Splunk Search

Community Activity

	How do I generate a search that shows me the total REVENUE generated per by week? Hi Guys, I'm a new Splunk user: I have a dataset with fields Date, ACC_NBR, Count, REVENUE. Date (Date when number ... by makhombi New Member in Splunk Search 12-06-2018 0 3	0	3
	Matching events that happen within the micro-seconds apart Hello guys, I'm working on monitoring our mssql error logs and running into a probably simple issue but I'm stumped.... by dondky Path Finder in Splunk Search 12-06-2018 0 6	0	6
	checking list of email domains appear in a field I have a field (recipient) which contains all the recipients that an email was sent to. I also have a lookupcsv file... by ChrisCLewis Communicator in Splunk Search 12-06-2018 0 3	0	3
	How do I match all data after the last slash using regex? Hi, I'm trying to retrieve data using regex and wildcard. Search query - "URL=/data/item/v1/*/" Result 1 - /data/... by harikishore23 New Member in Splunk Search 12-06-2018 0 7	0	7
	How to consider values of a field from the events of type1 when does not exist in type2? Hello, I have got two type of events, typeA and typeB, In both the fields I'm interested in only a single field "Suc... by bollam Path Finder in Splunk Search 12-05-2018 0 3	0	3
	How to add a query parameter conditionally? I'd like to conditionally add a parameter to my Splunk query based on the version number of my application. I have ... by mamerige Engager in Splunk Search 12-05-2018 0 1	0	1
	Query to list all objects in an app? I am trying to run a query to find all objects in a particular app (i.e alerts, dashboards, props, etc) Urgent. Thank... by Jewatson17 Path Finder in Splunk Search 12-05-2018 0 2	0	2
	Can you help me build a regex that would parse %host% from the following log directories? I am trying to use host_regex in input.conf I have log directories as, /var/log/rsyslog/%year%/%month%/%date%/%host%... by meet_vadaria Engager in Splunk Search 12-05-2018 0 4	0	4
	I see events in the data summary for a host. However, when I search, I don't see any data. How do I see it? I see the host IP 1.2.3.4 with 1000 events in the last 30 minutes. However, when I run the search, the search does no... by rajindurbal Path Finder in Splunk Search 12-05-2018 0 5	0	5
	How to conditionally add a search field? I'd like to conditionally add a parameter to my Splunk query based on the version number of my application. I have ... by mamerige Engager in Splunk Search 12-05-2018 0 0	0	0
	How do I merge individual records in Splunk that contain a common field? Hello All, I have a number of individual records in Splunk, all with a common field of X, that i'm trying to combin... by JohnGilmour New Member in Splunk Search 12-05-2018 0 2	0	2
	Will all Splunk products work with Oracle 12.2 on Exadata?,Do all splunk products work with Oracle 12.2 running on Exadata? I'm researching the effects of upgrading from Oracle 12.1 to Oracle 12.2 on Exadata. I need to know if there are any ... by xerosaburu New Member in Splunk Search 12-05-2018 0 0	0	0
	How do I make a field extraction that selects only the first occurrence? Hello, I have events that span multiple lines. One such event looks as follows: ... # User details ID: 123 Username:... by whrg Motivator in Splunk Search 12-05-2018 0 6	0	6
	How do we optimize the search result time with a query using the append command? I have a query , where i have multiple append commands used to get the output result. The query has 1 index and 3 so... by vikashperiwal Path Finder in Splunk Search 12-05-2018 0 5	0	5
	Can you help me format the x-axis of a timechart? How do I format the x-axis to look like the first picture from the timechart documentation? To clarify,I want to have... by RWL01 Engager in Splunk Search 12-05-2018 0 6	0	6
	Customize Presets time picker Hello There I want to hide this section from time picker Presets in specific app not in the search and reporting app ... by dinaabdelhakam Path Finder in Splunk Search 12-05-2018 0 10	0	10
	How can I append/join the values of sub-search with the main search with the common field in the corresponding row? For an instance, I want to calculate the runtime of each stage of two trains and but there are stages which one of th... by bollam Path Finder in Splunk Search 12-05-2018 0 4	0	4
	Can you help me identify when end time overlaps start time for the following events? We have a process that runs for various pieces of our system, and I'm trying to prevent any overlaps. I have been ab... by kmaron Motivator in Splunk Search 12-05-2018 0 2	0	2
	Can you help me create the regex to replace multiple characters in the following field? Hello, I extracted a field like this: folder="prova^1.ED56GH" and I want to change it at search time by replacing... by sistemistiposta Path Finder in Splunk Search 12-05-2018 0 2	0	2
	Can you help me with the following search in Splunk? Hi Team Splunk! How can i do this? Thanks! by vumanhtai Path Finder in Splunk Search 12-05-2018 0 4	0	4
	How do you find the difference between the count of 2 keywords? I have 2 keywords. "UniSim Job received" and "UniSim Job Run completed successfully". I want to find the difference... by abhishekgandhe Explorer in Splunk Search 12-04-2018 0 2	0	2
	login using python sdk failed (http, not https) linux(RHEL 6.5 ) Python 2.7.15+splunk-sdk-python-1.6.5 http(not https) code: from splunklib.client import connect ... by hxzq2018 New Member in Splunk Search 12-04-2018 0 2	0	2
	How do you extract multiple substrings from the following events? I'm new to splunk. I have a log event in the following format. The report should capture the Hostname, Agentname and... by atul9771 Engager in Splunk Search 12-04-2018 0 4	0	4
	How do I make a Splunk query to get percentage by the fields testName and experience? I tried working on this, but I was unsuccessful. Here is my query and the logs: Query: source=“/var/log/*.log” plat... by saifullakhalid Explorer in Splunk Search 12-04-2018 0 1	0	1
	How do I use join to add a field to results? I am working on a dashboard that shows the results based off of a MAC address. However, the address I need is on a di... by bstreber Path Finder in Splunk Search 12-04-2018 0 8	0	8

Get Updates on the Splunk Community!

New Release of Federated Search: Bringing Splunk Analytics to More of Your Data

Organizations today are generating more data than ever and storing it across cloud object stores, data lakes, ...

Inside Event Intelligence: How ITSI Turns Network Alerts into Actionable Incidents

Tech Talk Inside Event Intelligence: How ITSI Turns Network Alerts into Actionable Incidents Correlating ...

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Network to App: Observability Unlocked Today’s digital environments span applications, ...

Splunk Search

How do I generate a search that shows me the total REVENUE generated per by week?

Matching events that happen within the micro-seconds apart

checking list of email domains appear in a field

How do I match all data after the last slash using regex?

How to consider values of a field from the events of type1 when does not exist in type2?

How to add a query parameter conditionally?

Query to list all objects in an app?

Can you help me build a regex that would parse %host% from the following log directories?

I see events in the data summary for a host. However, when I search, I don't see any data. How do I see it?

How to conditionally add a search field?

How do I merge individual records in Splunk that contain a common field?

Will all Splunk products work with Oracle 12.2 on Exadata?,Do all splunk products work with Oracle 12.2 running on Exadata?

How do I make a field extraction that selects only the first occurrence?

How do we optimize the search result time with a query using the append command?

Can you help me format the x-axis of a timechart?

Customize Presets time picker

How can I append/join the values of sub-search with the main search with the common field in the corresponding row?

Can you help me identify when end time overlaps start time for the following events?

Can you help me create the regex to replace multiple characters in the following field?

Can you help me with the following search in Splunk?

How do you find the difference between the count of 2 keywords?

login using python sdk failed (http, not https)

How do you extract multiple substrings from the following events?

How do I make a Splunk query to get percentage by the fields testName and experience?

How do I use join to add a field to results?

New Release of Federated Search: Bringing Splunk Analytics to More of Your Data

Inside Event Intelligence: How ITSI Turns Network Alerts into Actionable Incidents

Observability Simplified: Combining User Experience, Application Performance & ...

How to get an extract of threshold values set in s...

how to query OCI Audit logs from Datasafe

SPLUNK ES 8.2.3 Drill Down not appearing

Using Splunk to Analyze Web Traffic & Machine-Gene...

How can i export a list of all services in APM

Splunk Search

Join the Conversation