I have a 10GB Dev Licence including ITSI: Splunk Developer Personal License DO NOT DISTRIBUTE (with ITSI). How can I download ITSI? Where can I get the download link?
Hi, Splunkers, | where ENT_CallType=if($t_VQ$ =="*","*",ltrim($t_VQ$,"VQ_")) t_VQ is a dropdown token, value is either ALL/* or VQ_abc_efg (string starting with VQ_) w...
Hello All, I am trying to calculate the Average of a column, but i want it to ignore all values that are equal to 0. This currently what I have right now: stats avg(C...
Hi Guys,
I am looking search thru, splunk index for presence of multiple conditions as below.
index = "ind_name" return object|bin _time span=1d | where log like "%'f...
I am trying to run the following tstats search:
| tstats summariesonly=true estdc(Malware_Attacks.dest) as "infected_hosts" where "Malware_Attacks.action=allowed" from datamodel="Malware"."M...
hi why my where condition doesnt works please? `boot`
| fields host Name Path DegradationTime
| stats max(DegradationTime) as DegradationTime by Path
| where DegradationTime>1
| e...
the "where" command checks only one condition doesn't work like that my search: . . . . | where NOT (id_old = id OR user = username) but there is a separate input, then e...
I was working with where command like below- index=abc|where (id=1ORid=2ORid=3) In between id field I have used OR operator and by mistake I haven't used space before a...
Hi All,
I am trying correlate 2 different search queries using where with subsearch
it goes like this:
host="host1" | table Value1
above search give result : 40
host="host2" | where V...
...now.
In the older releases page, I can only find versions 7.2.x and below.
Where did 7.3.1 go?
I can't seem to find any information about critical issues with 7.3.1 which requires reverting b...