Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
52 results
Sort by:
03-13-2014
11:43 AM
1 Karma
I would like to modify the token a user inputs in a form using rex commands so that I can insert it into the search later. For instance, if the user enters AC123,AC456 in the form field, I would wa...
07-31-2020
09:57 AM
...equestParameters.Host" field isn't a string, e.g. the following search also fails sourcetype=aws:cloudtrail errorCode="AccessDenied"
| eval test = requestParameters.Host e.g. "test" is b...
- Tags:
- cloudtrail
- json
Labels
- Labels:
-
eval
-
field extraction
01-16-2017
09:25 AM
I am trying to get all DHCP records for machines on which an authentication attempt was made for a user. I am doing this with a subsearch on the Authentication datamodel for the authentication sourc...
04-09-2020
06:20 AM
...ime.
Because the host_segment uses (why ever on earth i don't know) the source string.
Host segment defines the "7" position as the host variable.
So if i define the source by myselft h...
11-15-2017
01:29 PM
I have a dashboard in which the customer can enter a start date/time, end date/time, and a string. I then use the information entered to query two different (not Splunk) databases to find/present r...
06-27-2017
01:50 PM
manipulating strings, I had a post before regarding an array, but say I have a field that has value string1+string2+string1 , how can I display this value as packaged(string1+string2)
EDIT:
I...
05-11-2022
03:39 AM
...og]
LINE_BREAKER = (`~!\^<)
SHOULD_LINEMERGE = false
SEDCMD-payload = s/payload_printable":([\s\S]*)",/ ---payload string has been truncated by splunk admins at index time--- /g
SEDCMD-response = s...
Labels
- Labels:
-
JSON
06-24-2019
06:08 AM
Dear fellow Splunkthusiasts, is there a way to put my own script manipulating the data in between the forwarder and indexer?
To be specific: I have XML logs from SmartMeter/jMeter looking like t...
02-14-2022
02:16 AM
...ant to extract the substring with 4 digits after two dots ,for the above example , it will be "ab1d". How my splunk query should look like for this extraction?
Basically I have been given a string, a...
05-26-2023
04:17 PM
Sample event
{
durationMs: 83
properties: {
request-id: 1c910793-8be4-4850-83d5-f360b4b05478
method: GET
path: /scenarios/636d40506930b10b8f082f27
...
Labels
- Labels:
-
eval
