Splunk Search

Community Activity

Load balancing Splunk UF hosts that are also rsyslog receivers As the titles suggests, I'm looking into whether it's possible or not to load balance Universal Forwarder hosts that ... by Skeer-Jamf Path Finder in Splunk Search 02-26-2024 0 14	0	14
Retreive list of alerts shared at app level Can I retrieve list of alerts shared in App level, Is it possible? \|rest /services/saved/searches \| search eai:acl.a... by rupasri Observer in Splunk Search 02-26-2024 0 1	0	1
Drill Down and conditional queries In a drilldown, I have 2 possible queries and they look like:qry1=index=fed:xxx_yyyy sourcetype="aaaaa:bbbbb:cccc" so... by emilep Explorer in Splunk Search 02-26-2024 0 3	0	3
How to pass Panels XML dynamically to Splunk XML Dashboard using Javascript? Hi,I would like to have a xml panels code to be passed from Javascript to Splunk XML code dynamically.For instance, b... by ericaooi Explorer in Splunk Search 02-26-2024 0 0	0	0
Filter specific values from a field in main search by values from same field in subsearch In my search I have a field (ResourceId) that contains various cloud resource values. One of these values is Instance... by ea-2023 Path Finder in Splunk Search 02-25-2024 0 5	0	5
Custom Search query:\|tstats count where index=new_index host=new-host source=https://itcsr.welcome.com/logs* by PREFIX(status:) _ti... by Ash1 Communicator in Splunk Search 02-25-2024 0 4	0	4
Splunk query to retrieve logs containing empty query_string Hello teamBelow are my splunk logs:{<!-- -->body_bytes_sent: 0bytes_sent: 0host: nice_hosthttp_content_type: -http_referer: -... by super_edition Path Finder in Splunk Search 02-25-2024 0 1	0	1
Example of connecting snow cmdb ci server to service We are working to link server information to the services in the ServiceNow CMDB. We are looking for example to relat... by twadeus Loves-to-Learn in Splunk Search 02-25-2024 0 1	0	1
Transaction with start & end with the same time in _raw ? I am trying to create a Transaction where my starting and ending 'event' have exactly the same time.In _raw the time ... by sjringo Contributor in Splunk Search 02-24-2024 0 7	0	7
Can you use now() in eval-based macros? Is it possible to use the now() function in an macro? And if so, are there any specific limitations? <p>Example mac... by Lowell Super Champion in Splunk Search 02-23-2024 3 11	3	11
mperva WAF Security Use Cases - SEARCH QUERY Advanced Bot Detected on Imperva WAF Backdoor Detected on Imperva WAF Bot Access Control Detected on Imperva WAF Can... by RANUJAN New Member in Splunk Search 02-23-2024 0 1	0	1
Need to search IP address in a list of IP/CIDR list and if matched need to return the Name associated with it. I have a lookup table with 2 fields IP and NameIP Name['1.2.3.4', '2.3.5.0/24'] -> name1['1.2.3.4',.6.7.8.9/31, 4.5.6... by sahastrabuddhe Engager in Splunk Search 02-23-2024 0 3	0	3
Multiple joins cause slowness in splunk dashboard?Is any other way to make faster? Multiple joins cause slowness in splunk dashboard?Is any other way to make faster?how can we club those joins ? inde... by karthi2809 Builder in Splunk Search 02-23-2024 0 1	0	1
Is it possible for the submit button or checkbox required to act like submit button inside of each panel? Hi all, I have two panels with input text and drop down boxes in each. I would like to run my search by using a sub... by haripriyasarve1 Explorer in Splunk Search 02-23-2024 1 6	1	6
Compare resp code count of two dates for each servername Hi I have query that return count of different resp codes of servers for 2 daysnow need to find different between the... by indeed_2000 Motivator in Splunk Search 02-23-2024 0 4	0	4
time difference between two fields Hi, I have two fields, where time zone seems to be different.. please could you help me to get difference ? itime= 2... by selvam_sekar Path Finder in Splunk Search 02-23-2024 0 1	0	1
Query Result Limit Hello What's the officall Limit of Query Results in Splunk? Is this also written somewhere on the Splunk Website?kind... by hitchmontana Engager in Splunk Search 02-23-2024 0 1	0	1
Measuring inactivity in equipment according to x y z position values Hello I would like to make a query in which i can see how long my equipment has been inactive and when it was inactiv... by Roy1 Explorer in Splunk Search 02-23-2024 0 2	0	2
How can I extract a field using rex that fulfils more than one condition? So I want to extract the last word as a field on each search result but want to grab those that only fulfils the foll... by bsinsan Observer in Splunk Search 02-23-2024 0 5	0	5
How to combine values from stats into single row? Hi All,I am looking into using some proxy logs to determine download volume for particular streaming sites and was lo... by TribesmanJohn Explorer in Splunk Search 02-22-2024 0 2	0	2
EventCode Subsearch I have an application that I am trying to monitor. There is a specific event code for when the tool is opened to mod... by jeradb Explorer in Splunk Search 02-22-2024 0 3	0	3
need for each Receiver_ID how much invoice total for 1 months span i have log like this :2024-02-22 12:49:38:344 EST\| INFO \|InterfaceName=USCUSTOMERINV INVCanonicalProcess Sender_ID=Th... by avikc100 Path Finder in Splunk Search 02-22-2024 0 1	0	1
Running queries not working at all I created a standalone splunk container on openshift container platform with the help of "splunk operator for kuberne... by olivera Explorer in Splunk Search 02-22-2024 1 1	1	1
Is there a way to keep row data together when using the stats command? Hello, Is there a way to keep row data together when using the stats command? ID Loc FirstName LastName 1 NY... by genesiusj Builder in Splunk Search 02-22-2024 0 5	0	5
How to change font size of texts inside table using dashboard xml source Hi, I have a splunk dashboard with different panels i.e. pie chart, table etc. I need to increase the font size of te... by ggangwar Path Finder in Splunk Search 02-22-2024 2 10	2	10