Splunk Search

Community Activity

Complex Regex, HELP! I have a transform that I need help writing a regex for. It has two conditions. It needs to match the value in this... by jedatt01 Builder in Splunk Search 04-09-2019 1 10	1	10
Differentiate between two fields with the same name in two different jsons So I have a single log event that captures the request and the response JSONs. As a user I'd like to be able to write... by seomaniv Explorer in Splunk Search 04-09-2019 0 3	0	3
formating a text file i have a file in the format of : productId,product_name,price,sale_price,Code DB-SG-G01,Mediocre Kingdoms,24.99,19.9... by ashish_chand New Member in Splunk Search 04-09-2019 0 3	0	3
converting 1.1.1970 to epoch doesn't work, whereas converting epoch 0 to string does work... is it a bug or did I miss something? Hi, I stumbled on something funny with the time conversion functions. Trying to convert the 1st of January 1970 to ep... by grundsch Communicator in Splunk Search 04-09-2019 1 3	1	3
To extract a string which has numeric value and get the count I have logs in splunk as mentioned below 3/22/19 2:05:44.000 PM Date = 2019-03-22 13:58:19,827 \| Level = INFO \| Req... by minaljain New Member in Splunk Search 04-09-2019 0 1	0	1
How to write a search to not display the last bucket of data in a timechart? I have a requirement in which I don't want to display the last bucket of data in the timechart. Example: The bucket t... by ID_SplunkUser Path Finder in Splunk Search 04-09-2019 1 5	1	5
How to modify a part of a search based on two inputs selection? Hello, I have a dashboard with 2 inputs: A radio input with two buttons, index and role, with the token viewText inp... by ktn01 Path Finder in Splunk Search 04-09-2019 0 1	0	1
HELP FOR FORMATTING TEXT IN A PANEL SEARCH Hello I have the panel below in my dashboard <row> <panel> <single> <search> <query>\| i... by jip31 Motivator in Splunk Search 04-09-2019 0 2	0	2
Stop kv-store lookup from grouping values per key I have a kv store that has several fields (ip addresses, time stamps etc) tied to a unique key (the default mode) - w... by christoffertoft Communicator in Splunk Search 04-09-2019 0 7	0	7
Splunk 6.2.4, TA-tippingpoint 3.3.0 - Failed extractions I have TA-tippingpoint 3.3.0 app installed on Enterprise Splunk 6.2.4, but there are no field extractions for the IPS... by may_aaron Engager in Splunk Search 04-09-2019 1 6	1	6
Can you help me search to return results even if there are none available? I have 2 source types that run every morning at 8:30am. If 1 or more does not, I need to still see the source types ... by ryhluc01 Communicator in Splunk Search 04-09-2019 0 6	0	6
In a subsearch, retrieve last-logged-on-user, for IPs in a search for most-blocked connections from Firewall I have a search that returns the IPs that have recently been blocked the most, and I want to add the "Last Logged On ... by VexenCrabtree Path Finder in Splunk Search 04-09-2019 0 2	0	2
Handle 0 Count, No results found & when no data is being indexed I was displaying the count of certain type of locks using the query below. index=A sourcetype="source" LOCK_MODE!="... by njohnson7 Path Finder in Splunk Search 04-09-2019 0 2	0	2
How to extract values "good" and "bad" from my sample data into a new field named STATUS? Hi I have a log file in which all the events has this below lines as common; 04:03:28 04/12/2016 good 201961028 ... by roopeshetty Path Finder in Splunk Search 04-09-2019 0 5	0	5
how to match a specific field in 2 different csv file and 2 different index Hi I use the search below in order to display in a table a specific EventCode by host I am matching the host with th... by jip31 Motivator in Splunk Search 04-08-2019 0 2	0	2
When I use \| spath \| search \| table search commands I am getting duplicate entries When parsing information from a _json file when using \|spath \|search \|table I am receiving duplicates. I'm not sur... by bzsplunk54 New Member in Splunk Search 04-08-2019 0 1	0	1
Regex in Splunk Hi, I have the following column: CVSSv2 CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N I want to do something like this: sourc... by hjsabdjahbd Observer in Splunk Search 04-08-2019 0 3	0	3
Show an area under a chart I have a line chart and have to calculate area under this chart. The calculated area must be presented on a chart pan... by kvaga Explorer in Splunk Search 04-08-2019 0 3	0	3
How to schedule PDF report and save locally instead of sending e-mail ? I have a PDF report scheduled and sending daily e-mail with the PDF report in attachment. I need to automatically sav... by dvmodeste New Member in Splunk Search 04-08-2019 0 0	0	0
Generate PDF file but NOT email it Hi, I need to be able to generate PDF files of views, which I can get working, but I don't want them emailed. I want... by philyeo Explorer in Splunk Search 04-08-2019 1 7	1	7
Having issues reporting information from inner searches in a nested query Hello all, I will try to explain my issue as concisely as possible. I suspect the issue is attributed to me misunder... by nickcardenas Path Finder in Splunk Search 04-08-2019 0 5	0	5
Create line graph with multiple series Need assistance creating a line graph with 3 series. I have 1 field with 3 different values. I've tried to do this i... by clarkedayne New Member in Splunk Search 04-08-2019 0 3	0	3
Having a % to follow number on gauge chart Current: \| search MachineNumber="01" \| eval PercentComplete= round(((CountSinceLastTaskCompletion)/MaintenanceFrequen... by pglover12 New Member in Splunk Search 04-08-2019 0 1	0	1
Splunk - Object is not iterable Afternoon Guys, Currently get a strange issue. I noticed we were not ingesting logs from one of our s3 buckets and i... by brewster88 New Member in Splunk Search 04-08-2019 0 0	0	0
How to remove third Thursday from Splunk results We would like to remove our monthly patching window from our error report that we receive from Splunk on some of our ... by blisowski New Member in Splunk Search 04-08-2019 0 2	0	2