Splunk Search

Community Activity

How to find all realtime searches? I'm looking for a search or rest call that will show me all searches that are configure to run in realtime as I think... by brdr Contributor in Splunk Search 04-25-2019 0 2	0	2
Put stats(values) and stats(count) in the same table (with tstats) Hello, I need help with a dashboard Panel I need to make for a client. This guy wants a failed logins table, but mer... by 3DGjos Communicator in Splunk Search 04-25-2019 0 4	0	4
Is there a way to collect a GPO setting from an Domain Controller on a regular interval? All, We have mandatory compliance settings requiring certain GPOs to pushed. I'd like to have a Splunk dashboard fo... by daniel333 Builder in Splunk Search 04-25-2019 0 0	0	0
how to calculate duration between events Hi All, i have a events as mentioned below. 02/04/2019 19:58:01 this is from A4: message from something 02/04/2019 ... by james_n Path Finder in Splunk Search 04-25-2019 0 1	0	1
splunk custom command python sdk set level for logging how do i set the logging level if i use the splunk.minining.dcutils? Is it possible to do it from within the python s... by spammenot66 Contributor in Splunk Search 04-25-2019 0 0	0	0
best practice for custom syslog field extraction I have a syslog file and none of the default sourcetypes give me what i want - so i have: any advice on best approac... by Skins Path Finder in Splunk Search 04-25-2019 0 3	0	3
How can I pipe the results of a stats command into another search as a field to perform a boolean operation? I'm struggling to output the results of a stats command into a new field so that I can then perform a search based on... by andimnf Explorer in Splunk Search 04-25-2019 0 3	0	3
Timechart Split by Multiple Fields for Trellis Is there a way to split timechart by more than two fields so that I can use a trellis layout for the visualization? (... by trikppy Engager in Splunk Search 04-24-2019 1 0	1	0
Adding evaluated token breaks searchWhenChanged="false"? I have a dashboard where the input fields are set to searchWhenChanged="false". This was working as expected until I ... by matstap Communicator in Splunk Search 04-24-2019 0 4	0	4
In Windows Custom Events, why are the bigger JSON events while using REGEX getting truncated? In our environment, the application writes logs into Windows Events in JSON format under Message section. We need to ... by Venkat_16 Contributor in Splunk Search 04-24-2019 0 8	0	8
How to find records between 1 year period? Hi Splunkers! I have a field which name is "Data Identificada" , all the values inside in this field are strings and... by lucasdc New Member in Splunk Search 04-24-2019 0 3	0	3
Metrics and real time searches? How should I approach RT aka real-time searches from metrics data and indexes? Should approach with the same caution... by jackgordon New Member in Splunk Search 04-24-2019 0 0	0	0
With a new user I cannot see app logos Hi team With my admin user I can see all app logos. I just create a new user. With read only role. He have apps bu... by christianubeda Path Finder in Splunk Search 04-24-2019 0 0	0	0
What does stats partitions do? What does stats partitions do? How would you use this? Sample query: \|stats partitions=1 latest(Insert_Text) ... by ryhluc01 Communicator in Splunk Search 04-24-2019 1 6	1	6
Integrity Check for Unauthorized Log Deletion Is there a query that I can use that will check for unauthorized deletion of event and security logs? by krussellffgbank New Member in Splunk Search 04-24-2019 0 2	0	2
Searches are returning no events in search head cluster Hi, We are encountering this no results issue for any index logs in only search head cluster, but we can search the ... by sathishkompelly Explorer in Splunk Search 04-24-2019 0 3	0	3
Find a results between two dates (initial date and limit date) . Hi Splunkers , I've tried this query to return events between two specific dates. Here is the query: index="db_rsa_... by lucasdc New Member in Splunk Search 04-24-2019 0 6	0	6
How to create a search for lookup to get results in single search? Hi, I have uploaded a csv file with fields User Name, A, B, C. First I need to perform lookup with another file wit... by vineeth_jain Explorer in Splunk Search 04-24-2019 0 6	0	6
Can a PDF table be more than 1000 rows? I'm in the process of building some high-priority dashboards for my management (time critical), and I'm having a prob... by adamsmith47 Communicator in Splunk Search 04-24-2019 0 12	0	12
How do I change the color of a table when I modify the value of a text type filter? I have a table with 2 filters: 1. Dropdown that selects the column 2. Text box (numeric) The functionality I want i... by HectorPena New Member in Splunk Search 04-24-2019 0 6	0	6
Input fields pre-filled with old data Hi Community, I am playing around with the KV Store tutorial (http://dev.splunk.com/view/SP-CAAAEZT) and all is wel... by brahimm New Member in Splunk Search 04-24-2019 0 0	0	0
anomalydetection and anomalousvalues on 4 different hosts Hello, We are planning to do some linux patching on some of our Prod servers and were thinking of setting some splun... by abdulwsu New Member in Splunk Search 04-24-2019 0 0	0	0
horse shoe meter for visualisation Hi I have a query to see the success and failure rate. The query will give the fields success and failure rate as out... by Deepz2612 Explorer in Splunk Search 04-24-2019 0 3	0	3
Time taken by multiple events in a distributed transaction Hi , We have a audit log with the information of different event types and their execution time for different custome... by sathishthangara New Member in Splunk Search 04-24-2019 0 0	0	0
How to pass multiple search field into new search with AND/OR conditions? Hi im currently having a search that result multiple field, and i wish to pipe those values into a new search that m... by totaro Explorer in Splunk Search 04-24-2019 0 1	0	1