Splunk Search

Community Activity

Using AVG function with count I'm a brand new Splunk user, so I apologize if this is an extremely basic question. This is the query I'm running: l... by jsights New Member in Splunk Search 07-30-2018 0 1	0	1
Rescan Splunk raw data in one search Looking for some ideas. I have a search that runs fine. I was given the task of modifying it so, under certain cond... by OldManEd Builder in Splunk Search 07-30-2018 0 6	0	6
Can I join fields output from two extensive search queries to create a list of fields on which I can run my final query to get desired result I am new to splunk and right now trying to create a dashboard for IT. I have different csv file for AV, PAtch, Softwa... by vikfnu Explorer in Splunk Search 07-30-2018 0 4	0	4
Increase SearchManager result limit Hi all, I have a dashboard with Search Table. Here's my code: var table = mvc.Components.get(__TABLE_ID__); var se... by edenysenko New Member in Splunk Search 07-30-2018 0 1	0	1
Can someone help with the search to format this table? Hello I have challenged with a difficult formatting task. I have a very long search index=testindex "Type" = "servi... by tkwaller_2 Communicator in Splunk Search 07-30-2018 0 5	0	5
incremental value I have sequence no of to populate . first column is the sequence of no and answers need to like in the second column ... by DataOrg Builder in Splunk Search 07-30-2018 0 3	0	3
Audit log for db connect query update Is there any log available that will show if any update/delete was done on the db_connect query and by whom, addition... by abhijitnath89 Path Finder in Splunk Search 07-30-2018 0 0	0	0
How to apply eval to a field which contains "."? Hello, I have got a field name "test_time.space_used" in the events and I need to perform arithmetic operations to t... by bollam Path Finder in Splunk Search 07-30-2018 0 2	0	2
How to separate values from one cell to separate cells I have created a table using search as mentioned below, S.No TestCycle ResponseTime ElapsedTime 1 TC1 ... by rajeswarir New Member in Splunk Search 07-30-2018 0 2	0	2
The starting time of search with timechart doesn’t match the local timezone. When bucket time is between 03/08/2018 00:00:00 and 03/08/2018 24:00:00 with JST (GMT+9) as timezone, the starting ti... by kinaba_splunk Splunk Employee in Splunk Search 07-29-2018 0 1	0	1
Chart with multiple lines based on field values case: Logged events with differentiating fuellevel and the corresponding serial Desired outcome: So a graph with... by fhobelman Engager in Splunk Search 07-29-2018 1 3	1	3
Help combining results from different searches, append vs. multisearch Moderator Note: the below was originally posted as an Answer on an old question, but being it's own question it has b... by psmp Explorer in Splunk Search 07-29-2018 0 2	0	2
How can I get a load average of cpu using splunk query? I am seeing 3 load average values, need to get a query to get 3 values and get an average. by udaymadupathi New Member in Splunk Search 07-28-2018 0 3	0	3
rename the name of a field with the value of another field Hello there, After a stats command, I would like to rename the name of a field using a string and the value of anot... by marziaolla Path Finder in Splunk Search 07-28-2018 0 3	0	3
Joining of two fields order by 2018/17/25 19:37:27 Field1="0" FIELD_TEXT="Select" 2018/17/25 10:30:17 Field1="0" FIELD_TEXT="name" 2018/17/25 06:9:0... by swetar New Member in Splunk Search 07-28-2018 0 4	0	4
What will be the correct sourcetype when adding the cloudforms automation.log ?,What will be the correct sourcetype for cloudforms automation log ? We have installed forwarder in cloudforms node. But after getting the logs i cant find the exact field in search . Pl... by sumitinfonet New Member in Splunk Search 07-28-2018 0 1	0	1
How to do postprocessing without a join? index=abc caller-id IN ("8179f4c86", "926bbcf8957a") component=Chatbot \| join transaction id [ search index=p... by Mohsin123 Path Finder in Splunk Search 07-28-2018 0 3	0	3
Query syntax to only get 50% of possible results. More details below. I am new to Splunk but own a system that uses Splunk as the backend. I want to create a query that only gives me a s... by dexterrivera New Member in Splunk Search 07-27-2018 0 1	0	1
I'm using timechart to produce two rows for two blocks of time, how can I do a count on only row 2 and not row 1? Hello, I set up an alert to search for an error message that appears in one my windows application. Time-wise I set ... by jospina2 Explorer in Splunk Search 07-27-2018 0 2	0	2
How to create a table with months along with two other types of data summed? I would like to create a table out of a search with months (date_month) on the first column, then the sum of all uniq... by larswu New Member in Splunk Search 07-27-2018 0 8	0	8
How do I create a field consisting of the previous value for each row of another field? I currently have a list of HTTP events that I have formatted like so: Observe that at the bottom of the image, I h... by alcchang Engager in Splunk Search 07-27-2018 0 3	0	3
Why am I getting an error in 'eval' command "The expression is malformed. Expected ). No missing Parenthesis"? I have double and triple checked for parenthesis and found no issues with the code. <row> <panel> <title>V... by cacampbe Explorer in Splunk Search 07-27-2018 0 6	0	6
Passing search results to external python script I know it's just my lack of knowledge with Splunk causing me some grief here but... I want to pass search results to... by utpress Engager in Splunk Search 07-27-2018 4 12	4	12
How to do an open text search using a lookup table? I have an inventory csv file and want to do an open text search for all the hostnames in my lookup table. The reason... by DEAD_BEEF Builder in Splunk Search 07-27-2018 0 3	0	3
How to handle streamstats / delta assigning a 'zero' to the first row? My query is returning the total number of bytes received by various IP addresses at different points in epoch time. I... by AlexBryant Path Finder in Splunk Search 07-27-2018 0 2	0	2