows
3
- « Previous
- Next »
Get Updates on the Splunk Community!
Event Series: The Agentic SOC: Trust Before Autonomy
AI is fundamentally changing security operations, but true progress requires more than just automation—it ...
Free Professional Services for .conf26 Attendees
This year at .conf26, we are doing something a little different. We are bringing the best minds from ...
Defend at Machine Speed: Your Guide to Security Sessions at .conf26
Splunk .conf26
With threats moving at machine speed and attack surfaces expanding across hybrid ...
