Splunk Search

Community Activity

How to find all alerts reports, and Dashboards using a specific search string Hello, I've been asked to provide a list of all Alerts/Reports/Dashboards that contain the value "You Found a bug!" ... by tdavison76 Path Finder in Splunk Search 06-04-2024 0 3	0	3
How to specific time range in my search results Hi all,How to give the range to that first and last if the date is in between last 3weeks till today which matches to... by smith_ Builder in Splunk Search 06-04-2024 0 5	0	5
Overview Dashboard Summarize Errors Hello,I've a couple of detailed dashboards, all indicating the health status of my systems. Instead of opening each d... by mclog New Member in Splunk Search 06-04-2024 0 2	0	2
Splunk query to find browsers installed on a machine Hi,can someone help me with splunk search to identify browsers installed on a machine, im looking for a specific fiel... by Roy_9 Motivator in Splunk Search 06-04-2024 0 4	0	4
Rex search for a specific pattern I have a splunk query that has following text in message field - "message":"sypher:[tokenized] build successful -\xxx... by nisheethbaxi Loves-to-Learn in Splunk Search 06-03-2024 0 4	0	4
how to group by transaction type My Log data looks like: i am using this query: index="webmethods_prd" source="/apps/WebMethods/IntegrationServer/ins... by avikc100 Path Finder in Splunk Search 06-03-2024 0 1	0	1
How to filter multivalue null values? Hi All, I want to filter out null values.In my field the ImpCon having null values.Now i want to filter the values wh... by karthi2809 Builder in Splunk Search 06-03-2024 0 11	0	11
Eventstats command Hello, I'm trying to write a Splunk search for detecting unusual behavior in emails sending, here is the spl query: \|... by marco_massari11 Communicator in Splunk Search 06-03-2024 0 8	0	8
Word Cloud Not Showing Hi Everyone!My wordcloud is only showing undefined, I'm following a similar search to \|stats count by word But all i... by michaelsplunk1 Path Finder in Splunk Search 06-03-2024 0 1	0	1
How to build the query for the raw data. Hi Team,Good day!I need to build query in such way that need to get only success payload that are related to particul... by Vamshi1904 Observer in Splunk Search 06-03-2024 0 3	0	3
How to display count as zero when no events are returned I have three lookup files and I am trying to find out which one has a zero count. Below is the query I am using. \| ... by 493600 Explorer in Splunk Search 06-03-2024 0 5	0	5
Extract json values from string json array Hi, my splunk search results in two fields - Time and Event. Inside Event field there are multiple searchable fields,... by mipa04 Engager in Splunk Search 06-03-2024 0 8	0	8
Calculated field Hi Team,How to write a calculated field for below \| eval action=case(like("request.path","auth/ldap/login/names"),"su... by VijaySrrie Builder in Splunk Search 06-02-2024 0 1	0	1
Using wildcards in splunk lookups, can't match second field Hello, I need help with the following scenario:Let's say I have a log source with browser traffic data, one of the av... by Josh1890 Explorer in Splunk Search 06-02-2024 0 10	0	10
Using Splunk for Asset Discovery in Vulnerability Management I am in Vulnerability Management and a novice Splunk user. I want to create a query to quickly determine whether we ... by simuneer New Member in Splunk Search 06-01-2024 0 7	0	7
List correlation searches with number of alerts https://docs.splunk.com/Documentation/ES/7.3.1/Admin/ListcorrelationsearchesHi, I'm using the searches mentioned in t... by PleaseHelp New Member in Splunk Search 05-31-2024 0 4	0	4
what is plugin_instance in metrics data - "github_app_for_splunk" I'm very new to metrics data in Splunk, I have a question regarding the what is plugin_instance and how can i get the... by Naa_Win Path Finder in Splunk Search 05-31-2024 0 0	0	0
How to make the URL hyperlink which is in the fields value of the table (Dashboard Studio - JSON format) Hi Team,I have generated dynamic URLs using the lookup and add it in the field value of the table. Now I need to make... by SureshkumarD Explorer in Splunk Search 05-31-2024 0 5	0	5
Searches what command can i run if am not sure where an index for a data associated with a sourcetype is stored in splunk by whitecat001 Explorer in Splunk Search 05-31-2024 0 5	0	5
How to Filter over 50K on different indexes/sources? So, I have a loadjob with all the data I need with a primary field (account number). But, I have a CSV with about 104... by sumarri Path Finder in Splunk Search 05-31-2024 0 8	0	8
Splunk Query Can i get a Splunk query that shows the last logon date for a group of active directory service account Thanks by whitecat001 Explorer in Splunk Search 05-31-2024 0 6	0	6
How to get ID of splunkd process executing saved search? Hello!I'm trying to resolve issues with splunkd being killed by OOM Reaper and it would be nice to know which saved s... by YuriSpirin Explorer in Splunk Search 05-31-2024 0 2	0	2
How to merge cells in Splunk I want to merge the cells in column S.No and share the output to the requestor.The only ask is Splunk should take all... by spl10 Explorer in Splunk Search 05-31-2024 0 4	0	4
Join with Stats index=abcd "API : access : * : process : Payload:" \|rex "\[INFO \] \[.+\] \[(?<ID>.+)\] \:" \|rex " access : (?<Event>... by onthakur Explorer in Splunk Search 05-30-2024 0 4	0	4
Table Column Headings I am doing a search based on a pulldown values and displaying the results in a table. Here is the sample search stats... by Sriram Communicator in Splunk Search 05-30-2024 2 3	2	3