Splunk Search

Community Activity

How do I calculate the date difference for two timestamps other than _time and exclude weekends? Hello, I have two timestamps , both are NOT _time. Received Date - 09/10/16Processed Date - 09/14/16 I need to calc... by splunk_hvijay Explorer in Splunk Search 05-03-2018 1 8	1	8
Log sources not reporting in 24 hours anyone have an idea on how to write up a search that will provide details on which logsource stopped reporting for th... by Ghanayem1974 Path Finder in Splunk Search 05-03-2018 0 3	0	3
Efficient Lookup Table Search for each Field, Combine Results? I'd like to run a search for each host in a list but only return the top result for each host. In a search, it coul... by mlorrette Path Finder in Splunk Search 05-03-2018 0 7	0	7
Merging two distinct Splunk into one Hello, Let's say the company has two departments that used Splunk independantly, and now they want to merge them tog... by yanlajeunesse Explorer in Splunk Search 05-03-2018 0 3	0	3
iterate over extracted value from field and then print it Dear splunkers , I have one field in which there is value like net = 192.168.128.0/24, from this field value pair i ... by kannu Communicator in Splunk Search 05-03-2018 0 8	0	8
How can i calculate datetime Difference between two datetime values. Begin date - 2018-05-02 22:00:23.235371 End Date - 2018-05-02 22:01:33.815546 Expected Result should be - 70 by abhishekgupta61 Engager in Splunk Search 05-03-2018 0 1	0	1
Schedule search to run one time only I want to schedule a search so that it can be manually set to run without repetition during non-business hours when t... by landen99 Motivator in Splunk Search 05-03-2018 0 6	0	6
Timezone conversion issue Raw Text Data (UTC) to Splunk Index (EST) I am sure this question is asked numerous times and there are number of answers around this but for some reason its n... by atul_jain New Member in Splunk Search 05-03-2018 0 8	0	8
Entering earliest and latest time for backfill summary search. What is the format? I'm having trouble figuring out the proper syntax for specifying an exact date/time for my summary backfill search. ... by the_wolverine Champion in Splunk Search 05-03-2018 1 4	1	4
Extract field value Hello, Could anybody assist with this question - what method is the best to extract to new field value of "animal" k... by vintik Engager in Splunk Search 05-03-2018 0 2	0	2
How to break events in this scenario Here is a subset of my log file. This content appears for an App named App-1, but it just repeats in my log for arou... by sarvan7777 New Member in Splunk Search 05-03-2018 0 2	0	2
How to convert epoch to H:M:S? Hi Guys, I have the below time formats that I converted to epoch to get the difference. START - "04-30-2018 16:17:0... by auaave Communicator in Splunk Search 05-02-2018 0 7	0	7
Multiselect values as table input? I have a multiselect dropdown. I also have a stat table which utilizes a KVstore. I want the multiselect values to fi... by matstap Communicator in Splunk Search 05-02-2018 0 1	0	1
Query to filter logs based on the condition I have host=abc_cloud_aws_dev host = abc_cloud_aws_qa Here is my basic search string index=myindex host... by navd New Member in Splunk Search 05-02-2018 0 2	0	2
Total foreach Row I have a query that shows me the type of operations someone has performed but I would also like to sort by the total ... by cewing082 New Member in Splunk Search 05-02-2018 0 7	0	7
Multivalue fields- Count Values that match a value in multi value field Hello SPlunk team, my base query returns something like the table below . I need to find the count of all intents th... by venkatrajan04 New Member in Splunk Search 05-02-2018 0 5	0	5
Why is search in index not displaying results that are present but displaying when searching for more data? I've got a problem and part of that problem is I'm not sure how to search for the solution. Using Verbose search mo... by GenericSplunkUs Path Finder in Splunk Search 05-02-2018 1 4	1	4
How to get average, max TPS by Method Hi, I am looking for splunk query which can give average, max and 90th percentile value of transactions per second (... by sg86sourav New Member in Splunk Search 05-02-2018 0 3	0	3
How to compare multiple sourcetypes? Hello, In one index I have multiple sourcetypes. I want to be able to compare the values between these sourcetypes, ... by tonahoyos Explorer in Splunk Search 05-02-2018 0 2	0	2
creating table with different stats command Hi All, Is it possible to combile the stats from different queries in a single table or string. If I can create a st... by Chandras11 Communicator in Splunk Search 05-02-2018 0 4	0	4
How to create an area chart from CSV with multiple data series? Hi, I just started using Splunk and find it to be a very powerful tool but I don't seem to be able to create an Area ... by tretos53 New Member in Splunk Search 05-02-2018 0 7	0	7
How do you group by day without grouping your other columns? I am trying to produce a report that spans a week and groups the results by each day. I want the results to be per us... by kazooless Explorer in Splunk Search 05-02-2018 0 5	0	5
Remove colons from a number I'm looking to get rid of the numbers and colon before the larger one in the middle, and after I have 1:31705:1 1... by dsmeerkat Explorer in Splunk Search 05-02-2018 0 1	0	1
See what time range users search I want to write a query to see what time range users are using in their searches. e.g. 90% of searches use the last 2... by dtow1 Path Finder in Splunk Search 05-02-2018 0 7	0	7
how to use append to list out the values respective to the results we get? I have got multiple events in a log file which contains few key-value pairs and i want to look at only the existence ... by bollam Path Finder in Splunk Search 05-02-2018 0 2	0	2