Splunk Search

Splunk Search
Community Activity
splunker1981
Hello folks, Trying to figure out how to go about joining 2 fields with a dash but only if they don't have the same...
by splunker1981 Path Finder in Splunk Search 02-08-2019
0 1
0
1
UMDTERPS
We are using a lookuptable with CSV's for reports. However, the _time field has the following format for time: 2015-...
by UMDTERPS Communicator in Splunk Search 02-08-2019
0 4
0
4
ips_mandar
Hi everyone, Can someone tell me what I'm suppose to edit in my datetime.xml file for my custom date and time to be r...
by ips_mandar Builder in Splunk Search 02-08-2019
0 17
0
17
jfriedman_ofigl
My vulnerability data looks like this: Machine MachineType VulnCode Impact ------- ----------- -------- ------...
by jfriedman_ofigl Explorer in Splunk Search 02-08-2019
0 4
0
4
Shashank_87
Hi, I am working on a query where I have to match the responseCode from the search to the responseCode in a lookup ...
by Shashank_87 Explorer in Splunk Search 02-08-2019
0 3
0
3
damucka
Hello, I have an alert which selects from the database and whenever entries come back, the alert is triggered. Now, ...
by damucka Builder in Splunk Search 02-08-2019
0 3
0
3
Deepz2612
Hi, Why is that a particular user in my team is unable to see his name on the top in Splunk UI like anyother in my te...
by Deepz2612 Explorer in Splunk Search 02-08-2019
0 4
0
4
vaibhavvijay9
Hi All, I want to display only results which are present in a given list (please see below) : ....... | xmlkv | sta...
by vaibhavvijay9 New Member in Splunk Search 02-07-2019
0 4
0
4
jacubero
How can I obtain the percentage of zero values in a lookup table? I have tried the following command without success:...
by jacubero Explorer in Splunk Search 02-07-2019
0 6
0
6
danielkhouri
Hi, I've created three time charts that are currently counting the number of connections. Each time chart is set wit...
by danielkhouri Engager in Splunk Search 02-07-2019
0 1
0
1
mishaaaaaaaaaa
Hi, splunkers! I have 4 hosts, and i need to culculate total sum of values contained in each event In other words i ...
by mishaaaaaaaaaa Explorer in Splunk Search 02-07-2019
0 10
0
10
sbhatnagar88
How do you display the last 4 months in Splunk starting from the current month? Required output is: January 2019 De...
by sbhatnagar88 Path Finder in Splunk Search 02-07-2019
0 6
0
6
rohanmiskin
I have log events for a spring boot application in the format 10.30 2019 | 1111 | POST /data1 10.31 2019 | 1111 | da...
by rohanmiskin Explorer in Splunk Search 02-07-2019
0 9
0
9
proyleJDS
This could get a little tedious but here goes: I have call centre data that is giving me the users' statuses, whethe...
by proyleJDS Path Finder in Splunk Search 02-07-2019
1 2
1
2
horst_poehlmann
I'm trying to create a dashboard that lets a user input an IP address and then search through the IP address database...
by horst_poehlmann Explorer in Splunk Search 02-07-2019
0 6
0
6
cquinney
I have events that contain multiple fields. For example PARAM1: Thing1 PARAM2: Thing2 PARAM3: Thing3 MESSAGE: Re...
by cquinney Communicator in Splunk Search 02-07-2019
0 2
0
2
HattrickNZ
This is my search to recreate the data I am working on: | makeresults | eval data = " 2019-01-01 98.0; 2019-01-...
by HattrickNZ Motivator in Splunk Search 02-07-2019
0 0
0
0
danielgp89
Hello Everyone! I have a timechart visualization and I would like to change the order of the number that are in the ...
by danielgp89 Path Finder in Splunk Search 02-07-2019
0 12
0
12
lsulax
search |rename Name as Threat | stats count by Threat | sort -count and search |rename suser as User | stats cou...
by lsulax New Member in Splunk Search 02-07-2019
0 4
0
4
lball
I'm trying to use a metadata search to quickly return the hosts that are currently sending logs to Splunk to determin...
by lball Explorer in Splunk Search 02-07-2019
0 3
0
3
rcmiller11
I have a VidyoPortal that gives me its responses formatted this way through its event notification system: **VDY\x00...
by rcmiller11 New Member in Splunk Search 02-07-2019
0 2
0
2
bhaskarasplunk
I tried this query to get all the members of a particular LDAP group: | rest /servicesNS/nobody/system/admin/LDAP-...
by bhaskarasplunk Explorer in Splunk Search 02-07-2019
0 2
0
2
acathignol
Hello, I have a column with names, I will call it "Costumers_Names". The "names" are actually unique identifiers (un...
by acathignol Explorer in Splunk Search 02-07-2019
0 3
0
3
btb2018
How can I detect attackers using IP spoofing in Splunk? I want to be able to detect this in Checkpoint and Juniper f...
by btb2018 Engager in Splunk Search 02-07-2019
0 2
0
2
tgdvopab
Hi all, My splunk search generates the following output via timechart: _time;cpu_core:host1;cpu_core:host2 2019-02-...
by tgdvopab Path Finder in Splunk Search 02-07-2019
0 6
0
6
Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...