Splunk Search

How to get list of users for specific search,How to get list of users for message

rajawccm16
Engager

Hi All,

I am very new to splunk, wanted to get the list unique users for below criteria.

I need query to get the actor which was a user .

Unable to retrieve the content 7ec12461-b0db-4a7b-a210-7da0b2a1542e ph924_8bc4e8a6-6tr-oipo-zcvv-ea281ba6b101 Actor raja.
Unable to retrieve the content 7ec12461-b0db-4a7b-a210-7da0b2a1542e ph924_8bc4e8a6-950f-rtey-ggff-qwrq42342435 Actor shekar.
Unable to retrieve the content 7ec12461-b0db-4a7b-a210-7da0b2a1542e ph924_8bc4e8a6-khj-4ce6-khjk-gdgdfshghgfg Actor Madhu.,

Tags (1)
0 Karma

rajawccm16
Engager

Thank you for ur reply

when "exception: Error occurred. Unable to retrieve document, please contact the helpdesk." occurred,

then need to get actor from message section, Please advise

exception: Error occurred. Unable to retrieve document, please contact the helpdesk.
logger: com.web.controller.DocumentController
message: 2020-05-14T13:12:47.753Z [taskExecutor-50] ui-prd-140-wttsz UI
ERROR c.o.d.d.w.c.DocumentController:-1 - Unable to retrieve the content for source Actor Raja.
com..exception.DocumentNotFoundException: Error occurred. Unable to retrieve document, please contact the helpdesk.
at com.web.controller.DocumentController$1$4.extractData(Unknown Source)
at org.springframework.web.client.RestTemplate.doExecute(RestTemplate.java:662)
at org.springframework.web.client.RestTemplate.execute(RestTemplate.java:635)
at com.web.controller.DocumentController$1.call(Unknown Source)
at com..web.controller.DocumentController$1.call(Unknown Source)
at org.springframework.web.context.request.async.WebAsyncManager$5.run(WebAsyncManager.java:327)
at co.elastic.apm.agent.impl.async.SpanInScopeRunnableWrapper.run(SpanInScopeRunnableWrapper.java:64)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)
Caused by: java.lang.NullPointerException: null

0 Karma

to4kawa
Ultra Champion

when ...
Are you going to make alert?

rex is no problem.

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...