Splunk Search

Community Activity

Not able to override default font colour of single-value label field Hi Team, I am using dark.css in y dashboard and everything is becoming black including the lable font of a single v... by smdasim Explorer in Splunk Search 06-26-2018 0 0	0	0
How to configure multivalue field extraction? Hello, I cannot configure multivalue field extraction. I have a following event. the last 4 lines Time Stamp and ... by ninisimonishvil Path Finder in Splunk Search 06-26-2018 0 6	0	6
Count Consecutive Failed Logins Events We have our test environment in which Splunk Enterprise OVA is installed as server and Windows server (with universal... by Sagar0511 Explorer in Splunk Search 06-26-2018 1 2	1	2
Uploaded accelerated data model showing not showing all the data I downloaded an accelerated data model and uploaded it in my other search head but I am only able to see data from 1 ... by RevatiLawrence New Member in Splunk Search 06-26-2018 0 0	0	0
How to read the "key - value" information added when logging an exception in Splunk Mint? We are adding extended information when logging handled exceptions with Mint as explained in the docs: public void d... by ignaciosoler New Member in Splunk Search 06-26-2018 0 0	0	0
How to transpose data and create a new row? Hi all, I have a table data looks like: Time Type Count -------- ---------- -------... by kevingo75 New Member in Splunk Search 06-26-2018 0 4	0	4
Duplicate entries with continuous csv indexing Hello, I write with a small problem to you. I'm building a wi-fi monitoring system for my diploma thesis. I use Kisme... by haker146 New Member in Splunk Search 06-26-2018 0 5	0	5
search based on lookup table help Hello All I have a lookup table that I created that only has ip address and hostnames. I want to run the following ... by edwardrose Contributor in Splunk Search 06-25-2018 0 4	0	4
map question I'm getting some strange results with the map command. This is what I need to do... in one index (1st search) I have ... by brdr Contributor in Splunk Search 06-25-2018 0 1	0	1
Using $starttime$ and $endtime$ in a macro with 'map' I am trying to create a macro which uses $startime$ and $endtime$ in a map. Whenever I do however I get the following... by phemmer Path Finder in Splunk Search 06-25-2018 1 5	1	5
Why am I having issues with two fields that hold multi-values in one time import of OpenLDAP Data ? I am importing a dump from my openLDAP into splunk via on one-time "data-import" . The fields, O, OU, DN, MAIL, etc... by johnjj7141 Explorer in Splunk Search 06-25-2018 0 2	0	2
Filter results by IP address from 3 lookup Hello i have one trouble, i went to extract IP address that not in Lookup of list servers and not in lookup of list ... by betahra Engager in Splunk Search 06-25-2018 0 4	0	4
How to get the events where the value is greater than 40 using where condition? hello I use this code index="perfmon" sourcetype="perfmon:logicaldisk" instance=c: \| eval Value=round(Value, 2)."... by jip31 Motivator in Splunk Search 06-25-2018 0 5	0	5
custom search command throw "You have insufficient privileges to perform this operation." I copy gauge.py under C:\Program Files\Splunk\etc\apps\search\bin into C:\Program Files\Splunk\etc\apps\search\bin\te... by dellytaniasetia Explorer in Splunk Search 06-25-2018 0 6	0	6
Creating mean time to repair out of ping output script Hi all, I know there's probably a simple answer, but being relatively new to Splunk, I'm still trying to get my head... by heybails88 Path Finder in Splunk Search 06-25-2018 0 1	0	1
How to run a diff search with a Head 2 command across multiple systems? I have developed a search, with help years ago, that will show differences in a netstat command using "diff" and "hea... by aferone Builder in Splunk Search 06-25-2018 0 7	0	7
Timechart to filter inactive buckets I need help with time chat query. Basically I want to display all the graph occurrences where the count hit 0 and st... by muralianup Communicator in Splunk Search 06-25-2018 0 2	0	2
How to exclude events where the date greater than today? Hi, Is there a way to exclude events in a search where a specific date field (not timestamp) is greater than today. ... by ebruozys Path Finder in Splunk Search 06-25-2018 0 4	0	4
how to write query to show only failure records from the following query with field filter is Applicationstatus_MFT!="Success" index=axway* sourcetype=":messages" SENDERROUTINGID="KNPROD" \|stats count by PRODUCTIONFILENAME\|fields - count \|rena... by Malliv New Member in Splunk Search 06-25-2018 0 2	0	2
Extracted values not showing up in new fields Hi all, I'm extracting a lists of values from a column called QoEReport but the extracted value does not show up in ... by dannili Communicator in Splunk Search 06-25-2018 0 20	0	20
Map earliest/latest no longer working since update to 7.1.0 Our Splunk instance has recently (yesterday?) been updated to 7.1.0 from 7.0.0. My queries were working perfectly be... by koenV Explorer in Splunk Search 06-25-2018 1 5	1	5
How to get employee name in chart? Dear All, I have one employee master csv that have employee name, departmentname, projectname. If the employee is th... by kumasaua Explorer in Splunk Search 06-24-2018 0 5	0	5
How to extract a string from a long field containing special characters? Hi all, I'm trying to use use Rex to extract a specific value from a really long string which contains all kinds of c... by dannili Communicator in Splunk Search 06-24-2018 0 4	0	4
Why are there no results found in a search while exploring the search tutorial? Hello Team Splunk, I am following the simple search tutorial featuring logs in zip files from the fictitious company... by rogue_carrot Communicator in Splunk Search 06-24-2018 0 4	0	4
Kafka regex: Why is the command not working in Splunk search? {"topic": "amx", "total_lag": 2670, "partitions": [{"lag": 117, "partition_number": 0}, {"lag": 122, "partition_numbe... by pswalia06 Explorer in Splunk Search 06-23-2018 0 7	0	7