Hi folks,
I'm experiencing a strange behavior on one of my splunk real-time postprocess dashboards. The numbers shown are significantly smaller as when I run the same search directly.
Code f...
Hey everyone! Hope you are doing alright and my question is in the right place here. For a few days, i am seeing a strange issue with my searches. I do mainly use text fields and f...
...ot able to capture dboutput error such as "unique constraints violated". When I look at the job log under "inspectjob" in splunk GUI, the error is part of the raw log and not the "searchjobproperties...
I am using Splunk Python SDK to run series of splunk queries. Recently encountered an issue, results from SDK and manually running query on the Web yields different results. All I am trying to do is ...
...ne column titled GroupName. My eventual search will look for any events where EventID=4728 OR EventID=4732 OR EventID=4756. For now, I'm just trying to get the basic search working and t...
...ools:
POST http://srv1:8000/en-US/splunkd/__raw/servicesNS/helge/simple_xml_examples/search/jobs?output_mode=json 400 (Bad Request) mvc.js:6
[SPLUNKD] Invalid earliest_time. mvc.js:6
I am u...
I have a user who is asking how to show earliest logs indexed by the indexer for a particular host. I tried this simple search using tstats, but when he runs it he gets no results back. Here is the search...
Hi,
I have a dashboard that displays results below:
However, if you open it in search and change search mode to verbose, the result is somehow different:
Now, I'd like to k...
I have existing Python scripts that pull data from various sources. I would like to use Splunk's built-in Python SDK layer in my own script so that I can run searches programmatically.