Top

Category Activity

Regex for multiple Key value pair, after string Hello all,I am looking to extract automatically, all key value pairs, from the following event. Oct 20 12:52:40 11.22... by nmsaraujo Explorer in Getting Data In 10-20-2021 0 3	0	3
Extraction not working as expected Hello team, I am trying to extract the below highlighted fields. However when I use the expression this is working ri... by srinivas_gowda Path Finder in Splunk Search 10-20-2021 0 1	0	1
How to work out Percentage above an average threshold Hi Experts, As part of an new initiative looking at SLO metrics. I have created the below query whi... by luckyman80 Path Finder in Splunk Search 10-20-2021 0 5	0	5
Extracting field with different type of data Hi All,Hope you all are doing good.I am trying to extract a field which the different types of data. I want to extrac... by niks987 Explorer in Splunk Enterprise Security 10-20-2021 0 4	0	4
generated field in chart Hi, I have data with field names in the format:h00m00 h00m15 h00m30 h00m45 h01m00 .. thru h23m45I'd like to pull the... by mcaulsc Path Finder in Splunk Search 10-20-2021 0 1	0	1
Help with Smartstore index data retention I am struggling to understand data retention for Smartstore index. I guess I am thinking more from a non-smartstore w... by dm1 Builder in Deployment Architecture 10-20-2021 0 0	0	0
Windows Security events not getting forwarded Hello team, I am trying to monitor windows event logs and have installed the universal forwarded with relevant data. ... by srinivas_gowda Path Finder in Splunk Search 10-20-2021 0 3	0	3
Help with splitting multiline event needed Hello,I read my data with the inputlookup command and try to count the different occurrences of the field fields.SID ... by damucka Builder in Splunk Search 10-20-2021 0 1	0	1
PCs not scanned for more than 3 days Hello,This is my request: index=antivirus \| stats values(SAVVersion) as SAVVersion, values(EngineVersion) as Eng... by numeroinconnu12 Path Finder in Splunk Search 10-20-2021 0 2	0	2
adding a dummy row Hi , I want to add a row total=0 in the below table .Can somebody suggest?query used is: index="monthend" source="Pe... by kajolsharma Path Finder in Other Usage 10-20-2021 0 3	0	3
how to combine time chart and bar chart together Hi team,1. I have first query which return me below chart <baseQuery> \|timechart span=4w count(ACT) as countOfOpen... by cheriemilk Path Finder in Splunk Search 10-20-2021 0 0	0	0
Data masking Hi,Am trying to do an index time masking where my data is not in _raw but in a separate field A.For example A field h... by johnsasikumar Path Finder in Getting Data In 10-19-2021 0 3	0	3
Visualisation : Single Value with Trendline Hi,Im trying to create a single value with trendline visualisation, where I want to compare the difference between to... by syazwani Path Finder in Splunk Enterprise Security 10-19-2021 0 2	0	2
Field missing after lookup but existing before Im am doing a lookup in a customers Splunk cloud - better to say, I am using Splunk Addon for ASA and there are two l... by jbrocks Communicator in Splunk Cloud Platform 10-19-2021 0 1	0	1
Add-on for Phantom Remote search app Hi,I need to install the below add-on, this add-on creates indexes and required roles, we dont want the add-on to con... by VijaySrrie Builder in Getting Data In 10-19-2021 0 5	0	5
Correlation alert with multiple events Hi,I want to create a Correlation alert that will trigger and collect all the events from the same IP within a certai... by LIP Loves-to-Learn in Splunk Search 10-19-2021 0 1	0	1
How to set default for search time picker in Splunk Cloud Does anyone know how to change the default time for ad-hoc searches from 30 minutes to 7 days in Splunk Cloud? I chan... by edgarrity Path Finder in Splunk Search 10-19-2021 0 0	0	0
Pulsar vs Kafka I'm working on enhancing our data pipeline by leveraging the use of a messaging bus such as Kafka or Pulsar. Both ar... by TheFrunkster Explorer in Getting Data In 10-19-2021 0 0	0	0
How to transpose rows of one column into multiple columns? I currently have multiple entries in the VALUES column for each host.The table currently looks like: hostnameVALUESHO... by cjkar Engager in Splunk Search 10-19-2021 0 2	0	2
Thaw/Rebuild Data Error - Cannot Accommodate Maximum Number of Hot Buckets We are using coldToFrozenScript to store frozen Index data in GCS. To prove our DR annually we need to restore. This ... by joshualemoine Path Finder in Splunk Enterprise 10-19-2021 0 2	0	2
Remove "Manage Apps" and "Find More Apps HiWe are running an rather large Splunk Enterprise solution with many user and user level.I do not like that all user... by jotne Builder in Splunk Enterprise 10-19-2021 0 1	0	1
extract percentage of code by servername Hii have two field "servername" "code". i need to extract percent of code by servers.index="my-index" \| table servern... by indeed_2000 Motivator in Splunk Search 10-19-2021 0 4	0	4
Determine number of concurrent queries with a 15-minute time bucket given query_duration Attached screenshot is a list of 15 query ids with started, ended, bstarted (15 minute bucket) and query duration. T... by lim2 Communicator in Splunk Search 10-19-2021 0 1	0	1
When uploading custom dashboards from extensions, how do I resolve issues? I’m experiencing issues uploading custom dashboards from extensions. What do I do? If you encounter issues while uplo... by Abhishek_Saxena New Member in AppDynamics Knowledge Base 10-19-2021 0 0	0	0
Thawed buckets: ERROR ClusterSlaveBucketHandler - Failed to trigger replication I have updated a cluster splunk to 6.1.3 version and I have a problem with cluster replication and thawed buckets. Af... by clagese Explorer in Installation 10-19-2021 2 11	2	11