Splunk Search

Community Activity

How can I assign a field value to a variable using eval? I want to assign a specific field value to a variable I want to do something like this: \|eval output = ('Fieldname'... by mjlsnombrado Communicator in Splunk Search 10-20-2019 0 6	0	6
How to customize the time range picker to only show "Date Range" as an option? How do I disable some options in the time range picker? For example: Show only DATE RANGE by renanprado96 Path Finder in Splunk Search 10-20-2019 1 5	1	5
How to join or search fields from two different indexes with a common field Hi, I have two indexes basically like this: indexA has field1, field2, field3 indexB has field4, field5, field6 field... by vnguyen46 Contributor in Splunk Search 10-18-2019 1 2	1	2
How to change color depending on value using javascript with a twist, table column names are not fixed? Hello all, I have below javascript code that I use to change the color of my table cell: require([ 'underscor... by dojiepreji Path Finder in Splunk Search 10-18-2019 0 4	0	4
using geo_countries and geo_us_states in same search I want to create a chloropleth map of vendors in the US, highlighted by state. but Canada is also a vendor I want to ... by afdelacruz Engager in Splunk Search 10-18-2019 0 0	0	0
How to edit the frequency of scheduled search? How to locate scheduled search(in alert or dashboards)How to edit the frequency of the scheduled search because it is... by muizash Path Finder in Splunk Search 10-18-2019 0 2	0	2
Sum by Name Regex I've spent awhile messing around with this and can't get anything working. I need to sum a list like this by Storage... by splunk219783 Path Finder in Splunk Search 10-18-2019 0 2	0	2
pie chart to show values of two dates to compare Hi, My requirement is i have given user to choose 2 dates and depending on the dates chosen i need to show pie chart... by surekhasplunk Communicator in Splunk Search 10-18-2019 0 1	0	1
Do splunk upgrades ever remove any files? The upgrade process on linux is basically to unpack the tgz file over the existing splunk home directory. I understa... by gabriel_vasseur Contributor in Splunk Search 10-18-2019 1 3	1	3
Why does the subsearch not exclude the results from main search? I have the following search: index=my_index asset_type="Workstation" asset_atp="false" asset_status="ACTIVE" earlies... by mmarinov Explorer in Splunk Search 10-18-2019 0 3	0	3
Is it possible to do GeoIP of private IPaddresses? Hi I am a user of Splunk and Elasticsearch. I want to do GeoIP with private IPaddresses. There is information about... by rosho Communicator in Splunk Search 10-18-2019 0 2	0	2
Likely Bug With Transaction MaxEvents Hello, I'm using transaction to process events. Per the documentation (https://docs.splunk.com/Documentation/Splunk... by SplunkPersonal Path Finder in Splunk Search 10-18-2019 2 1	2	1
How to create a dummy row if no data? If there is no data for a table I want to create a row whilst waiting for the event to appear and add the word "Runni... by nwoolley Engager in Splunk Search 10-18-2019 0 2	0	2
Table time field using transaction Hey all, I am working on a dashboard to do a basic email search through Proofpoint logs and am using the transaction... by adalbor Builder in Splunk Search 10-18-2019 0 8	0	8
help on a clever stats count in order to calculate a volume hello I use the search below in order to calcul a volume in % As you can see, I first calculate events where proces... by jip31 Motivator in Splunk Search 10-18-2019 0 3	0	3
How to change color or style of a single line in line graph I have a timechart graph in which I have put an overlay to represent the max allowed value of used HDD space. Can I c... by feickertmd Communicator in Splunk Search 10-17-2019 1 8	1	8
Regular expression by specifying the beggining Hi all, I have no idea. I have many event like this. /abc_d/efg_h/abcd_ef/1234/ghi_jk/ /abc_d/efg_h/zxcv_vf/56789/... by nanachu Path Finder in Splunk Search 10-17-2019 0 5	0	5
Where do fields come from? This may seem to be a fairly daft question, but after a fair bit of head-scratching I can't see an obvious answer. Th... by cmeo Contributor in Splunk Search 10-17-2019 0 2	0	2
Divide the sum of all fields that end with X whose value == true with the sum of all fields that end with X whose value equals == true \| false Hello, My data looks like this: urlupdateid=4, urlid=1, payer=Aetna, EffectiveDate_datetype_correct=T, EffectiveD... by ruhtraeel Path Finder in Splunk Search 10-17-2019 0 4	0	4
sorting names and couting Hi, new to Splunk I'm trying to sort out names from my logs files as such so far I have added a new filed "names" bu... by daisymedina101 New Member in Splunk Search 10-17-2019 0 3	0	3
How to group search results for large amount of data? Hello, First all, forgive me I am new at using Splunk, hoping someone can help me out. We use our SPLUNK instance ... by tmuhieddine New Member in Splunk Search 10-17-2019 0 2	0	2
How to multiply values within each daily record but group by month? I'm trying hard to achive the following, assume i have this data: DATE=2020-01-01 ITEM1=1 ITEM2=10 DATE=2020-01-02 I... by mkrauss1 Explorer in Splunk Search 10-17-2019 0 9	0	9
How to create alert search using mstats I know that events and metrics use different index types. Does that mean I can't create an alert (outside of metrics ... by jstell Engager in Splunk Search 10-17-2019 0 2	0	2
Filtering on specific multivalue field value How do I return results based on a specific value of a multivalue field? Example returns all results where the 1st v... by frbuser Path Finder in Splunk Search 10-17-2019 0 6	0	6
How to create chart using web access logs as source and list all URIs How do I create a chart using web access logs as a source ? I want a list of all URI's which shows counts of error c... by pdave83 New Member in Splunk Search 10-17-2019 0 1	0	1