Hi All, I need some help in searching, so I have 1 index but it has multiple sources, Index = Index1 and within the index, it has few sources file_2021-05-14.csv file_2021-05-15.csv file_2021-05-16.csv I'd like to make a search that the source will be dynamically depending on today date, Index=Index1 source = "file_yyyy_mm_dd.csv"  is this possible? Thank you! ... View more

Hi All, I need some help in searching, I have the following data :  Field1 Field2 2021-05-14X03:02:57Y Xa 2021-05-13X05:12:13Y Xb 2021-05-16X04:06:45Y Xc   So, I'd like to make a search that using the current date, assuming that today is 2021-05-16,  if I run the search it shows the output 2021-05-16X04:06:45Y Xc   so if the next day I run the search again, it will only return the 2021-05-17 data Could someone help me on this? Thank you so much! ... View more

Hi all, I need some help in creating a new field, I have a field like following Field 1 AABBCCDDEEFF AAAABBBBCCCC   Id like to make a new field and the values become : AA-BB-CC-DD-EE-FF AA-AA-BB-BB-CC-CC   could someone help me with this? Thanks in advance! ... View more

Hi all, i need some help in comparing 2 fields, the other field has multi values, Field 1 Field 2 127.0.0.1 127.0.0.1 127.0.0.2 127.1.1.1 127.1.1.2 127.1.1.2 127.1.1.3 127.1.1.4   I want to compare these 2 fields , when in field 1 has matching value with the field 2 it will return match in a new field im going to make, but in field 2 records isnt always has multi values, im expecting the result as below: Field 1 Field 2 New_Field 127.0.0.1 127.0.0.1 127.0.0.2 matched 127.1.1.1 127.1.1.2 not matched 127.1.1.2 127.1.1.3 127.1.1.4 127.1.1.5 not matched   im still new with splunk search, need some advice how i could do the compare and on multi values field as above   really appreciate if someone could help on this   ... View more