| | I have subquery result ashost1host2host2And I want to put this all host result as host=* in the main query.1. subque... 0 3 | 0 | 3 | |
| | I have a multi select drop down menu with field names as values. When i one or mone values from the drop down menu... 0 2 | 0 | 2 | |
| | I have the following fabricated search which is a pretty close representation of what I actually want to do and gives... 0 1 | 0 | 1 | |
| | Hi I have an event which has prod and test based on env...if it is test it goes to nsps [{},{} ] object an check for ... 0 1 | 0 | 1 | |
| | I am working on a dashboard that has a bunch of field and will be used by multiple teams and people who will be needi... 0 1 | 0 | 1 | |
| | I currently do a search monthly for searches/jobs that take a long time. I then look up the job and if there is an al... 0 4 | 0 | 4 | |
| | Anyone have a tip on how to have a token(from field)- and then determine which query to run based on that input? For ... 0 3 | 0 | 3 | |
| | Dear all, I'm trying to search for denied actions in a subnet, regardless if it is the source or destination. I tried... 0 1 | 0 | 1 | |
| | I have a saved search which is scheduled but it is not showing and not running at the scheduled time. 0 4 | 0 | 4 | |
| | Hello everyone, and thanks in advance for your help. I'm very new to this subject so if anything is unclear, i'll try... 0 2 | 0 | 2 | |
| | Hi,I am having some problem to understand How to fetch multiline pattern in a single event.I have logfile in which I ... 0 8 | 0 | 8 | |
| | I've the below event, where I need to display only event which has action=test and category=testdata. test { line1: 1... 0 3 | 0 | 3 | |
| | Hi All, newbie here - Sorry if my subject is poorly worded, I'm a little confused!I'm trying to add a field to the ta... 0 2 | 0 | 2 | |
| | Hello, My team has a search that uses a field called regex, containing a load of different regex expressions to match... 0 1 | 0 | 1 | |
| | I have JSON data which are multivalued. I want to create a overview table of the counts.{ "suite": [ { ... 0 3 | 0 | 3 | |
| | HI,I have a below query, I want to group and count by two different words, one group per word, in a field "text1.valu... 0 4 | 0 | 4 | |
| | I use a stats command in a search in a dashboard which results in about 600 rows. Splunk places a "next" button in th... 0 4 | 0 | 4 | |
| | Hello,Why does Splunk drilldown open two tabs instead of one?Here's my setting:Image => Drilldown settings => On clic... 0 9 | 0 | 9 | |
| | my alert is not triggered even with many matching events here are the details: while the activity that generate these... 0 5 | 0 | 5 | |
| | In release 9.2.2403 I see that:You can customize the text color of dashboard panel titles and descriptions with the t... 0 2 | 0 | 2 | |
| | Hello,I am looking to calculate how long it takes to refresh the view using the time of the events "End View Refresh"... 0 10 | 0 | 10 | |
| | Greetings, Please help!! I need to extract the ID value from the two events below, and I’m kinda banging my head here... 0 10 | 0 | 10 | |
| | My group and I are creating a senior project for a SIEM through a VM. We were planning to implement Splunk dashboards... 0 3 | 0 | 3 | |
| | Query is to retrieve failed test case matching with exception message. Out of 6 failed test case, one test as excepti... 0 6 | 0 | 6 | |
| | Hello Splunker!! Could you please help me to optimize below query ? Customer saying dedup is taking so much resource ... 0 13 | 0 | 13 | |
