The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Michael Wilde replied to Nikita's discussion Count failures and success via transaction"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
Cool Search Commands (23)
| Discussions | Replies | Latest Activity |
|---|---|---|
 Count failures and success via transactionHi, I'm a new in Splunk so sorry for the stupid questions. I want to calculate failures in logs. For example we have request log and respon… Started by Nikita |
1 |
on Friday Reply by Michael Wilde |
Correlation between different source that have different value keyHi,I have difficulties on using search to correlate these two events from two different sourcetype.For example (this is not a real producti… Started by Andi Susanto |
1 |
Nov 2, 2011 Reply by Michael Wilde |
Regex helpI am trying to pull out the hostname of a virus scan message and create a new field, but I am not having any luck. This is the part of the… Started by Perry |
1 |
Oct 3, 2011 Reply by Michael Wilde |
What mail agent to use on a Windows boxI was just handed a Plunk server using windows 2003 and asked to configure it to send out email notices. Besides Sendmail, what other MTA… Started by Bill Price |
2 |
Aug 10, 2011 Reply by Bill Price |
 The "I suck at regex" class at Splunk User conferenceI'm planning on doing a really fun regex class during Splunk's user conference.... the premise is: In this class, we'll make one of the mos… Started by Michael Wilde |
3 |
Jul 30, 2010 Reply by Phillip Manning |
Forwarding setupI am a real Splunk newbie, and trying to figure out forwarding.I've installed splunk on server1 and server2. Server1 is my main server, an… Started by Adam Peterson |
1 |
Jul 26, 2010 Reply by Mark Sleeper |
 sum fields in same eventI need to sum fields by other fields in the same event. Here is an example event: _time somefieldname some… Started by Joe Rizzo |
2 |
Jun 30, 2010 Reply by Joe Rizzo |
Synthesizing sistats in search resultsI have a service that drops a stats line every minute on every host on 20+ hosts. If I use sistats I lose information on the true count of… Started by Blaine Morgan |
0 | Jun 22, 2010 |
Comparing events from 2 dates to detect new eventsHi,were using NMAP via scripted input to track live hosts on the networkim getting events formated using sed like:Fri Apr 9 16:11:50 IDT 20… Started by Alon Agmon |
0 | Apr 10, 2010 |
 Encountered the following error while trying to update: In handler 'savedsearch': Argument "action.summary_index." is not supported by this handlerHi, While trying to save a very simple search I ran into this: Encountered the following error while trying to update: In handler 'savedsea… Started by Marcelo Finkielsztein |
1 |
Apr 8, 2010 Reply by Marcelo Finkielsztein |
© 2012 Created by Michael Wilde.
