Splunk Search

Community Activity

help on append command hi The request below count a number of error events by host index="x" sourcetype="x" ConfigManagerErrorCode=28 \| d... by jip31 Motivator in Splunk Search 03-02-2019 0 6	0	6
Merge two line chart with different query in to single line chart I have two line chart with different queries as follows: <chart> <search> <query>index=*... by karthi25 Path Finder in Splunk Search 03-02-2019 0 1	0	1
Searching a port range How can i search for matches using a port range on an extracted field? for example: if i want all events in port ra... by EricPartington Communicator in Splunk Search 03-02-2019 1 3	1	3
Foreach in Multisearch Hi, I wonder whether someone can help me please. I've put together the query below using the foreach command, which,... by IRHM73 Motivator in Splunk Search 03-02-2019 0 14	0	14
How do you group results by location and percentage the results? I have a search result that is tabled, and now, I am trying to find a result by percentage of the location they visit... by davidoking Explorer in Splunk Search 03-02-2019 0 2	0	2
count events where the same value exists in two different fields I need to write a query that counts events when 3 criteria are met. First two are easy, they events have to have the ... by mmdacutanan Explorer in Splunk Search 03-01-2019 0 1	0	1
Is there a posted percentage for the number of people that passed or failed each Splunk certification? Is there a posted Certification Pass/Fail rating or number of people that passed each Splunk certification exam poste... by cbeard604 Explorer in Splunk Search 03-01-2019 6 5	6	5
Display Time Taken in Splunk response I would like to display the time taken for a page to load in Splunk. Here is my query: splunk_server=* index="myind... by jdhavo New Member in Splunk Search 03-01-2019 0 1	0	1
convert large duration timelapse to decimal hour I'm trying to convert a timestamp where my hour will go beyone 24 hours: for example: 305:44:03 The ctime and dur2... by mjones414 Contributor in Splunk Search 03-01-2019 0 1	0	1
Foreach in Multisearch Hi, I wonder whether someone can help me please. I've put together the query below using the foreach command, which,... by IRHM73 Motivator in Splunk Search 03-01-2019 0 5	0	5
Where and eval weirdness? I have a multi-value field called TotalRows (which is in contains a list of values in time order) and I'm trying to d... by Lowell Super Champion in Splunk Search 03-01-2019 0 2	0	2
Append static data to a field for charting Hello, I am trying to append static data to a chart that splunk generates and i'm not sure how to do this with a lo... by zhatsispgx Path Finder in Splunk Search 03-01-2019 0 4	0	4
Nested eval command in search Hi, I have to use nested eval command in my search query. Requirement: if isnotnull(GC_TIMESTAMP) then set _time ... by AKG1_old1 Builder in Splunk Search 03-01-2019 1 9	1	9
How do I edit my eval syntax with multiple if conditions to produce a certain field? Hi all. I have a ruleset like this: MODEL_NUMBER1 AND BTT = SUBTYPE1 MODEL_NUMBER2 AND CTT = SUBTYPE2 MODEL_NUMBER3... by changux Builder in Splunk Search 03-01-2019 0 7	0	7
Follow-Up: Appendcols or other options for searching a sub-search on port ranges In my previous question I didn't think a join would work, but somesoni2, proved that it would work. The only problem... by jlundtristate Engager in Splunk Search 03-01-2019 0 3	0	3
chart for startup time Hello, I would like to monitor my TomEE restart occurences and time execution, so I am looking for the expression: "... by benji00 New Member in Splunk Search 03-01-2019 0 4	0	4
Calculate daily and monthly average Hi Consider following data . Date Country IP_Prefix 01/01/2018 UK 123.123 01/01/2018 UK 123.123 01/01/2018 UK 123.1... by majeedk Engager in Splunk Search 03-01-2019 0 2	0	2
How to dynamic assign variable to maxspan and span Hi, I want to create a dynamic variable containing the span value on my index search. I have a lookup file that has ... by mpaw Explorer in Splunk Search 03-01-2019 0 4	0	4
How do you exclude an item from a lookup table and an additional condition? I have a lookup table that I'm using to exclude some devices from search results. index = my_index \| lookup m... by yemyslf Path Finder in Splunk Search 03-01-2019 0 2	0	2
Can you help me with DB/Index app monitoring? Hello community, My first and probably not the last comment here...as it seems the community is quite active. I am ... by benji00 New Member in Splunk Search 03-01-2019 0 6	0	6
How can I find events having NULL value related to a field? Hi, I am trying to find all the events related to a field where value is NULL. For E.g., say a field has multiple v... by sbhatnagar88 Path Finder in Splunk Search 03-01-2019 0 10	0	10
Can we automatically delete searches? A Splunk user told us that after every search they run, they go and delete it, and by doing that, they avoid the quot... by ddrillic Ultra Champion in Splunk Search 03-01-2019 0 2	0	2
"License Usage - Previous 30 Days" dashboard broken? In a distributed environment the master "License Usage - Previous 30 Days" and "License Usage - Today", and the searc... by girtsgr Explorer in Splunk Search 03-01-2019 0 4	0	4
How can I change the date format of search results? All of my devices send logs to Splunk with date format set at yyyy-mm-dd, as they should, and Splunk reads them fine ... by cmartell Explorer in Splunk Search 03-01-2019 2 10	2	10
How to extract only date from the mentioned string Below is the kind of string i have and I want to extract only date from it. Available string: 2019-02-24T16:05:37.00... by sbhatnagar88 Path Finder in Splunk Search 03-01-2019 0 5	0	5