Splunk Search

Community Activity

How to remove columns from search results table? This question was asked before, but not really answered. I have a search that returns columns dynamically created so... by halkelley Path Finder in Splunk Search 05-02-2019 2 6	2	6
Get the timestamp of stats latest(field) I'm currently getting the latest value of a field like: \| stats latest("field"). However It only shows the column w... by artrune Path Finder in Splunk Search 05-02-2019 0 10	0	10
Replacing join command to integrate data from two different sources with lookups Hello people, I am new in Splunk. So far I have been using join commands to integrate data from two different source... by ej56ygur New Member in Splunk Search 05-02-2019 0 4	0	4
How to remove duplicate events if all data is identical except the time and duration fields? Hey, Fellow Splunkers I have multiple duplicated events, all data on the event is identical to the exception of the ... by asarran Path Finder in Splunk Search 05-02-2019 0 2	0	2
How to get top 10 values of a column and its raw data for each value index=omi_Uat host=DEFRNCMP* sourcetype=all_events_attributes \| eval {idx} = elt \| fields ID,UMN,TicketID,node \| top ... by anz999 Loves-to-Learn Lots in Splunk Search 05-02-2019 0 6	0	6
How to filter the values of 5 columns using checkbox? Let's imagine that I have a table as the picture below displayed. Column 5 listed the column names who have the "YES"... by Hanliamadeus Explorer in Splunk Search 05-02-2019 0 3	0	3
predict function query at time i find the predict function predicts values over 100% based on historical data. is there anything i can confi... by jiaqya Builder in Splunk Search 05-02-2019 0 7	0	7
How to count unique events pr class I need help with stats in Splunk Let's say you have these example data: \| stats count \| eval car="Opel" \| eval colo... by lakromani Builder in Splunk Search 05-02-2019 0 8	0	8
Using Where like but instead of text looping through a lookup Hello! I've been looking around for an answer to this one, either it eludes me or I'm straight up asking the wrong q... by kuroai New Member in Splunk Search 05-01-2019 0 3	0	3
Count Issues I'm trying to count all my data by each day of the week each time a host is hit. EX: machine a has a script run once... by garrettpelak5 New Member in Splunk Search 05-01-2019 0 1	0	1
How to use multiple base searches in one search? I have to base searches defined in my dashboard: <search id="num1"> <query>....</query> </search> <search id="nu... by olejor Engager in Splunk Search 05-01-2019 2 9	2	9
How to pass token during check and uncheck of the checkbox? How to pass token during check and uncheck of the checkbox in splunk? For ex- if I check the box then it will pass t... by vivek_manoj Explorer in Splunk Search 05-01-2019 0 10	0	10
Timestamp Optimization Tools All, Any cool tools out there for optimization and tuning of time stamps? Like a regex101.com style site but like f... by daniel333 Builder in Splunk Search 05-01-2019 0 1	0	1
How to apply anomaly command on timechart query? I am trying to apply anomaly detection on count field. Base query: index=test sourcetype=web source="test.log" WEB_... by PRIYANKA_1993 New Member in Splunk Search 05-01-2019 0 2	0	2
stats not pulling through after a certain date I have a search that looks at 2 indexes so it can pull 3 lots of separate data back so i can show data over a period ... by Sfry1981 Communicator in Splunk Search 05-01-2019 0 4	0	4
Custome Time picker in below query its showing time picker data or time as per time picker. but i want if i select last 30 days in time p... by abhishekdubey00 Engager in Splunk Search 05-01-2019 0 4	0	4
Error 'Could not find all of the specified lookup fields in the lookup table.' I'm having problems when doing splunk searches, always returning the error [sp1p-splidx-sec-90] Error 'Could not fin... by LeandroKopke Explorer in Splunk Search 05-01-2019 2 7	2	7
Splunk HTTP event collector ingesting the data multiple times I'm trying to ingest data using Http Event Collector, HEC. wired that, sometime the data is getting ingested multiple... by sathiyaraj1983 Explorer in Splunk Search 05-01-2019 0 0	0	0
outputlookup limitiations?? Hello Gurus, I'm trying to generate a lookup from a search using the outputlookup option but running into some issue... by MKozanic Path Finder in Splunk Search 04-30-2019 0 5	0	5
How to trim each event and create a field to extract only particular words? Hi Experts, I have few logs as below, i want to capture all unregistered uri (from unregistered uri text to end of t... by Allampally Path Finder in Splunk Search 04-30-2019 0 1	0	1
How to use the Where clause in my search? I have index A with fields: username, field1, field2 I have main:sourcetype B with fields: userid, fullname Trying t... by vnguyen46 Contributor in Splunk Search 04-30-2019 0 4	0	4
How to combine 2 field searches with multiple values? I want to search the logs that have a combination of source and destination IP's. For e.g, I want to search the logs... by praveenmathew27 Engager in Splunk Search 04-30-2019 0 2	0	2
tstats returns no results: inconsistencies when searching datamodels via tstats compared to from and datamodel While working on writing a new correlation search, I wasn't getting any results from tstats; since I was pretty sure ... by triest Communicator in Splunk Search 04-30-2019 0 2	0	2
Is it possible to search and identify the top users of each index? Wondering if there is a way to identify top user of each index. Basically I am tasked with going back and identifying... by paimonsoror Builder in Splunk Search 04-30-2019 0 6	0	6
Host field without wildcards returns no results If I run a search that says * host=somehost, I get results back. If I remove the wildcards around the host field ... by cdoebert Path Finder in Splunk Search 04-30-2019 0 2	0	2