Using Splunk

Using Splunk
Category Activity
LogUx
Hello Splunkers!!I want to achieve below results in Splunk. Please help me how to achieve this in SPL. Whenever the f...
by LogUx Motivator in Splunk Search 08-16-2024
0 5
0
5
OgoNARA
I really need help I'm trying to get my panels to move from red to green based on live stats, but nothing works. I tr...
by OgoNARA Explorer in Dashboards & Visualizations 08-16-2024
0 1
0
1
FPERVIL
We have both Cisco ASA and FTD firewalls.  The ASA is parsing fine where the appropriate fields are extracted.  As fo...
by FPERVIL Explorer in Splunk Search 08-16-2024
0 3
0
3
RonWonkers
Hi, I have a table with dynamic fields, some of these fields contain no value or NULL, how do I remove these fields w...
by RonWonkers Path Finder in Splunk Search 08-16-2024
0 3
0
3
MK3
Hello,I send a GET request to Postman as follows -curl -u <username> -k https://<url>.net:8089/services/jobs/export -...
by MK3 Explorer in Splunk Search 08-16-2024
0 1
0
1
MoeTaher
Hello All,  I'm having a task to measure the compliancy of Security solution onboarded on the SIEM, that means i have...
by MoeTaher Observer in Splunk Search 08-16-2024
0 5
0
5
wm
Hi all,index=sky sourcetype=sky_trade_wss_timestamp| rex field=_raw "trade_id=\"(?<trade_id>\X+)\", event_id"| rex fi...
by wm Loves-to-Learn Everything in Splunk Search 08-16-2024
0 2
0
2
deepthi5
we have recently upgraded from splunk 8.x to 9.x after which all python scripts are failing with ssl errors we have u...
by deepthi5 Path Finder in Splunk Search 08-15-2024
0 2
0
2
wm
Hi all!I would like to create a no_msg_wait_time column here.This is my existing splunk search query: index=index sou...
by wm Loves-to-Learn Everything in Splunk Search 08-15-2024
0 9
0
9
cherrypick
I have arguments for my macro that contain other values e.g. $env:user$ and $timepicker.earliest$/$timepicker.latest$...
by cherrypick Path Finder in Splunk Search 08-15-2024
0 4
0
4
Cheng2Ready
I have search query, if the Status is field is true for more than 5 min, I need to trigger an alert  no matter the Ev...
by Cheng2Ready Communicator in Splunk Search 08-15-2024
0 3
0
3
kmm2
I am not seeing results for count on each of the fields for the 2 different searches below:   The first one shows the...
by kmm2 Path Finder in Splunk Search 08-15-2024
0 5
0
5
wm
This is my current search queryindex=abc sourcetype = example_sourcetype | transaction startswith="Saved messages to ...
by wm Loves-to-Learn Everything in Splunk Search 08-15-2024
0 3
0
3
astockmeister_s
I have a search that returns values for dates and I want to calculate the changes between the dates.  What I want wou...
by astockmeister_s Explorer in Reporting 08-15-2024
0 9
0
9
NewToSplunk1
I have a dropdown where I select the event name and that event name value is passed as a token to the variable search...
by NewToSplunk1 Explorer in Dashboards & Visualizations 08-15-2024
0 1
0
1
tomapatan
I`ve got 2 base searches:   <search id="Night">  and   <search id="Day">   And a dropdown input:   <input type="dr...
by tomapatan Contributor in Dashboards & Visualizations 08-15-2024
0 7
0
7
timgmanCORP
I have a csv with ip addresses. I would like to conduct a search for addresses that are NOT listed in that csv.  I wa...
by timgmanCORP Observer in Splunk Search 08-14-2024
0 2
0
2
kc_prane
Hello, I have time stamps that are not matching. How do I table the actual "Event log time stamp" ? Splunk Time stamp...
by kc_prane Communicator in Splunk Search 08-14-2024
0 5
0
5
Xe03kfp
How would I search multiple hosts with one search string? I have 6 hosts and want the results for all: Search Strin...
by Xe03kfp Path Finder in Splunk Search 08-14-2024
0 10
0
10
ichesla1111
Hello,I am trying to display my Splunk dashboard on a tv 24/7 in the front of my shop to show a running count of cust...
by ichesla1111 Path Finder in Dashboards & Visualizations 08-14-2024
0 1
0
1
jay_cambra
Is there a way to see who modified system settings in Splunk Cloud?  For example we recently had an issue where an Sp...
by jay_cambra Observer in Splunk Search 08-14-2024
0 1
0
1
MK3
Hello.I have Splunk Enterprise (https://splunk6.****.net run from a browser) and am running a query collecting result...
by MK3 Explorer in Splunk Search 08-14-2024
0 1
0
1
OgoNARA
Hi,   So, I got an issue where I have a log and the log has a field called ERROR_MESSAGES for each event that ends in...
by OgoNARA Explorer in Splunk Search 08-14-2024
0 2
0
2
MK3
Hello,If I want to use a external file that contains 2 columns C and D and use those mappings to a existing query tha...
by MK3 Explorer in Splunk Search 08-14-2024
0 3
0
3
Sishad
Hi Splunk experts,I want to compare the response code of our API for last 4 hours with last 2 days data over the same...
by Sishad Explorer in Splunk Search 08-14-2024
0 4
0
4
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors