Top

Category Activity

Getting text from raw event with regex Hi everyone, I'm trying to get a simple text from a raw event, but I can't make it works.The event looks like this:a... by g_paternicola Path Finder in Splunk Search 09-13-2021 0 1	0	1
Issues with search head members pushing configs to captain I am getting the below error Search head cluster member (https://hesplsrhc001:8089) is having problems pushing config... by lmvmandadi Engager in Deployment Architecture 09-13-2021 0 3	0	3
Python Connection SDK [Errno 11001] getaddrinfo failed When trying to connect to the Splunk SDK, Python throws me this error:[Errno 11001] getaddrinfo failedMy code:import ... by joeljoeljoel Loves-to-Learn in Splunk Enterprise 09-13-2021 0 0	0	0
Mobile apps (iOS and Android) logging Hi,We use Splunk Enterprise in our company and I am currently implementing remote(cloud) logging in our iOS and Andro... by brightsky New Member in Splunk Enterprise 09-13-2021 0 0	0	0
Inline table not showing in Correlation Search Email Notification I created a correlation search with only two pipes, table and rename. I added inline table to the email notification ... by hperez Explorer in Splunk Enterprise Security 09-13-2021 0 1	0	1
Why do I keep getting an error notification that a Searchhead is having trouble contacting kvstore cluster captain,[...] I keep getting an error message in our messages section at the top, stating that Search head cluster member ____ is h... by briancronrath Contributor in Splunk Enterprise 09-13-2021 0 1	0	1
Notable event title not containing the variable. Hello all,I am struggling with customizing my Splunk ES's Incident Review panel. I have integrated Suricata IDS logs ... by b_chris21 Communicator in Splunk Enterprise Security 09-13-2021 0 1	0	1
Search Peers Dashboard for Indexer CPU, Mem and Disk Usage Hi AllWe have a distributed environment (no cluster).Splunk Enterprise Version 8.1.3Is there a way to create a dashbo... by MuratKuru Explorer in Splunk Search 09-13-2021 0 1	0	1
I'm trying to extract field That looks like below I'm trying to extract field That looks like "Alert-source-key":"[\"abcdd-gdfc-mb40-a801-e40fd9db481e\"]" I have trie... by PavanSeerapu Explorer in Splunk Search 09-13-2021 0 4	0	4
rex to export users Hiwhat is the spl command to extract users.Here is the sample:2021-09-12 21:40:03,938 ERROR [APPNAME] User H83952 inv... by indeed_2000 Motivator in Splunk Search 09-13-2021 0 1	0	1
Nested if Hi,In a field status contains two values one is failure and another is success.Where in failure it contains some desc... by Madhusri Engager in Getting Data In 09-13-2021 0 1	0	1
Disable vertical scrollbars for only pagination in trellis charts? My trellis charts are sized small and appear in the panel across multiple pages, but also with a vertical scroll bar.... by cblanton Communicator in Dashboards & Visualizations 09-13-2021 0 3	0	3
How can I combine two different chart queries into a single and get count Hi all, I have two chart queries to get the success count and error count which are working as expected. Now I want... by rkishoreqa Communicator in Splunk Search 09-13-2021 0 2	0	2
Field extraction Hi Splunk team, I would like to receive your dedicated help. I have a string field, the field's structure is name_tim... by alonKri Explorer in Splunk Search 09-13-2021 0 7	0	7
how to add two values in a field and percentage of them with total Hi,I have to get % of 2 and 3 values in a same field .Status count True 200False 50Error 10exc ... by dtccsundar Path Finder in Splunk Search 09-13-2021 0 1	0	1
How to run an eval command if a statment is true, and keep non true data in the search? HiBelow is a simple example of what I am trying to do.I am trying to remove the duplicate out of the process name. So... by robertlynch2020 Influencer in Splunk Search 09-13-2021 0 2	0	2
How do I view the Server classes in Deployment server & see their details of what they contain? Thank u very much I am getting started using DS to deploy new configurations to UFs. Need to view the list of Server classes , what the... by SamHTexas Builder in Splunk Enterprise Security 09-13-2021 0 2	0	2
Add manual input through text box into a new column in a table splunk Hi ,I want to add a text box in a dashboard panel and the manual input value of that textbox should be added to a new... by nikitha15 Explorer in Splunk Search 09-13-2021 0 1	0	1
Any Pros or Cons of using props/transforms vs. Black / Whitelisting for Ingesting Windows codes on Forwarders? Which do you use or side with please? Which do you think is the best for functionality & using bandwidth? Thank u for... by SamHTexas Builder in Splunk Enterprise 09-13-2021 0 2	0	2
how to match multiple regex in splunk? hi all,I have multiple string that are regex, i want to find logs that match with this string.this is a example of my... by szone Engager in Splunk Search 09-13-2021 0 5	0	5
Sourcetype and indexes HiI am trying to understand how indexes and sourcetype are defined. Let's say I have an app with a web component and ... by kam_emea Engager in Getting Data In 09-13-2021 0 2	0	2
Where do I find info on What Default Indexes are assigned to Splunk user Roles please? How to edit them? Thank u I need to make a list of Default Indexes assigned to each user role by default & where do I look to edit the settings... by SamHTexas Builder in Splunk Enterprise 09-13-2021 0 1	0	1
Matching results with previous results of the same search Hello guys,does someone know, whether it is possible, to do a matching of search results with previous results of the... by blablabla Path Finder in Splunk Search 09-13-2021 1 5	1	5
An error occurred adding 2 indexers with cluster master. The error is ;- (Clustering: Peer NodeThe cluster peer is unable to handle request at this time. This means either t... by Deshcyber Observer in Splunk Enterprise 09-13-2021 0 3	0	3
Splunk on new servers Hi @gcusello ,Background:We tried to upgrade our existing environment(7.1.3) to higher version 8.1 but we were unable... by rahul2gupta Path Finder in Installation 09-13-2021 0 1	0	1