Community:Searching, alerting, and reporting

• Searching for surrounding events
• An example of using the list lookup feature for HTTP status lookups
• Useful regex for masking credit card numbers in your data
• Reporting on access patterns over time
• Useful Reports on Splunk Metrics
• How summary indexing can help you
• Back filling a summary index with archive data
• Best practices for Splunk alerting
• Plotting a linear trendline
• Search by time of indexing
• Modifying the splunk-search process priority
• Intro to Splunk Search Performance
• Example: Multi-Value Field Extraction For Multi-line Event
• Example: Comma-Separated Multi-Value Field Extraction In Single-line Event
• Example: Search Report: How To Add a Threshold In a Chart
• Example: Search Report: How to Add a Range Marker In a Chart by Advanced XML
• Example: Search Report: How To Create a Table of Day of Week - Monthly Average Vs Daily Average
• Example: Search Report: How To Create a Chart of Hourly and Accumulated Index Volume
• Example: Search Report: How To Create a Line Chart of Search Duration in Timeline
• Example: Search Report: How To Analyze Difference between the timestamp Vs IndexedTime
• Example: Search Report:How To Analyze parsed Timestamp Vs original Timestamp in an event
• Example: Search Report: How to search based on Indexed Time and define time range based on relative time of Indexed Time
• Example: Search Report: Use Join or Map
• Example: Search Report: How to use map to identify added or removed node name between current and previous events
• Example: Search Alert: Scripted Input And Multi-value Field Extraction - Compare File Size
• Example: Search Alert: How to use transaction to identify a transaction which find a "start" event but not "end" event
• Example: Search Alert: How to get search result in Scripted Alert
• Example: Search Performance: Use Eval Instead of Rangemap
• Example: Search through REST API in Perl
• Example: Managing SavedSearch: How to change owner of savedsearches using REST call
• Example: Search Report: How To Merge Three Lookup Tables By Associated Fields
• Which command do I need to use?
• Example: Managing SavedSearch: How to create, alter, and delete searches using REST calls

How to contribute

Want to add information to an existing topic or create a new topic? Click here for instructions.