| | I have a event that are generated in csv format with timestamp within file name as mentioned below. Need to extract t... 0 4 | 0 | 4 | |
| | Able to get event output in table format. But looking for eval condition:1. Remove T from the timestamp and convert ... 0 1 | 0 | 1 | |
| | As the title suggests I have a dashboard with various panels and wondering if it's possible to export a single panel ... 0 0 | 0 | 0 | |
| | When using regex how can I take a field formatted as "0012-4250" and only show the 1st and lat 3 digits? I tried the ... 0 3 | 0 | 3 | |
| | I am trying to get DeviceName and DeviceToken to var from 365 logfirst I use eval Device =mvindex('ModifiedProperties... 0 3 | 0 | 3 | |
| | Greetings all,I'm trying to search inside a lookup table and I need to use a search command follow by an OR and regex... 0 5 | 0 | 5 | |
| | I have a search that returns two results per day (a job's log entry of when it started and when it ended). I want to ... 0 1 | 0 | 1 | |
| | Hello Splunkers,My clients are experiencing issue because of the formatting of the results which is present Splunk vs... 0 1 | 0 | 1 | |
| | Hello,I have a dashboard with multiselection + text input field. I'd like to use checkbox instead of multiselect but ... 0 1 | 0 | 1 | |
| | I am using dashboard studio and i want to compare 2 values and if they are different, highlight it red. What is the b... 0 4 | 0 | 4 | |
| | Hello, I have a dashboard with multiselection + text input field. <form version="1.1" theme="light"> <label>Multis... 0 3 | 0 | 3 | |
| | Hi All! First post, super new user to Splunk. Have a search that i modified from a one a team member previously creat... 0 4 | 0 | 4 | |
| | Greetings !!I want a dashboard where I have put only four columns in a table visualization :ServerName Location UserN... 0 0 | 0 | 0 | |
| | I am writing a query which will give total time taken by a log/event for execution in milliseconds :index=xyz cluster... 0 1 | 0 | 1 | |
| | Hi Splunkers,I am currently working on creating an alert that sends an email with a table of inline results when trig... 0 2 | 0 | 2 | |
| | Below is one of my fields. Quite complex, I know It could be divided to more atomic values .. but it is not [Auditi... 0 5 | 0 | 5 | |
| | I'm using a map visualization with markers and would like to use different colors based on the value of a categorical... 0 0 | 0 | 0 | |
| | When I set the timeframe as 7 days and try to search my splunk query in the Grafana, it returns value. But if I incre... 0 0 | 0 | 0 | |
| | I have the following Splunk query that I have used in a dashboard: [search source="Stg" earliest=-15d cs_uri_token_2... 1 3 | 1 | 3 | |
| | Hi, I need help in extracting the time gaps in a multi-value field represented as Date.My data output looks like this... 0 3 | 0 | 3 | |
| | Removing FQDN from field valuesHi all, can anyone help me with framing the SPL query for the below requirement.I have... 0 3 | 0 | 3 | |
| | I have a lookup that has saved all apps installed on our deployment server. I need a query that checks all apps in th... 0 2 | 0 | 2 | |
| | Hello,I have an index with events, where events belong to a transaction (transaction_id). I am interested in transact... 0 1 | 0 | 1 | |
| | Hi, is there a way of ignoring the time zone in the searches? Currently, Splunk will reinterpret the difference in ti... 1 3 | 1 | 3 | |
| | "Find event in one search, get related events by time in another search"Found some related questions but could not fo... 0 6 | 0 | 6 | |
