| | We use Log4J log file which is fed as input to Splunk. Each entry in the XML file is XML object with timestamp. Our ... 0 2 | 0 | 2 | |
| | splunk now supports email format including txt,html,raw,csv. now we wanna send email by html format and sms by raw fo... 0 3 | 0 | 3 | |
| | Hello I have written a dnslookup2 as follows, it simply just takes the ip to return the host: external_lookup.py ho... 1 3 | 1 | 3 | |
| | Now I have two fields(named field 1 and field 2) for one log file. Field 2 just has two kinds of value "1" and "2". I... 0 3 | 0 | 3 | |
| | This should be easy. I'm building a query: index=asdf "search string" | rex field=_raw mode=sed "s/.*foo(.*?)bar/\1/... 1 2 | 1 | 2 | |
| | I log into the web interface using a particular id, and i'm only concerned about a particular index, which is not the... 1 2 | 1 | 2 | |
| | We are adding more search and report in the "Search & Reports" menu, and I would like to add sub menus such as: Sear... 2 2 | 2 | 2 | |
| | 2010-11-17 16:11:34,210 DEBUG FF stderr: LoadPlugin: failed to initialize shared library /apps/splunk/etc/apps/pdfser... 1 1 | 1 | 1 | |
| | Deal Splunkers, I'm doing a serach like this to valorize a SingleValue indicator with range: <my search> | eval sec... 0 1 | 0 | 1 | |
| | I want to create a scheduled search that will be able to trigger an alert if a there's a sourcetype that has a thrupu... 1 1 | 1 | 1 | |
| | Is there is a way to have a scheduled search run and only alert if a certain condition is met for a period of time? ... 0 1 | 0 | 1 | |
| | Has anyone had issues using InputCsv? I created a CSV files using the 'outputcsv x' on a small event set. I verified ... 0 2 | 0 | 2 | |
| | I have data that is not being recognized. A PowerShell script outputs data (that I copied to a file for testing) that... 0 3 | 0 | 3 | |
| | All of the data we collect with Splunk has a UTC (GMT) timestamp. Last week, I built a report and set the time period... 0 2 | 0 | 2 | |
| | I have a requirement to implement process and service monitoring on a legacy Windows platform via Splunk. I already h... 0 3 | 0 | 3 | |
| | Hello, I know quite good Splunk, at least the basic concepts. I have recently created a dashboard with few panels ba... 0 1 | 0 | 1 | |
| | Hey, I want to place a HTML link in the position where the Help | About menu resides in Splunk Web. Does anyone kno... 0 5 | 0 | 5 | |
| | Hello, I have a simple request For a certain syslog source, I need to extract the 3rd word beginning from the end ... 0 6 | 0 | 6 | |
| | Hi, I saw there is a field called "loadAvg1mi" in sourcetype="vmstat" (*NIX App) , any one know what it means ? I tr... 0 2 | 0 | 2 | |
| | sourcetype="sophos" pmx_action="keep" fur!="none" | bucket _time span=24h | timechart span="1d" count Hi all, i ne... 0 3 | 0 | 3 | |
| | I want to build several reports from fields of one log file at the same time.I don't want to show them together in on... 0 2 | 0 | 2 | |
| | These modules are nested for intention flow .. and an event table at the bottom. (advanced xml) <module 1>... ... ... 1 2 | 1 | 2 | |
| | I've seen this question floating around but I can't find a solution that works. I have a HiddenSearch that runs after... 0 1 | 0 | 1 | |
| | I am using a StaticSelect that presents a list of items. My list has grown to large to be in one drop down, so I wou... 1 2 | 1 | 2 | |
| | I want to build a report which can show the result of two fields from different searches?Can splunk do that? Thank u ... 1 2 | 1 | 2 | |
