Splunk Search

Community Activity

How come strptime does not work for some days? There seems to be some issue with the strptime function. I'm not sure why it works for few days and does not work for... by shaileshmali Path Finder in Splunk Search 03-22-2019 0 1	0	1
Chart with multiple Row Fields that Share Values Over One Column Field Hello, I was wondering if you can have a chart that compares the average of one field depending on the value of sever... by jjezusek Engager in Splunk Search 03-22-2019 0 2	0	2
Extract id from string using rex Hi all How to extract id from String using rex? sample: sample-3456-777-text result: id 3456-777 by rockts89 Engager in Splunk Search 03-22-2019 0 2	0	2
Vlookup between 2 queries Hello folks, i have a list of hardware for an account X and i want to know if all the hawrdware list is present in o... by evelandi New Member in Splunk Search 03-22-2019 0 2	0	2
EventViewer No Display User has the "admin" RBAC role User uses dark theme User uses several workstations with Chrome and IE A simple searc... by halbeisendv Path Finder in Splunk Search 03-22-2019 0 2	0	2
AWS windows logs parsing Hi, How we can distinguish windows/linux logs from the AWS logs. Is there any TA/App is available which support by s... by N92 Path Finder in Splunk Search 03-22-2019 0 2	0	2
2 timestamp, the rest identical, how calculate duration ? tim:2019-01-18 10:27:54,id:bee236 tim:2019-01-18 10:38:07,id:bee236 tim:2019-01-21 09:27:09,id:thierry403 tim:2019-01... by splunkLPN Path Finder in Splunk Search 03-22-2019 0 2	0	2
Join two datasets (main search and subsearch), keep all keys in both, and update non-key fields with data from the subsearch If I have two searches, one generates fields "key A" and "Column A" and the second search generates fields "key B" "C... by cdhippen Path Finder in Splunk Search 03-22-2019 0 4	0	4
Timechart - Running Total By Product Hi, I would like to create a timechart that shows the running total revenues for each product. First I've created a ... by HeinzWaescher Motivator in Splunk Search 03-22-2019 1 5	1	5
SPL command to copy paste rows in lookup with increment values i have lookup like following : ID jobname start_time end_time frequency 1 abc 0:00 21:00 ... by gowtham495 Path Finder in Splunk Search 03-22-2019 0 1	0	1
Eventstats not getting the latest event based on the field Hi Team, I am trying to get the latest event from the list of events , id field is common across all the ... by imurpalvicky Engager in Splunk Search 03-22-2019 0 8	0	8
Splunk problem with fast and smart mode Hello community, I am facing a problem ,I have an instance of splunk installed on linux server , And I am trying to ... by virtuosoo Explorer in Splunk Search 03-22-2019 0 6	0	6
Optimize my search This is my search: Function="- Parts::GetPartSection =>" \| rex "maingroupNo\>(?.+)\\(?.+)\\(?.+)\" \| convert timefor... by jyab6z Path Finder in Splunk Search 03-22-2019 0 2	0	2
how to add field values of a table to another field values in a different table in a dashboard belonging to same Index hello all, I want to add field values of a table with field values of another table in a dashboard both belonging to ... by preacher_15 Explorer in Splunk Search 03-22-2019 0 1	0	1
Duration Timer hi!I have a prototype here that has three switches for each light, Green, Yellow and Red Light respective. Each time ... by mdmaala Communicator in Splunk Search 03-21-2019 0 1	0	1
query to get top 10 users Hello everybody, I am getting data in "index=test", I am trying to get top 10 Calling userid's with there call count... by splunkuseradmin Path Finder in Splunk Search 03-21-2019 0 1	0	1
How to search what field values are missing using a lookup table per period of time? - follow up I am using a search that was provided as an answer to a previously posted question - How to search what values are mi... by christopheryu Communicator in Splunk Search 03-21-2019 0 4	0	4
Duration between events Given transit data like: 2019-03-19 19:00:32 GMT vehicle_id="58" stop_direction=Inbound 2019-03-19 19:05:45 GMT vehi... by plucas_splunk Splunk Employee in Splunk Search 03-21-2019 0 2	0	2
how to carry calculations down the pipe for further calculations? Goal: Count the percentage of users that scroll to through each section of a page. Problem: I know the number of use... by user93 Communicator in Splunk Search 03-21-2019 0 8	0	8
How to find the first saturday of every month? Hello, I am currently stuck with finding the first Saturday of every month. Below is a screenshot of what i currentl... by vpurushottam Explorer in Splunk Search 03-21-2019 0 2	0	2
Optimize Search I have to create an alert where as soon as the number of events at time X has changed. There are two following scena... by nicxso Engager in Splunk Search 03-21-2019 0 6	0	6
how to search by too deferent champs Hello , how to search by two different champs ? I try "OR" but not result Thanks by aalaa Path Finder in Splunk Search 03-21-2019 0 2	0	2
Colors inversed in my piechart ! why ? Hi ! I have a piechart and I assigned red color for a x value and green color for a y value on it. But sometimes it ... by henriq_c Explorer in Splunk Search 03-21-2019 0 5	0	5
How to exclude two grouping of results in query? Hello, this is my first forum entry and I'm really hoping this question is clear. Currently, my timechart results are... by noob4now New Member in Splunk Search 03-21-2019 0 4	0	4
How to make the column one color? Hi I have a table with TEXT, i have 3 columns. \| table no1 no2 email I want the column email to be gray, I cant s... by robertlynch2020 Influencer in Splunk Search 03-21-2019 0 5	0	5