Splunk Search

Community Activity

Basic search doesn't return consistent data I'm doing a simple query into splunk to retrieve some data: index=my_index \|table source,host I've also put a speci... by fdederichs Engager in Splunk Search 01-30-2019 1 4	1	4
Reloading Index everytime Hello Experts, We are having an issue where we have an DB connect to connect to oracle database and getting the data... by praveenm00 New Member in Splunk Search 01-30-2019 0 1	0	1
Can you help us build a query that removes null values from a table? Hi guys, Our search query is like this LogName=Application SourceName=Script \| rex "Days Remaining: (?.*)days" \| re... by roopeshetty Path Finder in Splunk Search 01-30-2019 0 2	0	2
extract _raw to field Team, When I search for particular sourcetype, source and index I want to have one interesting field may be called as... by rahulsingh336 New Member in Splunk Search 01-30-2019 0 1	0	1
Custom Alert Action UI Hello! I'm trying to append to the Alert ui the query itself (the search from which the user create the alert), in ... by astatrial Contributor in Splunk Search 01-30-2019 0 7	0	7
Search results, link to url Greetings, I've done some reading, but I can't seem to put together the various answers over the course of the years... by jgauthier Contributor in Splunk Search 01-30-2019 0 4	0	4
How to extract month and year from _time _ time is in below format 2019-01-30 07:10:51.191 2019-01-30 07:10:51.190 2019-01-30 07:10:51.189 I need output in ... by sbhatnagar88 Path Finder in Splunk Search 01-30-2019 0 4	0	4
How retention works Need to understand how retention works ( _time and Indexed time ) If I have set FrozenTimePeriodInDays = 30 Event: ... by rakesh44 Communicator in Splunk Search 01-30-2019 0 1	0	1
add dynamic overlays to chart Just wondering if there's a way to get a handle to the Highcharts javascript object that might have been created when... by devsplunkid New Member in Splunk Search 01-30-2019 0 2	0	2
How to Add icons to splunk app bar? Hello, I want to add icons to the appbar menu of splunk, And I can't find any reference for that..Any help please ? by virtuosoo Explorer in Splunk Search 01-30-2019 0 2	0	2
what app or add-on was used in the operations intelligence demo? Hi, I notice there is an splunk operations intelligence demo in follow link : https://www.splunk.com/en_us/it-oper... by zhenwang Engager in Splunk Search 01-30-2019 0 1	0	1
Need the correct regular expression for my rex command Here is my raw data: {"line":"level=debug t=\"2019-01-29T19:47:20.971Z\" rt=1 method=GET path=\"/service/health?apik... by moizmmz Path Finder in Splunk Search 01-30-2019 0 2	0	2
[SHC]Clarification on scheduler_load_based? How does captain scheduler_load_based calculation on its members to distribute scheduled saved searches ? Is it base... by rbal_splunk Splunk Employee in Splunk Search 01-29-2019 0 1	0	1
Which is this the best way to get a count of events indexed for entire environment? Blockquote 1. \| eventcount summarize=false \| stats sum(count) Blockquote OR Blockquote 2. https://docs.splunk.c... by bgagliardi1 Path Finder in Splunk Search 01-29-2019 0 1	0	1
SEARCH NOT of lookup not working is not working in realtime search i am running a realtime search in which i need to check that if a particular id is present in a lookup then it should... by bhavneesh94vohr New Member in Splunk Search 01-29-2019 0 2	0	2
Help with a pie chart search? All, I have a relatively simple search but I am tripping over it for some reason. I want a pie chart of all hosts... by daniel333 Builder in Splunk Search 01-29-2019 0 1	0	1
how to search multiple strings Hi Team, I have a list of 200 filenames (string) that need to be searched in Splunk. Each filename is unique. examp... by arunkumardhiman New Member in Splunk Search 01-29-2019 0 4	0	4
How do I use props.conf and transforms.conf to filter events based on a key word? Hi All, I have a lot of compressed files in a local directory that I want Splunk to ingest. I set up a directory as... by Log_wrangler Builder in Splunk Search 01-29-2019 0 5	0	5
Can you help me use regex to extract fields that contain 'ssd'? Hello Splunk, I have the following raw log lines: 1 2019-01-29T15:44:41.184068+00:00 xxx vpxd 4566 - - Event [5650... by lucien62 New Member in Splunk Search 01-29-2019 0 1	0	1
Need the correct regular expression for my rex command Here is my event's raw data: {"line":"level=info t=\"2019-01-29T18:19:42.999Z\" rt=2 method=GET path=\"/contentskus... by moizmmz Path Finder in Splunk Search 01-29-2019 0 7	0	7
Help with Query to list current status buckets Hi. Somebody to help me with a query to list current status buckets, example Bucket Name ... by grivera_kudaw Explorer in Splunk Search 01-29-2019 0 3	0	3
How is Splunk utilizing Map Reduce? How is Splunk utilizing Map Reduce and also, does it use the same tech for SPL and data compression? by ashishebansal New Member in Splunk Search 01-29-2019 0 4	0	4
How do I get a full listing of indexes and gigabyte ingestion? I've been using the following search to get a count of ingested daily (24hrs) and for 30 days, but I'm only getting t... by nls7010 Path Finder in Splunk Search 01-29-2019 0 1	0	1
percentage of field I have two fields body.response.successcount and body.response.failurecount .How to write query for success count % &... by tej8 New Member in Splunk Search 01-29-2019 0 1	0	1
Possible "Race Condition" From SPL code to Dashboard code running using lookuptables Hi A SPL line is retrieving data 100% all of the time, but it retrieves data 70% of the time when used as dashboard ... by robertlynch2020 Influencer in Splunk Search 01-29-2019 0 6	0	6