Splunk Search

Community Activity

How do you make a chart with repeating x axis values? Hi all, I have 2 columns like that I want to plot: x y 1579 1 1707 2 1707 3 1707 4 1707 5 1707 6... by sriharsha14 New Member in Splunk Search 10-30-2018 0 2	0	2
How do you add percentage of total for several columns in a table? Hi all, I'm quite new to Splunk and I'm struggling trying to add percentages to a table that I built from two indexe... by alessandrocicch Engager in Splunk Search 10-30-2018 0 3	0	3
Why when I refresh splunk I loss data ? Hello, I filll a table which has more than 60 columns and 1000 lines. But at 10am for example, all the columns exc... by FlorentNall New Member in Splunk Search 10-30-2018 0 3	0	3
How do you compute the average number of emails contained in two different sources? I have two different sourcetypes with same index name. Both sources they have emails and it shows the number of those... by maryamchar Explorer in Splunk Search 10-30-2018 0 4	0	4
Can you help me with the following query using the join command? Hi everybody, I have a problem with a join between two indexes. For example, I have 2 values: A and B, which are o... by MaximeMoreau Explorer in Splunk Search 10-30-2018 0 7	0	7
How to pass eval value as macro parameter where my search query starts with macro itself We have created reusable macro which was used in many reports with 3 parameters and that macro is starting point of ... by sainadh1247 New Member in Splunk Search 10-30-2018 0 2	0	2
How do you search for the nearest file within 7 days ago of another file? Hello everyone, I'd like to create a bottleneck graph. Basically, I'd like to use two files. One of the files is a... by jenny_life Path Finder in Splunk Search 10-30-2018 0 4	0	4
How do you extract the value of output quality from the log below? I want to extract the value of Output Quality from the below log. Critical-Lab checkRcReady for batchId ==>9a508f01-... by abhishekgandhe Explorer in Splunk Search 10-30-2018 0 3	0	3
Parsing fields inside quoted fields Hi, at search time I like to pase the key-value pairs inside the message and would like to have the whole message in ... by tfechner Path Finder in Splunk Search 10-30-2018 1 1	1	1
AND Condition to find the keywords in logs I have log. I want to find all 4 keywords. It should be AND condition and not OR. Critical Lab Lab Critical Process P... by abhishekgandhe Explorer in Splunk Search 10-29-2018 1 6	1	6
How to Drilldown stacked column chart to a table? Hi All, I need to show a drilldown report when user clicks on any of the column bar. Each bar has 3 sentiments (Posi... by aravindpadmin Explorer in Splunk Search 10-29-2018 0 5	0	5
how to group by month for yearly data. Hello everyone. Want to display the output only for the time which crosses 18 months (earliest time) by rajhemant26 New Member in Splunk Search 10-29-2018 0 3	0	3
What rex can I use to extract a value before a string near the end of an event? I need to extract the value where "SoftFail" from this example log is. In related logs, the value is always after an... by octavioserpa New Member in Splunk Search 10-29-2018 0 5	0	5
When using the timechart command, how do you show multiple Max Values? Hi Splunk Community! Quick one for all you experts! I'm trying to timechart the following 4 separate metrics (repres... by luckyman80 Path Finder in Splunk Search 10-29-2018 0 1	0	1
How do you regex a part of a field name to use in a separate field? I have a field which is a username, but the results of the username starts with "USR" and the actual username is "USR... by barney00 New Member in Splunk Search 10-29-2018 0 2	0	2
What is wrong with my eval for this token? Hi, I have this eval for a token but it doesn't ever seem to get set, what am I missing? <eval token="showapppages"... by dbcase Motivator in Splunk Search 10-29-2018 0 5	0	5
Need to optimize firewall log search - auto-finalized after disk usage limit reached. I need to create a table of all unique firewall connections over the last 90 days. Our FortiGate firewall is config... by ejwade Contributor in Splunk Search 10-29-2018 0 4	0	4
How do you add buttons on table view? Goodmorning, I have a Simple-XML with following search index=_internal source=*metrics.log group="per_sourcetype_th... by antoniofacchi New Member in Splunk Search 10-29-2018 0 4	0	4
How do you use the rex command to obtain values to be put into a table? I have a query : host=perf bf19f0c3-2f10-4db2-b33f-efb946b0ee24 {"StatusCode":204* \| table Message Out put of the... by JyotiP Path Finder in Splunk Search 10-29-2018 0 7	0	7
Can you help me sum the data in the following field? Hi Team, I have PATA field which needs to do sum of PATA field, am using below command where should add PATA to get... by maheshsat Explorer in Splunk Search 10-29-2018 0 8	0	8
command.search.kv performance We have a search that is spending most of its time in command.search.kv. If we give it a search which doesn't need a... by rettops Path Finder in Splunk Search 10-29-2018 0 3	0	3
Modular Input Custom UI HI, I creating modular input add-on. Now I try to create custom UI for input parameters as explained in documentation... by mishen_ka New Member in Splunk Search 10-29-2018 0 3	0	3
Can you help me with my query within a query? Hi, I am trying to see if this type of query is possible I am creating an alert base on 2 conditions. The first co... by mansinchu New Member in Splunk Search 10-29-2018 0 3	0	3
How do you calculate the average for a chart count over table? How do you add another column that contains averages based on previous columns after "chart count over Level by Month... by cfstoica New Member in Splunk Search 10-29-2018 0 2	0	2
Can you help me build a regex to extract fields with different field delimiters? Hello all, Can someone help me build a regex that may allow me to extract 3 different fields from events where all t... by nuaraujo Path Finder in Splunk Search 10-29-2018 0 2	0	2