Splunk Search

Community Activity

List of user who have logged into Splunk in the last 30 days and what Apps/Indexes they accessed. Hi, Looking to get some help with a query for the following. List of user who have logged into Splunk in the last 30... by aknsun Path Finder in Splunk Search 10-15-2019 0 2	0	2
Getting an Error in 'eval' command: The expression is malformed. Expected ). Hello, So I know this exact same error has been brought up by others here. However, my query is a simple one and the... by joshimeister Loves-to-Learn Lots in Splunk Search 10-15-2019 0 5	0	5
How to create backgrounded search with javascript? All is in the title  I often have to launch long time running search. Instead of waiting for results on dashboards, ... by C_HIEN Path Finder in Splunk Search 10-15-2019 0 1	0	1
Transforms to Remove HTML Tags Hello- I'm importing data from a SQL database that includes HTML tags. Here is an example: NoteText="This is my fir... by DBattisto Communicator in Splunk Search 10-15-2019 0 2	0	2
Wildcard search from lookup Hi, Is there any way to get all the values in the column from the lookup table to build the default choice option in ... by afulamba Explorer in Splunk Search 10-15-2019 0 2	0	2
How to compare two fields from two different searches and display results field not exist? I am running 2 different searches and have to compare the each value in one field with the values in the other field.... by graju89 Path Finder in Splunk Search 10-15-2019 0 5	0	5
How to show an IP is associated with multiple usernames I have one source type and 2 field values, username and IP. How do I show IP that is associated with multiple userna... by alexrod03 New Member in Splunk Search 10-15-2019 0 2	0	2
Basic lookup command Hi all, I am curious the best way to write the following lookup query. I have a 1 column lookup of firewall rule na... by clozach Path Finder in Splunk Search 10-15-2019 0 3	0	3
value of field Hi, I need to take data from field Source and calculate this data : http_400100/Total+http_500100/Total+http_300*1... by pudanelilita Explorer in Splunk Search 10-15-2019 0 3	0	3
How to resolve the below issue ? I have the following query which is giving me all the api which cache value is HIT or MISS. host=localTest sourcet... by JyotiP Path Finder in Splunk Search 10-15-2019 0 1	0	1
Stand out values in Splunk Hi, I have an out of the box query in Splunk. I am trying to find out a way using which we can stand out or highlight... by Shashank_87 Explorer in Splunk Search 10-15-2019 0 2	0	2
Time coversion not working index=asg Process_name=WLR_22-15_Rating earliest =-5m \| convert timeformat="%d-%M-%Y-%H:%M:%S" mktime(start_dtm) mkt... by nwoolley Engager in Splunk Search 10-15-2019 0 4	0	4
Why is timechart showing OTHER for some values? process_inst_id=258600,process_def_id=30,process_name=MIWrite,start_dt=08-OCT-2019-07:39:49,end_dt=,completed=N,runni... by nwoolley Engager in Splunk Search 10-15-2019 0 3	0	3
Help with regex in getting the value out of a certain word Hi everyone. Im not very good in doing regex. I would like to ask for you help here. The situation is to get a certai... by mrccasi Explorer in Splunk Search 10-15-2019 0 3	0	3
Match partial value of 2 fields Hi All, I have a dashboard that accepts user input for a username to search emails. Im trying to display Recipients ... by geraldcontreras Path Finder in Splunk Search 10-15-2019 0 9	0	9
Splunk Query The Splunk report below returns ‘shipping points’ (warehouse codes). Using the lookup table (also below), our job is ... by pratapa Explorer in Splunk Search 10-15-2019 0 0	0	0
pie chart problems Hi, I'm trying to create a pie chart and running into unexpected problems. I have a search that gives me the proper ... by a212830 Champion in Splunk Search 10-15-2019 0 3	0	3
Discrepany in "Count" My requirement is to detect login attempts by a disabled user. Typically this could be found using eventcode 4768 an... by willadams Contributor in Splunk Search 10-15-2019 0 7	0	7
Correlate data name to text line // Lookup maybe ? Hello, i have the following problem. When i start my bukkit server (Minecraft) and join with a Player, the server wi... by klischatb Path Finder in Splunk Search 10-15-2019 0 2	0	2
How do I operate on (and search from) sub-properties matching a pattern. I have messages that look like: { timers: { x.y.zaz{ count: 5 }, x.y.waw{ count: 5 } } } I would ... by npxcomplete New Member in Splunk Search 10-14-2019 0 2	0	2
Cumulative Distinct over time from the start of the selected time range Hi, I need to find out distinct number of users over time per hour. I have managed to reach the below query: \| time... by cbhattad Path Finder in Splunk Search 10-14-2019 1 4	1	4
Unable to filter out lookup table values I'm trying to filter out false-positive domains in a search of DNS events by using NOT on the ut_domain field of the ... by browncardigan Path Finder in Splunk Search 10-14-2019 0 4	0	4
How to convert _time to mm/dd/yyyy Day H:M:S AM/PM My _time format reads 2019-10-13 04:19:21 I try to convert this _time value to the format mm/dd/yyyy day h:m:s AM or ... by vnguyen46 Contributor in Splunk Search 10-14-2019 0 4	0	4
Display job time with total run and runtime of subtasks I am not sure the best way to ask this but we have a job with subtasks, and the subtasks have subtasks. I wanted to g... by aohls Contributor in Splunk Search 10-14-2019 0 1	0	1
access search results for search upon login Hi, Sorry, a very n00b question and i apologise if this is in the doco but i couldnt find anything in the search doc... by sdewar83 Path Finder in Splunk Search 10-14-2019 0 2	0	2