...essionStart |rename Properties.osName as os Properties.platformData.OJ as osversion|where osversion!="null"|strcat os " " osversion oo|stats count by oo
the query "works" but it appears that strcat is d...
I have a search that is using the strcat command to string together text fields. My data looks something like this
Name Marbles Hopscotch Jacks Baseball Mary Marbles Jacks Baseball John H...
Hi all.
I'm trying Splunk Free (ver 6.3) and I am trying to search Cisco IOS ACL logs, but I don't get any results.
i) Search that does not work:
eventtype=cisco_ios-acl_log | strcat p...
I have a query regarding the use of the strcat functionality. The following search is used to generate and alarm condition.
index="ft" ftp | stats count(eval(status="failed")) as f...
...tring cat to create my fields the way I want with this format subrackNo "-" SlotNo "-" boardType
... | strcat subrackNo "-" SlotNo "-" boardType fields | timechart max(kpi) by fields
And this g...
I want to set dynamic SLA's for File Processing. In order to do this I need to: 1. get the earliest HH:MM:SS the job has processed in the last 30 days. 2. get the latest HH:MM:SS the job has ...
Hi,
I have an index with one field as a timestamp, "SESSION_TIME", and another field, "SEQUENCE". The "SEQUENCE" field is unique for each event and i am tasked to replace the seconds part of each t...
Hi,
I wonder whether someone may be able to help me please.
I'm trying to extract the "1234567/123" from the string below, but I'd like the final output to be "1234567123".
"/for/1234567/1...
Hello everyone, There is my search : my_severity=error my_app="name" earliest=-48h latest=-24h | stats count as nb_yesterday by my_method limit=0 | appendcols[search my_severity=err...