| | index="*azure*" UserId="*#EXT#*" earliest=-300d@d latest=now| eval activity_time = coalesce(strptime(CreationTime, "%... 0 12 | 0 | 12 | |
| | I am using Splunk add-on for ServiceNow in my ITSI instance. I have configured Create SNOW incident action for the ep... 0 4 | 0 | 4 | |
| | Jenkins health dashboard is using index="jenkins_statistics in base search instead of macro `jenkins_index` unlike p... 0 2 | 0 | 2 | |
| | | rest splunk_server=* /services/data/indexes| fields title currentDBSizeMB lastIngestTime| eval Bytes = round(coales... 0 4 | 0 | 4 | |
| | I have a drop-down in my Classic Dashboard that is populating from an inputlookup.Looks like this:<input type="dropdo... 0 3 | 0 | 3 | |
| | I'm a novice working in fraud prevention; appreciate your help. When running the following, I'm getting a failure er... 0 7 | 0 | 7 | |
| | Good afternoon.I have been working on this issue for a couple of days, and I just cannot seem to get this SPL correct... 0 3 | 0 | 3 | |
| | We have a need to setup Synthetic Browser Tests against many endpoints. The main purpose for the Browser tests is to ... 0 1 | 0 | 1 | |
| | Hi, Let's say we have 2 multivalue fields Field1={a,b,c,d} Field2={a,b,c,d,e} Is it possible to evaluate the diff... 0 9 | 0 | 9 | |
| | I've got a list of over 100 account names and I'd like to search Splunk to find out the most recent activity (if any)... 0 5 | 0 | 5 | |
| | Hello folks,I'm struggling with something that should be very basic. I have two queries to track skipped scheduled se... 0 3 | 0 | 3 | |
| | According to https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-instruct-Splunk-to-not-add-quotes-when-p... 0 1 | 0 | 1 | |
| | I use fieldformat "Date Time"=strftime('Date Time',"%F %T %:z %Z","Asia/Hong Kong"). but it said the syntax is wrong.... 0 7 | 0 | 7 | |
| | I have a regex to extract filename from object field. This works completely fine in Search.index="test" | rex field=o... 0 1 | 0 | 1 | |
| | Hello, I would like to create a script that would trigger a pdf creation of a dashboard. I understand how to create... 1 8 | 1 | 8 | |
| | I have a json from Grafana.| makeresults count=1 | eval json = "{ \"datasources\": { \"ds_a\": {}, \"ds_b\"... 0 5 | 0 | 5 | |
| | I have a search with a chart that works well but when attempting to save I get the following error message: "Value of... 0 1 | 0 | 1 | |
| | I am trying to fetch top 10 max Requests count of events with their corresponding response time. So using the below q... 0 5 | 0 | 5 | |
| | Hello wonderful SplunkersI know we can have a WILDCARD match in a lookup where we can match a key to a wildcard in th... 0 6 | 0 | 6 | |
| | Hi,I’m building a search on the Network_Traffic datamodel to detect high outbound flows (>1 GB).I need to exclude a l... 0 1 | 0 | 1 | |
| | Here is what I haveNow I want to add a new column like this eval nullPercent = round((nullCount/total)*100, 2) where ... 0 4 | 0 | 4 | |
| | Our current Splunk version doesn't have the Dashboard Tabs feature, but we'll be upgrading to one that does have it i... 0 5 | 0 | 5 | |
| | Hi All,i have some table which have 2 columns, in that one column consists of date.I want to color the date column su... 0 1 | 0 | 1 | |
| | Am having issue with a Splunk alert triggering for daily snapshot of aws account ids. The alert is suppose to trigger... 0 2 | 0 | 2 | |
| | I’m trying to find logs where requestId value is equal to requestId value in another logTrying to find logs like this... 0 4 | 0 | 4 | |
