I am trying to optimize the query speed of the db connect app . I have read the following post, it tell me I can use | noop search_optimization=false , but splunk return an error when I using....
I just discovered the interesting noop command and have been playing around with it. I cannot find it mentioned ANYWHERE! I was hoping that it would take a single string parameter so that it w...
...o the right URL, I get a search screen with the search of noop (no OP) I guess.
How do I fix #1 and what can I do about #2 since it is not showing the report that it should?
Thanks
Chris
In a query that culminates in a curl command on a resuult, when the result set if empty, it's not possible to prevent the curl command from trying to execute. A workaround I am using is to set the u...
...loating point number, and Splunk can't do correct comparison:
| NOOP | stats count|eval var1=2.1|eval var2=2.0|search var1 > var2
==> No results found. Try expanding the time range.
| NOOP...
Each log entry contains some json. There is a field that is an array. I want to count the items in that array.
Example json data
{
"field1": "sample",
"messages": [
"noop...
This seems to be a very simple requirement, but I'm unable to find a solution: I built a dashboard where the user enters an ip address which will then be used in a search like:
dest=$ip$
Now...
Hi Splunkers,
Why the relative_time function is not converting +24y? any reason? Any way to achieve this?
|stats count | eval next_time=relative_time(now(),"+24y")
Is there any limitatio...
Hi guys i have a gauge chart which normally will display values. however i encounter issues when there is no value, how should i resolve it? i try with "noop" it seem like no working. Mind to s...
I have a log file with suppose keyword "Completed".
Now first thing I want to do in the search is , search for this keyword ("Completed") in the log file.
If the keyword is present , then it is...