Splunk Search

Community Activity

How to sort the month when using the field in chart over command? Hi Below is a query which returns the latency over month by cust_id. Events contain fields as month=April, month=May... by sangs8788 Communicator in Splunk Search 09-03-2018 0 1	0	1
What's the output of the following eval and now() function query? Hi All, Could you please help me here in confirming what would be the output of the below eval command? "eval age =... by bishtk Communicator in Splunk Search 09-03-2018 0 7	0	7
show one instance of an error (out of many errors coming repeatedly) from a given time I am getting many errors while just writing keyword error when searched from a single log file like Retrying connecti... by sajjadkernel Engager in Splunk Search 09-03-2018 0 3	0	3
Can you help me build a KVStore record deletion query? hello, Short background.. One of the application populates some ids for deletion of multiple types like type A, B... by anantdeshpande Path Finder in Splunk Search 09-03-2018 0 0	0	0
Process delayed - Could you suggest a way to speed up our search? We have a search with some subsearches that runs for about 40 seconds. "This search has completed and has returned 1... by tonniea Explorer in Splunk Search 09-03-2018 1 0	1	0
set a column's max-width in a chart Hi, I have a JSChart like this and I want to set a max width for graph's column. I want to avoid this huge column whe... by RiccardoV Communicator in Splunk Search 09-02-2018 3 6	3	6
How do I search for users logging into our Splunk server remotely? We had a user log in remotely either with ESXI, with a VM, with Remote Desktop or with the command prompt using SSH. ... by codymoore New Member in Splunk Search 09-02-2018 0 2	0	2
How to create a static column in a table? I would like to create one column with labels that should not be changed. For example: column title: my_own first r... by shayhibah Path Finder in Splunk Search 09-02-2018 0 3	0	3
How to count the number of events by types that occurred during each period of time How to count the number of events by types that occurred during each period of time (for example, yesterday and the d... by svchnik New Member in Splunk Search 09-02-2018 0 2	0	2
Why are events not sorting in Chronological Order with a basic search? Today, I noticed that, when performing a basic search, the events are not sorted chronologically. Additionally, not a... by rtev Path Finder in Splunk Search 09-01-2018 1 8	1	8
How to perform targeted searches on rex fields? I have some unstructured events, and I've been using rex field to create a variety of fields to better organize ever... by samsam48 Explorer in Splunk Search 08-31-2018 0 5	0	5
Comparison and condition function help. Multiple If, case or like statements in search index=foo \| eval Compliant=case(like(AppVersion,"14.12%"), "OK", like(AppVersion,"14.11%"),"OK" , like(AppVersion,"14... by nqjpm Path Finder in Splunk Search 08-31-2018 0 2	0	2
How to speed up my old correlated threat intel search using tstats & datamodel accelerations? Hello Splunker> I would like to convert my old correlation search which used the join function below:- index=main sou... by bravosec1 New Member in Splunk Search 08-31-2018 0 3	0	3
Can you help me format a table that would generate the highest CPU users per hour over a day? G'Day I've got some data I'm pulling out of some events with a search: HOUR - Two digit hour of the day PROCESS - N... by mikclrk Explorer in Splunk Search 08-31-2018 1 3	1	3
Can you help me write a subsearch? Firstly, i am trying to separate 1) cachekey=false in one query and 2) cachekey=true in another query and 3) with bot... by Rocky31 Path Finder in Splunk Search 08-31-2018 0 2	0	2
How can I use rex to dedup and extract certain data from a field? Hello, I am new to using rex and extract. I am trying to come up with a regex to extract certain data from a field o... by ameyapatil29 Explorer in Splunk Search 08-31-2018 0 3	0	3
How do I turn search terms into an extracted field? I would like to turn the seach terms into a extract field at the time of search. For e.g. "search term 1" OR "search... by saqibhome Explorer in Splunk Search 08-31-2018 0 4	0	4
How to join events with different fields name but same values ? Hello, I have different sets of events that are linked together and correspond to the same process. Field1: One, Tw... by lyds Explorer in Splunk Search 08-31-2018 0 2	0	2
How to create a conditional eval to fill a new field depending on other fields? Hello, I want to create a new field that will take the value of other fields depending of which one is filled. For e... by lyds Explorer in Splunk Search 08-31-2018 0 9	0	9
Correlating Data from 2 Indexes Hi everyone, I've been trying to add results from 2 different indexes using search after the pipe but it doesn't seem... by JRamirezEnosys Explorer in Splunk Search 08-31-2018 0 5	0	5
How do you calculate average time between transaction groups by two fields? I have logs from a SIP proxy server and I'm trying to get metrics from SIP transactions metrics from a SIP proxy ser... by rparadinha Explorer in Splunk Search 08-31-2018 0 2	0	2
How to separate the count of two fields into ranges? Hi - I have a dataset which contains two scan dates fields per server. There are 50000 events in the dataset, one e... by skelly99 Explorer in Splunk Search 08-31-2018 1 2	1	2
How do I compare search results from two different time periods? Hi, I'm looking to do something like this: Take a search, with three fields, one being a count (ExceptionClass, Cla... by ryangrobbel Explorer in Splunk Search 08-30-2018 0 3	0	3
Timechart trend over the same interval as the search range Hi! I have a scenario where we have used "\| stats count" and gotten the total number for the range that we picked. T... by epacke Path Finder in Splunk Search 08-30-2018 0 2	0	2
How do I Search for IP address hitting a specific port + any other ports? I think this should be within my grasp, but I don't seem to be able to create a search that returns what I'm looking ... by lucamarc Path Finder in Splunk Search 08-30-2018 0 2	0	2