Using Splunk

Using Splunk
Category Activity
frankeke
I have created a lookup table in Splunk that contains a column with various regex patterns intended to match file pat...
by frankeke Loves-to-Learn in Splunk Search 12-17-2024
0 5
0
5
Ashish0405
Hi Team,  In below query I don't want to show up the result as "Up" in state_to field, I just want to see data with d...
by Ashish0405 Path Finder in Splunk Search 12-17-2024
0 10
0
10
s_s
Hello, I am experiencing intermittent log ingestion issues on some servers and have observed potential queue saturati...
by s_s Observer in Splunk Search 12-17-2024
0 1
0
1
dtaylor
I've been working on a search that I *finally* managed to get working that would look for events generated by a provi...
by dtaylor Path Finder in Splunk Search 12-17-2024
0 2
0
2
varma364
Hi All,I’m trying to create a stacked Vertical bar chart in Splunk, where each bar represents a unique field (e.g., S...
by varma364 Path Finder in Dashboards & Visualizations 12-17-2024
0 5
0
5
Anubis
I have a search on my dashboard that takes ~20 seconds to complete.  This search is a member of a chain. base:  index...
by Anubis Explorer in Dashboards & Visualizations 12-17-2024
0 4
0
4
anoopambli
I have been going through several answers about how to get and track user logons and logoffs. Tried many of the searc...
by anoopambli Communicator in Splunk Search 12-17-2024
1 12
1
12
secure
Hi All i have a csv look up with below data Event_Code AUB01 AUB36 BUA12 i want to match it with a dataset which has ...
by secure Path Finder in Splunk Search 12-17-2024
0 2
0
2
Ashish0405
Hi Team,I am Firewall engineer and working on creation of some dashboard.I have created one dashboard whenever our fi...
by Ashish0405 Path Finder in Splunk Search 12-16-2024
0 6
0
6
Miguel3393
How can I get the total sum of the Duration fields?Regards. 
by Miguel3393 Path Finder in Splunk Search 12-16-2024
0 8
0
8
Cramery_
HiSo I ran into a very odd and specific issue. I trx to regex-Filter a field, lets call it "parent". The field has th...
by Cramery_ New Member in Splunk Search 12-16-2024
0 2
0
2
rmiller3
I got an alert working "for each result" by using a query that creates the following table:errorType             coun...
by rmiller3 Engager in Splunk Search 12-16-2024
0 2
0
2
vn_g
How to pass earliest and latest values to a data model search?  Example if I select a time range picker of last 30 mi...
by vn_g Path Finder in Splunk Search 12-16-2024
0 4
0
4
Ste
Dear expertsIn my dashboard I have a time picker providing the token t_time. My searchindex="abc" search_name="def" ...
by Ste Path Finder in Splunk Search 12-16-2024
0 6
0
6
chrystianguille
I need to replace the command wc-l because I want to saw a dashboard of the total of messages on a source.
by chrystianguille New Member in Splunk Search 12-13-2024
0 1
0
1
DLevine_
Working on supplementing a search we are using to implement conditional access policies. The search identifies succes...
by DLevine_ Explorer in Splunk Search 12-13-2024
0 5
0
5
CPrimoR
I am trying to regex out eligible with the answer field true, when i do it in the regex builder this works eligible\\...
by CPrimoR Observer in Splunk Search 12-13-2024
0 6
0
6
mburgess97
What is the best way to display dashboards/visualizations on multiple screens in a SOC?I am using RaspberryPi, firefo...
by mburgess97 Path Finder in Dashboards & Visualizations 12-13-2024
0 1
0
1
YuliyaVassilyev
Hi there! I want to create a scorecard by Manager and Region counting my Orders over Month. So the chart would look s...
by YuliyaVassilyev Explorer in Splunk Search 12-13-2024
0 4
0
4
sshostak
Hello guys.Hope someone can help us out.I am using the Enterprise and am trying to store the events after CIM mapping...
by sshostak New Member in Splunk Search 12-13-2024
0 0
0
0
a212830
Hi, Is it possible to create/modify a lookup file via Splunk's REST API? I don't see anything that addresses this fun...
by a212830 Champion in Splunk Search 12-12-2024
3 40
3
40
daviswk
I am creating a dashboard with Splunk to monitor offline assets in my environment with SolarWinds. I have the add-on ...
by daviswk Observer in Splunk Search 12-12-2024
0 3
0
3
ScottW
Hi smart folks. I have the output of a REST API call as seen below. I need to split each of the records as delimited ...
by ScottW Explorer in Splunk Search 12-12-2024
0 5
0
5
SN1
Hi I have a Dashboard in which i am using javascript , so whenever I am making changes on the script and restarting t...
by SN1 Path Finder in Dashboards & Visualizations 12-12-2024
0 3
0
3
anissabnk
Hello,I want to make a drilldown with those services : and I have to apply a drilldow for (s3-bucket / vpc / ec2) I'v...
by anissabnk Path Finder in Splunk Search 12-12-2024
0 6
0
6
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors