| | Looking for SPL that will give me the ID Cost by month, only grabbing the last event (_time) for that month. Sample ... 0 14 | 0 | 14 | |
| | Summary index or any alternativeHi, I have created a dashboard with 8 panels and time frame is last 5 minutes. Kept t... 0 9 | 0 | 9 | |
| | Hi, I am having an issue trying to make a version of the search app filtering timeline work in my dashboard in Dashbo... 0 6 | 0 | 6 | |
| | Hellois it possible to use multiselect input in classic dashboard so the selected objects there will be key=value AND... 0 6 | 0 | 6 | |
| | so i have a dashboard and i want to send an alerts to the Microsoft teams channel how can i do that. 0 1 | 0 | 1 | |
| | raw data - "attackData":{"rules":[{"data":"SCANTL=10","action":"alert","selector":"","tag":"REPUTATION","id":"REP_602... 0 7 | 0 | 7 | |
| | Hi, I'm attempting to write a search where I return a top 10 of a value. However, I am noticing that I return differe... 0 2 | 0 | 2 | |
| | i have done this, but nothing i can't see in event viewer. what's the problem? 0 2 | 0 | 2 | |
| | Hello Everyone,I have 2 splunk search queriesquery-1index="my_index" kubernetes_namespace="my_ns" kubernetes_cluste... 0 3 | 0 | 3 | |
| | I am logged in as the admin user, but whenever I try to access Tokens, Users, or other settings pages, I get a blank ... 0 3 | 0 | 3 | |
| | So I have successfully configured some reports and alerts that send the $result to Mattermost.My question is how to d... 0 1 | 0 | 1 | |
| | Hello, I have a simple distributed search config on a windows host, 1 SH, 1 IDX and 1 License server. Running a searc... 0 9 | 0 | 9 | |
| | HelloI have a table in dashboard studio and i want to show a part of the json field which contains sub objectswhen ru... 0 6 | 0 | 6 | |
| | I'm trying to split a pair of rows with a pair of multivalued columns. The value in both columns is related to each p... 0 8 | 0 | 8 | |
| | Hello, I have a Dashboard Studio dashboard (Splunk 9.2.3) with a pair of dropdown inputs (“Environment” and “Dependen... 0 3 | 0 | 3 | |
| | I am looking for away to join results from two indexes based on the hostname. The main index has the hostname as just... 0 3 | 0 | 3 | |
| | Hello there, I try to import Azure NSG flow Events. To get the data into Splunk I use the Splunk Add-on for Microsoft... 1 14 | 1 | 14 | |
| | I was having Live Service Monitoring Dashboard, created in Splunk Cloud using Studio Dashboard(JSON).Is there any pos... 0 3 | 0 | 3 | |
| | Hello,I have 2 seperate splunks as below . One is "v1 endpoint" and other is "v2 endpoint"v1 endpoint: index="abc" "u... 0 3 | 0 | 3 | |
| | i have three drop down lists. one with component(A,B,C,D). other dropdown with severity(Info,Warning) and colour drop... 0 5 | 0 | 5 | |
| | I am creating a query and when I see the result I see proper table with headers , but saving it to existing dashboard... 0 16 | 0 | 16 | |
| | Hello SplunkersThe time selector is not visible for a specific user, whereas it is visible for the admin role. Could ... 0 12 | 0 | 12 | |
| | I want to use the 2nd search as a subsearch only bringing back the actions. How can I do this?SEARCH| rest /servicesN... 0 1 | 0 | 1 | |
| | Hello Splunk Community, We are currently transitioning a live dashboard from Splunk Enterprise to Splunk Cloud. The o... 0 2 | 0 | 2 | |
| | Please help share query to check > network logs and firewall blocks for specific Host machine> LDAP password login fa... 0 1 | 0 | 1 | |
