Top Answers

1. Eval command vs eval expression
   3 votes
2. how to calculate duration between two events Splunk
   3 votes
3. Splunk join two query to based on result of first query
   3 votes
4. How to extract a field from a Splunk search result and do stats on the value of that field
   3 votes
5. splunk check if message contains certain string
   3 votes