Questions & Apps Tagged With search-language

Questions Tagged With search-language

View Apps | View Both

hottest newest most voted unanswered

votes

answers

984

views

reverse mapping from custom fields to host and sourcetype

updated 28 Jun '10, 19:23 by natrixia37

vote

answer

1.4k

views

how to fill the missing values to nearest previous non-zero value in streamstat result

updated 28 Jun '10, 16:50 by sideview ♦25.6k

votes

answer

1.3k

views

How to return time of first event in an index?

search-language index-time first

updated 28 Jun '10, 15:25 by Lowell ♦11.1k

votes

answer

1.1k

views

Making a lookup optional? (Or, how to build a multi-level lookup?)

search-language best-practice lookups

updated 25 Jun '10, 21:38 by Lowell ♦11.1k

votes

answers

1.3k

views

metadata search for distributed environment

search-language

updated 24 Jun '10, 07:38 by Dan ♦1.5k

votes

answers

513

views

Finding forwarders that are 3.4.x and older.

search-language forwarder version

updated 22 Jun '10, 17:26 by sanju005ind189

vote

answers

2.1k

views

How do I display percentage of 500 errors on a per-URI basis?

search-language report stats chart

updated 21 Jun '10, 19:30 by kdankmyer13

vote

answer

744

views

Search help - reporting backup status

search-language search-help

updated 17 Jun '10, 21:26 by sideview ♦25.6k

votes

answer

1.2k

views

Is it possible to get a "sample" set of search results rather than the full search results?

search-language performance how-to

updated 17 Jun '10, 18:10 by Lowell ♦11.1k

vote

answer

3.2k

views

Using Splunk to count within a search - users to ip addresses

search-language search search-help

updated 17 Jun '10, 03:27 by gkanapathy ♦32.4k

votes

answers

1.3k

views

How to sort by numerical, not lexigraphical order (using a stats command or equivalent)?

sort search-language search stats values

updated 14 Jun '10, 05:23 by natrixia37

vote

answers

473

views

Get the Splunk indexer name output.

search-language

updated 12 Jun '10, 01:49 by gkanapathy ♦32.4k

votes

answers

2.8k

views

Detailed Index Status Report - Is there one?

search-language index view

updated 09 Jun '10, 13:49 by tpaulsen120

vote

answers

1.2k

views

Evaluate an event's repetition (logfail) over a time unit, if repetition is greater than X

search-language search-help monitoring

updated 07 Jun '10, 08:01 by nik_splunk73

-1

votes

answers

2.3k

views

Search help - need sub search to return time and host value for new search

search-language search-help subsearch

updated 05 Jun '10, 06:38 by sideview ♦25.6k

votes

answers

893

views

Search command: bucket

search-language search savedsearch

updated 04 Jun '10, 03:55 by steveyz ♦1.2k

vote

answer

500

views

search that captures sum of users by url

search-language search-help

updated 03 Jun '10, 17:17 by sideview ♦25.6k

votes

answers

1.1k

views

Search Time interval

search-language search time

updated 31 May '10, 09:54 by shirolu35

votes

answer

1.4k

views

Can't get past subsearch limit

search-language limits subsearch

updated 31 May '10, 06:41 by gkanapathy ♦32.4k

-3

votes

answer

573

views

Fields command in 4.1.2, build 79191 may have a bug?

search-language bug

updated 30 May '10, 22:48 by gkanapathy ♦32.4k

votes

answer

752

views

Can I use n field values as field names for summary indexing?

search-language summary-index search-help savedsearch

updated 29 May '10, 01:33 by gkanapathy ♦32.4k

votes

answer

429

views

What is the limit on the number of characters a search can be?

search-language limits

updated 28 May '10, 12:56 by gkanapathy ♦32.4k

votes

answer

475

views

How can i check for forwarders that have not sent a specific sourcetype,source,host within x time?

search-language forwarder metadata

updated 28 May '10, 10:32 by gkanapathy ♦32.4k

votes

answer

1.5k

views

Advanced alerting: How to uniquly report the most recent events while allowing for indexing delays?

search-language best-practice alerts macro

updated 27 May '10, 15:56 by joelshprentz212

votes

answer

921

views

Error in 'IndexScopedSearch': The search failed.

search-language search-help

updated 26 May '10, 05:49 by sideview ♦25.6k

votes

answers

1.4k

views

Using field values as paramaters for macros

search-language savedsearch search-help

updated 25 May '10, 17:11 by Lowell ♦11.1k

vote

answer

816

views

How can I be alerted when the average of a field split by another field rises or drops by a certain percent?

report search-language alerts

updated 25 May '10, 07:23 by natrixia37

vote

answers

1.4k

views

foreach for mv fields?

search-language multivalue

updated 22 May '10, 00:45 by sideview ♦25.6k

votes

answer

1.2k

views

Getting macro parameters from search result?

search-language macro

updated 21 May '10, 01:48 by gkanapathy ♦32.4k

votes

answer

959

views

Disk usage Alerts

search-language

updated 20 May '10, 21:23 by Voltaire176

393Questions tagged search-language

599Answers

reverse mapping from custom fields to host and sourcetype

how to fill the missing values to nearest previous non-zero value in streamstat result

How to return time of first event in an index?

Making a lookup optional? (Or, how to build a multi-level lookup?)

metadata search for distributed environment

Finding forwarders that are 3.4.x and older.

How do I display percentage of 500 errors on a per-URI basis?

Search help - reporting backup status

Is it possible to get a "sample" set of search results rather than the full search results?

Using Splunk to count within a search - users to ip addresses

How to sort by numerical, not lexigraphical order (using a stats command or equivalent)?

Get the Splunk indexer name output.

Detailed Index Status Report - Is there one?

Evaluate an event's repetition (logfail) over a time unit, if repetition is greater than X

Search help - need sub search to return time and host value for new search

Search command: bucket

search that captures sum of users by url

Search Time interval

Can't get past subsearch limit

Fields command in 4.1.2, build 79191 may have a bug?

Can I use n field values as field names for summary indexing?

What is the limit on the number of characters a search can be?

How can i check for forwarders that have not sent a specific sourcetype,source,host within x time?

Advanced alerting: How to uniquly report the most recent events while allowing for indexing delays?

Error in 'IndexScopedSearch': The search failed.

Using field values as paramaters for macros

How can I be alerted when the average of a field split by another field rises or drops by a certain percent?

foreach for mv fields?

Getting macro parameters from search result?

Disk usage Alerts

Tags

Splunk Resources