Hi, I would have this need, that is to carry out a search that extracts all users who use iphone with SO = 9. * and then through the extracted users, search through them who has also used another d...
I am trying to craft a search that uses the most recent source as the basis for my search. The source is a file path < C:\foo\bar.csv> I think that a sub search is the best option b...
Hi Splunk Community, I am pretty new to using Splunk for reporting purposes. Below are my use case : Every month, I am required to generate report to calculate monthly response time for e...
hi every one,
I want to make a search that could give me the same result of SQL Querie
select id_product from products where price = (
select max price from products )
thank you
In one of the search strings, I have an event from which i extract the correlation ids and in turn want to search through there correlation ids to get an event which has a text in from of the c...
I have logs being stored in json that shows accounts being given access to data. I need to validate that the accts are valid. I am trying to run asubsearch that will get the list of accounts(use...
...hone number, retrieve the associated GUID and then return all the results tied to that GUID. I have the search retrieving the GUID working, and want to use that as the subsearch. Ultimate s...
Hi All,
I am trying correlate 2 different search queries using where with subsearch
it goes like this:
host="host1" | table Value1
above search give result : 40
host="host2" | where V...
Hi,
I have a log file with 3 columns, timestamp, processID and state. When the process starts or ends, a row is inserted into the log file. What's the best search string to find out all jobs i...