
Solved: How to use 2 different query in dashboard and hide.
Apr 5, 2025 · Hi All, I have created one query and it is working fine in search. I am sharing part of code from dashboard. In first part of call if you see I have hardcoded by earliest and latest time …
How to Comment a Single Line in SPL Query? - Splunk Community
Hi Splunkers, I need to know how to comment out a single line in an SPL query when working in search and reporting. Could someone please provide an example? Thanks,
Solved: How do I create a query to look at multiple source.
Apr 17, 2018 · What I am looking for is how to look at multiple sources and destinations in one query. In our enterprise environment, our servers are hosted offsite, and sometimes, I need to …
Query user login over a period of time - Splunk Community
Jul 17, 2024 · I am trying to query our windows and linux indexes to verify how many times a user has logged in over a period of time. Currently, I only care about the last 7 days.
Splunk search query examples
Jan 12, 2018 · I am new to splunk and was wondering if anyone has a document they don't mind sharing detailing "example search queries" as a starting point? any help would be appreciated. …
Solved: Query to check the indexer is down, up or in unkno.
Mar 12, 2025 · Is there is any Query to check whether the indexers status is down, up or in unknown state . I can check in monitoring console but need a query to see for all indexer.
Solved: Query - How to check failed % > X - Splunk Community
Dec 13, 2023 · Hi, I need help in a splunk search. My requirement is get the stats for failed and successful count along with the percentage of Failed and Successful and at last I would need …
query on using AND ,OR - Splunk Community
Jan 27, 2014 · This query fetched correct number of events as expected.I want to confirm whether splunk follows right to left associativity in the above query or what?Because the following …
How to write a search query for CPU - Splunk Community
Mar 1, 2022 · Solved: Hi, I am trying to create a alert for cpu usage by using below query, index=os host=cbtsv | stats latest (*) as * by host | table _time
Query for Users, Roles, AD Groups and Indexes. - Splunk Community
Sep 19, 2019 · Hi, I'm trying to get the query to pull out the following, but struggling a bit with all the joins. I need to get a list of the following in a report. List of users The Roles each user is …