Splunk Search

Community Activity

How to present the date and value not in epoch format and is there a way to add a line to the bubble chart (over the time), in order to show trend? Hi, I created a bubble chart with numeric values on the y-axis and time(epoch) on the x-axis, and the bubble size is... by matansocher Contributor in Splunk Search 05-07-2018 0 3	0	3
Two Nearly Identical Inputs But One Doesnt Work (PowerShell) So I have the two below in my inputs.conf the top one works, the bottom one does not. Both commands work fine when ra... by JordanPeterson Path Finder in Splunk Search 05-07-2018 0 3	0	3
Get percentage after case and stats calculations ...search \| eval Type=case(like(publishId,"%U"),"UnSubscribed",like(publishId,"%S"),"Subscribed") \| stats dc(account... by dwong2 New Member in Splunk Search 05-07-2018 0 4	0	4
search does not return anything I have tried to add to monitor several log files but so far search returns nothing I am using trial version with max ... by dvuichor New Member in Splunk Search 05-07-2018 0 7	0	7
stuck on a subsearch Hi, I have this query, what I'm trying to do is pull the mac address out of events with a 405 error dedup them then ... by dbcase Motivator in Splunk Search 05-07-2018 0 4	0	4
map command field not being evaluated I have an issue with a field within the map command not being evaluated appropriately. The scenario is this: do som... by brdr Contributor in Splunk Search 05-07-2018 0 4	0	4
get all events, except for those occurring near time of other events I need to get all the following events EventCode=4733 EXCEPT for any of those which occur within 5 s... by elyp Explorer in Splunk Search 05-07-2018 0 2	0	2
Line chart with different events I have a splunk log in following format: \|\|pool-2-thread-1\|\| INFO SUCCESSFULLY COMPLETED at END_TIME: 2018-05-07T06... by Kaviyap New Member in Splunk Search 05-07-2018 0 2	0	2
How to make this transaction work and find values from one result set that might be related to the other? I am trying to correlate two resultsets. One is a straight search of apache logs. The other is a table that that took... by MonkeyK Builder in Splunk Search 05-07-2018 0 0	0	0
Is it possible to hide, suppress or remove the column header row in a report? I have a report that looks similar to this: Is it possible to hide, suppress or remove the column header row in th... by Gawker Path Finder in Splunk Search 05-07-2018 0 4	0	4
How to find action time stamp particular task? How to find action time stamp of particular task that should come after action time stamp of particular task? by 90509 Engager in Splunk Search 05-07-2018 0 1	0	1
Search app: Remove extracted values from event column Is it possiple to remove information from the column "Event" in the search app view? Some values have allready been e... by stefan_gohlke New Member in Splunk Search 05-07-2018 0 4	0	4
Use Field with Timestamp as Eventtime Hi Community! I have a problem with a German Timestamp Field! I would like to extract the correct Timestamp from thi... by RobertRi Communicator in Splunk Search 05-07-2018 0 6	0	6
Get the number from the log with ":" Symbol I have a log which looks like follows: \|\|pool-2-thread-1\|\| INFO com.tmobile.sfdc.reports.service.OpportunityService... by karthi25 Path Finder in Splunk Search 05-07-2018 0 3	0	3
Problem with Splunk outputting log entries as hex I am running into a problem I cannot seem to figure out. One log file I have splunk reading from suddenly starts read... by DevinG New Member in Splunk Search 05-07-2018 0 3	0	3
Search related question The following command should return the minimum value and it does. source="SampleFilePERF.log" \| stats min(ELAPSED_T... by skallaje Engager in Splunk Search 05-07-2018 0 2	0	2
IPv6 summarization - config to perform at search time I receive logs from a device with the full form IPv6 address, as well as using capital letters. Example: 2001:0DB8:8... by ahartge Path Finder in Splunk Search 05-07-2018 0 12	0	12
stats count sum Why does the following query not display the number of logins and logouts (index="ggg-sec") EventCode=4624 OR EventC... by kokanne Communicator in Splunk Search 05-07-2018 0 10	0	10
How to filter logs from the source with a universal forwarder? Hi, I have UFs on a few ec2 aws instances, reading logs from /temp. I want to regex and only send logs containing ... by Log_wrangler Builder in Splunk Search 05-06-2018 0 5	0	5
Duplicate Values causing Conflict \| Can't Fix Hey, I'm trying to create a dashboard where there can be multiple entries for a field. There is a report behind my mu... by kokanne Communicator in Splunk Search 05-06-2018 0 6	0	6
How to merge two fields values into a single field? Hi, I have the below stats result Service Method Action Service1 Metho... by Allampally Path Finder in Splunk Search 05-06-2018 1 1	1	1
Split a single field into two fields Hi, I have a raw_data as below [APP=XYZ] [m=ServiceName.MethodName] [SLA=100] Splunk already generated a filed with ... by Allampally Path Finder in Splunk Search 05-06-2018 0 2	0	2
Fire Dynamic Search Queries based on Tokens I have various Inputs and i want to execute different query based of different token input value. Eg. I have 2 diffe... by raja21 Explorer in Splunk Search 05-06-2018 0 1	0	1
Match A lookup of Hosts & IP's to metadata search, to find hosts logging and not logging (where the hostname might be an IP address) Hi Splunk Community! I have a search i'm trying to build out, that will ultimately power some Dashboards to find ho... by mmwilson Explorer in Splunk Search 05-06-2018 0 0	0	0
windows client to splunk hello all i have a client that i already installed splunk forwarder on it and configured to log everything and send ... by payamhaddad New Member in Splunk Search 05-06-2018 0 2	0	2