Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk Search
Splunk Search
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Newbie Here ! How can I get a word count in a url? I am trying to count the number of occurrence of a word "organizat...
by
tomlimbu
New Member
in
Splunk Search
10-22-2019
|
0
|
2
| ||
|
|
Hi,
So I'm inheriting some splunk code that I'm going through and cleaning up. It contains:
rex field=source "/...
by
tristanmatthews
Path Finder
in
Splunk Search
10-15-2013
|
8
|
28
| ||
|
|
I want to search "August 2018 activity on machine DNS-DC-01"
Could you please help me, how to use metadata for pa...
by
brpsingara
Explorer
in
Splunk Search
10-22-2019
|
0
|
4
| ||
|
In the below log, I need to extract genres from the log. In a single log there are multiple genres. Such as for the b...
by
vikcee
Path Finder
in
Splunk Search
10-18-2019
|
1
|
6
| ||
|
|
I wrote this base search query:
host=NETWEBA* sourcetype="WinEventLog:Application" AND ApplicationSource="/jpw*" A...
by
lsy9891
Engager
in
Splunk Search
10-22-2019
|
0
|
1
| ||
|
|
Hello Everyone,
I construct a csv (output)lookup file containing the hourly average response time, the hourly numb...
by
tomgc
Engager
in
Splunk Search
09-18-2019
|
1
|
2
| ||
|
below is what I have so far. What I need to do is match the src_user from event code 4724 and the time to events in 4...
by
lgrachek
Explorer
in
Splunk Search
10-15-2019
|
0
|
8
| ||
|
I have an issue where my transaction search finds endswith events with no startswith events. Not to go into too much ...
by
mikecal
Explorer
in
Splunk Search
10-11-2019
|
0
|
3
| ||
|
i have data like this : used_memory free_memory total_memory used_swap free_swap total_swap 665268 6987204 7652472 0...
by
cuongnguyen112
Engager
in
Splunk Search
10-22-2019
|
0
|
5
| ||
|
Sorry for not spelling the problem out in the title, I'm a bit stuck even for the correct language to describe my puz...
by
jeremywebb
Explorer
in
Splunk Search
10-11-2019
|
1
|
4
| ||
|
sourcetype=abc "responseStatus=500" "abc.xyz.logging.yyyy.zzzzz" "cccccccccccccc88888883333hhhh" | rex field=_raw "\"...
by
iqbalintouch
Path Finder
in
Splunk Search
10-21-2019
|
0
|
2
| ||
|
|
SVSCPLEX,S0W1,S0W1.DAL-EBIS.IHOST.COM,SYSLOG,zOS-SYSLOG-Console,SYSLOG,-0400,NE,001C,19283 01.21.46.880 -0500,S0W1 ,J...
by
kavyamohan
Explorer
in
Splunk Search
10-21-2019
|
0
|
4
| ||
|
|
Hi all, I have the below dataset for a website.
Time,title, response code 01/10/2019 08:22 ABC_PORTAL 200 01/10/2...
by
venky1544
Builder
in
Splunk Search
10-17-2019
|
0
|
4
| ||
|
|
Hi All
I have following table as outcome of my query :-
Name lastname Emailid A D abc@gm.com, xyz@redif.com B E...
by
rahulbhatia
Path Finder
in
Splunk Search
10-21-2019
|
0
|
1
| ||
|
|
Hello all... I have to compare two lookup table files in splunk. One is a list of hosts that should Be logging, and t...
by
brent_weaver
Builder
in
Splunk Search
10-21-2019
|
0
|
1
| ||
|
|
Here is my data in the table:
Index Field1 Field2 1 0 A,B,C 1 -5 D,E,F 1 -10 G,H,I
I have a complex query that ...
by
pyroman26
New Member
in
Splunk Search
10-21-2019
|
0
|
1
| ||
|
I am trying to make a search that will compare the fields value with the old fields value to determine if there is an...
by
kulwindersandhu
New Member
in
Splunk Search
10-10-2019
|
0
|
10
| ||
|
As in object, it's a strange behaviour, i can't use an IN clausole with host field in a map search.
Here's my sear...
by
verbal_666
Builder
in
Splunk Search
10-21-2019
|
0
|
4
| ||
|
we recently upgrade our fairly large deployment of Splunk from version 7.2.6 to 7.3.2, and our users are unable to op...
by
rbal_splunk
Splunk Employee
in
Splunk Search
10-21-2019
|
0
|
1
| ||
|
I'm new to Splunk. What are some basics I need to know about the features in the search user interface?
by
jmulcaster_splu
Splunk Employee
in
Splunk Search
09-11-2019
|
0
|
3
| ||
|
|
How do I get a list of saved searches name, the user who ran it, the last time it ran and the query it ran, and who c...
by
rosh_dsa
New Member
in
Splunk Search
10-18-2019
|
0
|
3
| ||
|
|
We have some use cases that we'd like to develop into Splunk apps. How do we use Splunk Dev to develop our own apps a...
by
jmulcaster_splu
Splunk Employee
in
Splunk Search
09-16-2019
|
0
|
2
| ||
|
|
Hi
I want to add a generating custom command that will query one of our DBs. So I have followed the tutorials and ...
by
electronicsplun
New Member
in
Splunk Search
11-20-2018
|
0
|
2
| ||
|
|
I have the follow search which shows the call count being made to a number of hosts every 15mins
"cs_dataowner_id=...
by
jbassi1
New Member
in
Splunk Search
10-21-2019
|
0
|
2
| ||
|
|
Hi,
If I have a table 'X' and 'Y' , I want to be able to compare if any individual comma separated value in Y is a...
by
megha0794
New Member
in
Splunk Search
10-09-2019
|
0
|
11
|
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Get Expert Help at Community Office Hours
Join the #search-help Slack channel
Become An Expert
Top Labels
-
administration
3 -
alert action
3 -
alert condition
2 -
Analytics Workspace
2 -
authentication
1 -
chart
941 -
Classic dashboard
1 -
configuration
2 -
correlation search
1 -
count
1,003 -
Dashboard Studio
3 -
data
3 -
data model
1 -
development
6 -
distributed search
1 -
drilldown
1 -
email
1 -
eval
2,599 -
field extraction
2,008 -
fields
2,053 -
host
1 -
index
4 -
indexer
2 -
inputs.conf
1 -
intermediate forwarder
1 -
introduction
5 -
join
1,054 -
JSON
2 -
Linux
2 -
login
1 -
lookup
1,548 -
metadata
306 -
monitoring console
2 -
other
111 -
panel
2 -
PDF
1 -
Python
1 -
regex
1,494 -
report acceleration
2 -
rex
1,244 -
SAML
1 -
saved search
5 -
scheduled search
4 -
scripted input
1 -
search
1 -
search head
3 -
search job inspector
675 -
search peer
1 -
simple XML
1 -
source
1 -
sourcetype
4 -
Splunk Web Framework
1 -
splunk-assist
1 -
splunkd
1 -
stats
3,540 -
subsearch
1,710 -
summary indexing
4 -
table
1,744 -
time
1 -
timechart
1,153 -
transaction
451 -
transforms.conf
1 -
troubleshooting
8 -
tstats
562 -
universal forwarder
5 -
using Splunk Cloud
2 -
using Splunk Enterprise
13 -
Windows
3
- « Previous
- Next »
Get Updates on the Splunk Community!
Splunk Lantern’s Guide to The Most Popular .conf25 Sessions
Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...
Unlock What’s Next: The Splunk Cloud Platform at .conf25
In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...
Index This | How many sevens are there between 1 and 100?
August 2025 Edition
Hayyy Splunk Education Enthusiasts and the Eternally Curious!
We’re back with this ...
