Splunk Search

Community Activity

	CBS Token authentication failed. Add-on for Microsoft Cloud Services Hi,I got the following error message when trying to connect to an eventhub,Error occurred while connecting to eventhu... by Brenny Explorer in Splunk Search 05-23-2024 0 2	0	2
	Splunk Query Issue index=abc sourcetype=abc \| timechart span=1m eval(count(IP)) AS TimeTaken Now I want to get 95th percentile of this ... by Chirag812 Explorer in Splunk Search 05-23-2024 0 3	0	3
	Single Value visualisation for a timechart with sparkline and showing the group by field Hi expert, My SPL looks something like: index=<> sourcetype::<> \| <do some usual data manipulation> \| timechart min(f... by MCW Explorer in Splunk Search 05-23-2024 0 2	0	2
	Splunk Query To Evaluate Absence Of A Signature In the Logs Hi Splunk Community,I need to build an alert that will be triggered if a specific signature is not present in the log... by victorcorrea Path Finder in Splunk Search 05-23-2024 0 6	0	6
	Is it possible to let splunk recognize fields automatically with this layout Hi,I have a json-file in splunk with an arguments{}-field like this field1=[content_field1] field2=[content_field2] f... by rrovers Contributor in Splunk Search 05-23-2024 0 1	0	1
	How to get a Full Encoded Command from a Notable We are receiving some notables that reference an encoded command being used with PowerShell, and the notable lists th... by CSNinja New Member in Splunk Search 05-23-2024 0 0	0	0
	searching for events in a source based on value of another source I have two sources that I'd like to combine/join or search on one based on the other.Source 1 - has two fields name ... by kenbaugher Path Finder in Splunk Search 05-23-2024 0 2	0	2
	How to add multiple field in a single search Hi How to write spl search query by adding multiple field in single search Field 1 - contain data like authorization... by jaibalaraman Path Finder in Splunk Search 05-23-2024 0 6	0	6
	How to one index two different device count calclation I want chart as follow. I could show count each count value (cannot Calc field) (index=interface_count devicename IN ... by Richard_400 Engager in Splunk Search 05-23-2024 0 2	0	2
	Splunk alert base on current count vs last week count Hi Team,I need help to create a alert which can raise if latest hour count is 10% less than last week same day same h... by cbiraris Path Finder in Splunk Search 05-23-2024 0 1	0	1
	How to lookup the same field from another search and different fields my search as below, the two <my search command for list user rating list> search command is the same, how to reduce t... by mia Explorer in Splunk Search 05-22-2024 0 4	0	4
	Join similar fields Hey guys, I'm having trouble joining two datasets with similar valuesI'm trying to join two datasets, both have a com... by ViniciusMariano Explorer in Splunk Search 05-22-2024 0 5	0	5
	I would like to change to 10% deviation from standard for below query index="xyz" sourcetype = abc" \| search Country="ggg" statusCode=200 \| stats count as Registration \| where Registrati... by paragg Loves-to-Learn Lots in Splunk Search 05-22-2024 0 1	0	1
	How can I stack the rows vertically while preserving the original columns I have a search that returns the following table (after transpose):columnrow 1row 2search_nameUC-315UC-231ID7zAt/75Df... by rar0 Loves-to-Learn Lots in Splunk Search 05-21-2024 0 4	0	4
	drilldown of timechart changing to epoch time in user's time zone I have a dbxquery command that queries an Oracle server that has a DATE format value stored in GMT.My SQL converts it... by loganramirez Path Finder in Splunk Search 05-21-2024 0 4	0	4
	Error on search when using table Since upgrading to 9.1.2, I am no longer able to see table output on the Splunk Search. Even with the most simplisti... by larryaucoin Observer in Splunk Search 05-21-2024 0 2	0	2
	Splunk query Hi All, hope you are having a great day, I have a quick question. I have the data given as below, how do i extract ju... by ash2 Explorer in Splunk Search 05-20-2024 0 8	0	8
	Combining static single-word from lookup table with sentence hello I need to determine the app name based on a lookup table for the SPL search below.the SPL search results has a ... by alfredoh14 Explorer in Splunk Search 05-20-2024 0 3	0	3
	Search Pls can i get a query that shows statistics on search activity in splunk by whitecat001 Explorer in Splunk Search 05-20-2024 0 3	0	3
	dedup on Field over time span we have data in Splunk for user sessions in an app and I am trying to produce a line graph to show usage every hour. ... by triva79 Explorer in Splunk Search 05-20-2024 0 5	0	5
	moving CSV to Database and replace lookup with dbxlookup Hello,I am currently correlating an index with CSV file using lookup.I am planning to move CSV file to database and w... by LearningGuy Motivator in Splunk Search 05-19-2024 0 13	0	13
	How to redefine a field definition to one minute character processed or modified Please tell me how to make the output replace some characters in the field definitions.Specifically, the problem is t... by NC_AS Explorer in Splunk Search 05-19-2024 0 2	0	2
	How to find dashboards not in use by the amount of days? Hi guys I need to find all dashboards not used in x days. I saw this has already been asked in this forum but I can'... by mrsplunx New Member in Splunk Search 05-19-2024 0 4	0	4
	Splunk search with wildcard in field name I need to see all events with fields that have "PROD*" in name, e.g. "PROD deploy", "PROD update", etc.`index=myIndex... by kagarlickij Explorer in Splunk Search 05-19-2024 0 19	0	19
	sysmon and Defender search Hi,I am quite new to Splunk, so sorry in advance if I ask silly questions.I have below task to do: "The logs show tha... by Pere New Member in Splunk Search 05-18-2024 0 1	0	1