...uestion is:
How do those Splunk's commands work? What type of "technique" do they use to predict, associate or cluster? Is it statistics?
PREDICT = we can do it with algorithms like: ARIMA, Logistic r...
Hi,
I am looking to use predict command with multiple fields without typing all their names.
For example I know it can be used liked this:
Make results |Predict field1 field2 f...
Splunk's commandtypes page is missing a few functions, including accum. I would like to know if accum is a centralized streaming command, distributable streaming command, or none of the above. E...
Hello all,
I have been trying to use the spath command correctly to create a pie chart divided by type of errors received. When I create the search and click on the object, the field where the e...
Hi, I am trying to extract "Sync_State" from the below logs types: log1: Synchronization : In Sync log2: Synchronization : Out of Sync I created the rex command "(?ms)S...
...ecause if I remove that section, I can get the non-filtered results. I've played around with including other fields and even using other event types in the search command, always making sure to include a...
I am trying to extract the fields from the AIX command fcstat so I can grap SAN HBA statistics. The output of the command looks like this:
FIBRE CHANNEL STATISTICS REPORT: fcs0
Device Type: F...
I need to know when a particular facility isn't passing a message type(s). In Powershell it would be as easy as, foreach($facility in $facilities) find message_types...however, sense Splunk doesn't h...
Hi,
I have this query :
index="app" sourcetype="rxc" host="rxc-ip*" id=7 URL="/user/unauth" OR referer="https://quest.com/user/unauth*" earliest=-15m@m latest=now| dedup qid| eval "Error"=id+...
Hello,
I have several different source types and I need to create a report on them, most of them have events with all the fields I need, but one of them doesn't because the events are broken i...