Splunk Search

Community Activity

	How do I combine data from two different sources without the append or the union command? Hi, is there any way to combine data from two different sources without the append or the union command? I have a c... by atozeswar New Member in Splunk Search 12-06-2018 0 5	0	5
	Slack alert in Splunk 6.4 or 6.5.5 Hello all, I am getting the below error when I trigger alert from Slack alert app. I tried from Splunk 6.4 and 6.5.5... by impurush Contributor in Splunk Search 12-06-2018 0 4	0	4
	Can you help me with an eval that has conditions? hello, I use the code below in order to test if a filename exists. It works, but only when I put the token time on ... by jip31 Motivator in Splunk Search 12-06-2018 0 8	0	8
	How do I generate a search that shows me the total REVENUE generated per by week? Hi Guys, I'm a new Splunk user: I have a dataset with fields Date, ACC_NBR, Count, REVENUE. Date (Date when number ... by makhombi New Member in Splunk Search 12-06-2018 0 3	0	3
	Matching events that happen within the micro-seconds apart Hello guys, I'm working on monitoring our mssql error logs and running into a probably simple issue but I'm stumped.... by dondky Path Finder in Splunk Search 12-06-2018 0 6	0	6
	checking list of email domains appear in a field I have a field (recipient) which contains all the recipients that an email was sent to. I also have a lookupcsv file... by ChrisCLewis Communicator in Splunk Search 12-06-2018 0 3	0	3
	How do I match all data after the last slash using regex? Hi, I'm trying to retrieve data using regex and wildcard. Search query - "URL=/data/item/v1/*/" Result 1 - /data/... by harikishore23 New Member in Splunk Search 12-06-2018 0 7	0	7
	How to consider values of a field from the events of type1 when does not exist in type2? Hello, I have got two type of events, typeA and typeB, In both the fields I'm interested in only a single field "Suc... by bollam Path Finder in Splunk Search 12-05-2018 0 3	0	3
	How to add a query parameter conditionally? I'd like to conditionally add a parameter to my Splunk query based on the version number of my application. I have ... by mamerige Engager in Splunk Search 12-05-2018 0 1	0	1
	Query to list all objects in an app? I am trying to run a query to find all objects in a particular app (i.e alerts, dashboards, props, etc) Urgent. Thank... by Jewatson17 Path Finder in Splunk Search 12-05-2018 0 2	0	2
	Can you help me build a regex that would parse %host% from the following log directories? I am trying to use host_regex in input.conf I have log directories as, /var/log/rsyslog/%year%/%month%/%date%/%host%... by meet_vadaria Engager in Splunk Search 12-05-2018 0 4	0	4
	I see events in the data summary for a host. However, when I search, I don't see any data. How do I see it? I see the host IP 1.2.3.4 with 1000 events in the last 30 minutes. However, when I run the search, the search does no... by rajindurbal Path Finder in Splunk Search 12-05-2018 0 5	0	5
	How to conditionally add a search field? I'd like to conditionally add a parameter to my Splunk query based on the version number of my application. I have ... by mamerige Engager in Splunk Search 12-05-2018 0 0	0	0
	How do I merge individual records in Splunk that contain a common field? Hello All, I have a number of individual records in Splunk, all with a common field of X, that i'm trying to combin... by JohnGilmour New Member in Splunk Search 12-05-2018 0 2	0	2
	Will all Splunk products work with Oracle 12.2 on Exadata?,Do all splunk products work with Oracle 12.2 running on Exadata? I'm researching the effects of upgrading from Oracle 12.1 to Oracle 12.2 on Exadata. I need to know if there are any ... by xerosaburu New Member in Splunk Search 12-05-2018 0 0	0	0
	How do I make a field extraction that selects only the first occurrence? Hello, I have events that span multiple lines. One such event looks as follows: ... # User details ID: 123 Username:... by whrg Motivator in Splunk Search 12-05-2018 0 6	0	6
	How do we optimize the search result time with a query using the append command? I have a query , where i have multiple append commands used to get the output result. The query has 1 index and 3 so... by vikashperiwal Path Finder in Splunk Search 12-05-2018 0 5	0	5
	Can you help me format the x-axis of a timechart? How do I format the x-axis to look like the first picture from the timechart documentation? To clarify,I want to have... by RWL01 Engager in Splunk Search 12-05-2018 0 6	0	6
	Customize Presets time picker Hello There I want to hide this section from time picker Presets in specific app not in the search and reporting app ... by dinaabdelhakam Path Finder in Splunk Search 12-05-2018 0 10	0	10
	How can I append/join the values of sub-search with the main search with the common field in the corresponding row? For an instance, I want to calculate the runtime of each stage of two trains and but there are stages which one of th... by bollam Path Finder in Splunk Search 12-05-2018 0 4	0	4
	Can you help me identify when end time overlaps start time for the following events? We have a process that runs for various pieces of our system, and I'm trying to prevent any overlaps. I have been ab... by kmaron Motivator in Splunk Search 12-05-2018 0 2	0	2
	Can you help me create the regex to replace multiple characters in the following field? Hello, I extracted a field like this: folder="prova^1.ED56GH" and I want to change it at search time by replacing... by sistemistiposta Path Finder in Splunk Search 12-05-2018 0 2	0	2
	Can you help me with the following search in Splunk? Hi Team Splunk! How can i do this? Thanks! by vumanhtai Path Finder in Splunk Search 12-05-2018 0 4	0	4
	How do you find the difference between the count of 2 keywords? I have 2 keywords. "UniSim Job received" and "UniSim Job Run completed successfully". I want to find the difference... by abhishekgandhe Explorer in Splunk Search 12-04-2018 0 2	0	2
	login using python sdk failed (http, not https) linux(RHEL 6.5 ) Python 2.7.15+splunk-sdk-python-1.6.5 http(not https) code: from splunklib.client import connect ... by hxzq2018 New Member in Splunk Search 12-04-2018 0 2	0	2

Get Updates on the Splunk Community!

Splunk Cloud Application Management in Terraform

Now On-Demand We’re diving into how you can bring Infrastructure as Code (IaC) principles to your Splunk ...

What's New in Splunk Enterprise Security (ES) 8.6

Purpose-Built AI Agents for the Agentic SOC Splunk Enterprise Security 8.6 expands AI in Security with ...

From Raw Data to Executive-Ready Stories, Faster

Build Data Stories for Every Audience A dashboard is rarely just a dashboard. It might be the view an ...

Splunk Search

How do I combine data from two different sources without the append or the union command?

Slack alert in Splunk 6.4 or 6.5.5

Can you help me with an eval that has conditions?

How do I generate a search that shows me the total REVENUE generated per by week?

Matching events that happen within the micro-seconds apart

checking list of email domains appear in a field

How do I match all data after the last slash using regex?

How to consider values of a field from the events of type1 when does not exist in type2?

How to add a query parameter conditionally?

Query to list all objects in an app?

Can you help me build a regex that would parse %host% from the following log directories?

I see events in the data summary for a host. However, when I search, I don't see any data. How do I see it?

How to conditionally add a search field?

How do I merge individual records in Splunk that contain a common field?

Will all Splunk products work with Oracle 12.2 on Exadata?,Do all splunk products work with Oracle 12.2 running on Exadata?

How do I make a field extraction that selects only the first occurrence?

How do we optimize the search result time with a query using the append command?

Can you help me format the x-axis of a timechart?

Customize Presets time picker

How can I append/join the values of sub-search with the main search with the common field in the corresponding row?

Can you help me identify when end time overlaps start time for the following events?

Can you help me create the regex to replace multiple characters in the following field?

Can you help me with the following search in Splunk?

How do you find the difference between the count of 2 keywords?

login using python sdk failed (http, not https)

Splunk Cloud Application Management in Terraform

What's New in Splunk Enterprise Security (ES) 8.6

From Raw Data to Executive-Ready Stories, Faster

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation