| | This is similar to a question I asked earlier today that was quickly answered, however I'm not sure if I can apply th... 0 5 | 0 | 5 | |
| | Hello,Splunk doesn't display extra spaces on variables that I assigned. Please see below exampleI used Google Chrome ... 0 11 | 0 | 11 | |
| | If I execute the below query for selected time like 20 hours its taking longer time and calling events are 2,72,00... 0 8 | 0 | 8 | |
| | In the Splunk app, the exception message column has multiple line message in it. However, when same query is applied ... 1 3 | 1 | 3 | |
| | I would like to seek advice from experienced professionals. I want to add another heavy forwarder to my environment a... 0 5 | 0 | 5 | |
| | HelloI have a DBConnect query that gets data from a database and then send it to a Splunk index. Below are the query ... 0 4 | 0 | 4 | |
| | Good day,I am trying to figure out how I can join two searches to see if there is a service now ticket open for someo... 0 1 | 0 | 1 | |
| | I am trying to simply break down a url to extract the region and chart the use of specific urls over time. but i just... 0 2 | 0 | 2 | |
| | Hi All, I just wanted to know if there is any way to display text boxes upon clicking any of the buttons in my dashbo... 0 1 | 0 | 1 | |
| | We suspect that some of our users run real time searches. How can I produce a report which shows real time search act... 0 7 | 0 | 7 | |
| | Hello! I am looking to add color to a table I have in Dashboard Studio. I notice in the UI there are no coloring opti... 1 6 | 1 | 6 | |
| | After looking at some examples online, I was able to come up with the below query, which can display one or more colu... 0 2 | 0 | 2 | |
| | Splunk Enterprise Version: 9.2.0.1OpenShift Version: 4.14.30 We used to have Openshift Event logs coming in under sou... 0 1 | 0 | 1 | |
| | Can you please help me to build eval queryCondition-1ABC=MatchXYZ=Matchthen output of ABC compare to XYZ is MatchCond... 0 2 | 0 | 2 | |
| | I have set the alert to write the event to the index using the 'log event' action. I am writing to a custom index n... 4 6 | 4 | 6 | |
| | I have a working dashboard where a token is used as a variable. But now I am trying to use the same concept when maki... 0 5 | 0 | 5 | |
| | Hello, I am trying to join two indexes to display data from our local printers. I have an index getting data from ou... 0 8 | 0 | 8 | |
| | How can I get a list of all libraries included in this app? I will need that to get this through our security review. 0 1 | 0 | 1 | |
| | I have an index with events containing a src_ip but not a username for the event. I have another index of VPN auth ... 0 2 | 0 | 2 | |
| | First of all, English isn't my native language, so I apologize in advance for any error I could write in this support... 0 8 | 0 | 8 | |
| | Hi How to display the day / month / time / year like the below format using simple format Ex- | make result 0 5 | 0 | 5 | |
| | I have this queryis not mapped to ink name| rex "(?<time>\d{4}-\d{2}-\d{2}\s\d{2}:\d{2}:\d{2}).*Ink Type '(?<ink_type... 0 3 | 0 | 3 | |
| | I am trying to make a search that will fire only when an admin makes a change to their own account.I want to know if ... 0 3 | 0 | 3 | |
| | Hi,I have a huge set of data with different emails in it , I want to setup email alerts for few parameters.But the is... 0 3 | 0 | 3 | |
| | Hello There, I would like to pass two diffrent values as a token, the search consists of code as a token, where co... 0 5 | 0 | 5 | |
