Splunk Search

Community Activity

How to increase the maximum number of concurrent historical searches? Splunk warns that: The system is approaching the maximum number of historical searches that can be run concurrently.... by perlish Communicator in Splunk Search 10-11-2019 4 4	4	4
Help with field extraction regex - com.texh.servers.policy.assertion.ServerAuditDetailAssertion: com.texh.log.custom.Applications: com.texh.log.cu... by snallam123 Path Finder in Splunk Search 10-11-2019 0 4	0	4
Field Extraction: Regex global flag/modifier Hi Splunkers, I know that it is possible to match multiple times using rex (using max_match=0). Can I apply the sam... by konnex Explorer in Splunk Search 10-11-2019 0 5	0	5
Need help to speed up a search the below search is what I have working now to see what users are not in the first event code. index="wineventlog" ... by lgrachek Explorer in Splunk Search 10-11-2019 0 11	0	11
Expand button in tables Hi all, I tried finding my answer in the existing topics, but I couldn't find it. So I created my own topic. Maybe i... by makstra New Member in Splunk Search 10-11-2019 0 1	0	1
Problem with optimization of the regex: limits.conf Hi I have a problem with the error message of the Splunk: Error in 'rex' command: regex="(?ms)]+^\s\" has exceeded c... by spisiakmi Contributor in Splunk Search 10-11-2019 0 6	0	6
How to delete unwanted special characters in alphanumeric string? I have a string as below, I need to delete the below special character and make the below as a single value. 123asds... by ravimmm Explorer in Splunk Search 10-11-2019 1 6	1	6
Generating custom command not streaming output I have created following custom command: @Configuration(streaming=True) class GenerateTextCommand(GeneratingCommand)... by jakubzak Explorer in Splunk Search 10-11-2019 1 0	1	0
Comparision of two fields Splunk Hi , Suppose I write a query and if say I have a field (A) and field (B) A B 1 1,3,4,5,8,9,10 5 ... by megha0794 New Member in Splunk Search 10-11-2019 0 5	0	5
Search that Alerts for two events with a matching field Hi I'm new to Splunk and am having a hard time finding a simple solution to this. I tried using subsearch and append... by jinito14002 New Member in Splunk Search 10-11-2019 0 3	0	3
Regex for fields Hi All, can you please help in extracting three fields from below data using regex Name code Type Below are three di... by shugup2923 Path Finder in Splunk Search 10-11-2019 0 3	0	3
Help with regex to extract words before column" Events: com.texh.servers.policy.assertion.ServerAuditDetailAssertion: 9879: com.texh.log.custom.Applications: 99... by snallam123 Path Finder in Splunk Search 10-10-2019 0 2	0	2
How to use self join Hi All, I have table in which I have columns such as name, id, type, business group etc type field has 2 values 'user... by shugup2923 Path Finder in Splunk Search 10-10-2019 1 6	1	6
largest single day result in a 90 day period I have a search to find total ingest into splunk, which i can run for a day or against a longer period by using the t... by sdewar83 Path Finder in Splunk Search 10-10-2019 0 3	0	3
Field extraction based on position of character Hi, I have field that gives me NETBOS of a Host. Sample Host Name: 123456W12345678 The 7th character makes the ide... by mbasharat Builder in Splunk Search 10-10-2019 0 2	0	2
How to pass values from previous search into map search Hello all, my search is below: index=tcxelevate_webpos registerType=kioskBridge registerNbr=* countryCode=US tagName... by rlippincott Explorer in Splunk Search 10-10-2019 0 2	0	2
Help creating a search for events when a field value changes Is there a Splunk search idiom that I can use to get all the events in a dataset whenever a particular field value A ... by twotimepad Engager in Splunk Search 10-10-2019 0 5	0	5
Splunk regex error: Missing terminating ] for character class Hey Splunkers, Noob. Trying to only retrieve the log names (ex. utility.log) after the last slash blah\blah\blah\lo... by spluzer Communicator in Splunk Search 10-10-2019 0 9	0	9
Can I pass a time/date into the "latest" time modifier I have a search created that alerts when a user has used remote desktop to log into a domain controller. It works spl... by iomega311 Explorer in Splunk Search 10-10-2019 0 1	0	1
Typing and Index queue shows 100% I have noticed that Splunk is running relatively slow as of recently and found that the typing queue and indexing que... by mavilla Explorer in Splunk Search 10-10-2019 0 3	0	3
How to reduce the width of bars in column chart? I have plotted a column chart. I need to reduce the width of bars. I have tried with "columnSpacing" and "param". Bot... by harinivgr Explorer in Splunk Search 10-10-2019 1 0	1	0
can we give colors in Geostats based on ranges of some value? Hi. Can we use rangemaps to give colors to the charts in the geostats map. I am having some range values. they shoul... by SanthoshSreshta Contributor in Splunk Search 10-10-2019 0 16	0	16
Cannot sum two numbers I have the following problem: I have a variable "number_of_past_events" which comes from a "\| inputlookup file.csv" a... by veromihaiu Path Finder in Splunk Search 10-10-2019 0 11	0	11
Using span option with timechart causes incorrect column names. Splunk Ver : I tested in 7.3.0 and 6.6.12. Timezone : I don't know if it’s relevant to this problem, but it is JST I... by yutaka1005 Builder in Splunk Search 10-10-2019 0 3	0	3
Using timechart earliest/latest with lookup files Hi all, I've created a _time field and timechart works for me, but the earliest/latest command does not. Here is my ... by lewisgrantevans Explorer in Splunk Search 10-10-2019 0 2	0	2