Using Splunk

Using Splunk
Category Activity
amitshrigoel
I am trying to query AWS config data in Splunk to identify the names of all S3 buckets in AWS. Is there a way to writ...
by amitshrigoel Explorer in Splunk Search 01-13-2025
0 3
0
3
sjaworski
I would like to monitor changes made to roles. Most specifically I want to create an alert when the can_delete role ...
by sjaworski Communicator in Alerting 01-13-2025
1 13
1
13
DEADBEEF
I'm trying to create a simple status page visualization that mimics the style I've seen by Atlassian Statuspage.   Yo...
by DEADBEEF Path Finder in Dashboards & Visualizations 01-12-2025
0 1
0
1
rish_raw
I have two log messages "%ROUTING-LDP-5-NSR_SYNC_START" and "%ROUTING-LDP-5-NBR_CHANGE" which usually accompany each ...
by rish_raw New Member in Splunk Search 01-11-2025
0 2
0
2
Souradip11
Hi,I have two indexes - "cart" and "purchased" . In "cart" index there is a field "cart_id" and in "purchased" there ...
by Souradip11 Explorer in Splunk Search 01-11-2025
0 2
0
2
rohithvr19
Is it possible to create a button in a Splunk dashboard that, when clicked, runs a script to export logs from Zabbix ...
by rohithvr19 Loves-to-Learn Everything in Splunk Search 01-11-2025
0 5
0
5
Wagzillion
Hello Everyone, I am hoping someone can help me out as I have exhausted everything I can think of and cannot seem to ...
by Wagzillion Observer in Splunk Search 01-10-2025
0 6
0
6
avi123
Hi All, I have designed a splunk query: | inputlookup Expiry_details_list.csv | lookup SupportTeamEmails.csv Applicat...
by avi123 Explorer in Splunk Search 01-10-2025
0 1
0
1
Aroot002
Hi everyone, I recently took over a project by someone who is no longer with my employer. He made several scheduled s...
by Aroot002 Path Finder in Splunk Search 01-10-2025
0 7
0
7
rajsplunk
HI allI have a scenario where i have to find the difference of two field value (string) for examplefileda="raj", "rah...
by rajsplunk Explorer in Splunk Search 01-10-2025
0 8
0
8
Graham_Hanningt
My use case: I want to create a timechart of the number (count) of requests to a system, split by "connection type": ...
by Graham_Hanningt Builder in Splunk Search 01-10-2025
0 15
0
15
Souradip11
Hi,I am using a search Mysearch |eval Guest=if(sid=22,BOT,Others) | convert timeformat="%Y-%m-%d" ctime(_time) AS dat...
by Souradip11 Explorer in Splunk Search 01-10-2025
0 4
0
4
r_s01
Trying to check and set values conditionally but below query is giving errorError :-Error in 'eval' command: Fields c...
by r_s01 Explorer in Splunk Search 01-10-2025
0 4
0
4
Miguel3393
I have this search, where I get the duration and I need to convert it to integer:Example: Min:Sec to Whole 00:02     ...
by Miguel3393 Path Finder in Splunk Search 01-09-2025
0 5
0
5
Kenny_splunk
Hey guys, so I was wondering if anyone had any idea how to optimize this query to minimize the sub searches.  My brai...
by Kenny_splunk Path Finder in Splunk Search 01-09-2025
0 1
0
1
noott211
Dashboard Classic are in useI implemented a table chartI'd like to modify the column size of the table Is there a way...
by noott211 Path Finder in Dashboards & Visualizations 01-09-2025
0 4
0
4
r_s01
  index="uhcportals-prod-logs" sourcetype=kubernetes container_name="myuhc-sso" logger="com.uhg.myuhc.log.SplunkLog" ...
by r_s01 Explorer in Splunk Search 01-09-2025
0 6
0
6
hcelep
Hey,   I want to add _time column after stats command but I couldn't select the best command. Forexample;   index=* |...
by hcelep Engager in Splunk Search 01-09-2025
0 5
0
5
anu1
Hey team,I have one requirement i.e have to Create a splunk dashboard to report the # of Logins , # of LogoutsThe inp...
by anu1 New Member in Splunk Search 01-09-2025
0 4
0
4
sdcig
Hello,I have 2 queries where indices are different and have a common field dest_ip which is my focus(same field name ...
by sdcig Explorer in Splunk Search 01-08-2025
0 9
0
9
Ste
Dear expertsBased on the following search:  <search id="subsearch_results"> <query> search index="iii" sea...
by Ste Path Finder in Splunk Search 01-08-2025
0 2
0
2
shenoyveer
Hi Everyone,   I am trying to create one dashboard out of search query but I am getting stuck where I am unable to th...
by shenoyveer Path Finder in Dashboards & Visualizations 01-08-2025
0 9
0
9
dorHerbesman
Im trying to set and unset a filter (manage token) based on click.name2 - if form.Tail=* i want to put click.name2, a...
by dorHerbesman Path Finder in Dashboards & Visualizations 01-08-2025
0 5
0
5
tretrigh
I'm building a search which takes a URL and returns all events from separate indexes/products where a client (user en...
by tretrigh Path Finder in Splunk Search 01-08-2025
0 8
0
8
Naa_Win
Hello,I’m working on creating a Splunk troubleshooting Dashboard for our internal team, who we are new to Splunk, to ...
by Naa_Win Path Finder in Dashboards & Visualizations 01-08-2025
0 8
0
8
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors