Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About logloganathan
logloganathan
Motivator
Member since:
03-02-2018
09-18-2020
Community Statistics
| Posts | 290 |
| Solutions | 9 |
| Karma Given | 74 |
| Karma Received | 29 |
| Member Since | 03-02-2018 |
Activity Feed
- Got Karma for Re: How to use NOT in Transaction command. 03-29-2023 08:44 AM
- Got Karma for What is the difference between alert and report?. 05-26-2021 02:27 PM
- Posted Re: Okta Splunk Add-on rate limit warnings on Getting Data In. 09-18-2020 06:32 AM
- Karma Re: How do you create a query to get a report of an alert configured in a search head? for kamlesh_vaghela. 06-05-2020 12:50 AM
- Karma Re: How to use NOT in Transaction command for FrankVl. 06-05-2020 12:50 AM
- Got Karma for Re: mail when no result comes. 06-05-2020 12:50 AM
- Karma Re: Alert triggering in Splunk due to slowness for abhijit_mhatre. 06-05-2020 12:49 AM
- Karma Re: why splunk community people not voting and not accepting answer to appreciate for Moreilly97. 06-05-2020 12:49 AM
- Karma Re: why splunk community people not voting and not accepting answer to appreciate for gjanders. 06-05-2020 12:49 AM
- Karma Re: why splunk community people not voting and not accepting answer to appreciate for tiagofbmm. 06-05-2020 12:49 AM
- Karma Re: why splunk community people not voting and not accepting answer to appreciate for ddrillic. 06-05-2020 12:49 AM
- Karma Re: why splunk community people not voting and not accepting answer to appreciate for skoelpin. 06-05-2020 12:49 AM
- Karma Re: Alert triggering in Splunk due to slowness for elliotproebstel. 06-05-2020 12:49 AM
- Karma Re: Alert triggering in Splunk due to slowness for elliotproebstel. 06-05-2020 12:49 AM
- Karma Re: Alert triggering in Splunk due to slowness for elliotproebstel. 06-05-2020 12:49 AM
- Karma Re: Alert triggering in Splunk due to slowness for p_gurav. 06-05-2020 12:49 AM
- Karma Re: why splunk community people not voting and not accepting answer to appreciate for niketn. 06-05-2020 12:49 AM
- Karma Re: Alert triggering in Splunk due to slowness for tiagofbmm. 06-05-2020 12:49 AM
- Karma Re: my karma point not updated for skoelpin. 06-05-2020 12:49 AM
- Karma Re: how to make raw data in visual format? for kmaron. 06-05-2020 12:49 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
10-18-2018
01:55 AM
i have query which will run every week, i want to save the output in the csv format inside splunk and want to query the output to get the data. is it possible?
... View more
- Tags:
- splunk-enterprise
06-12-2018
04:15 AM
we are not able to understand whether you posted the error or not.
Could you please elloborate
... View more
06-12-2018
04:01 AM
you cant check live logs in splunk..it always take some time that what i mean
... View more
06-12-2018
02:28 AM
Please read this answer. it must help you
https://answers.splunk.com/answers/105246/dns-resolution-in-a-search.html
... View more
06-12-2018
02:23 AM
wow really very nice answer @niketnilay...
... View more
06-12-2018
02:21 AM
Could you please provide the log and output sample you need for our better understanding
Also please try this query. i dont know whether its your requirement
host=test, index=prod | timechart count(R) as ThreadCount, max(response_time) as ResponseTime by host_type
| appendcols [ search host=test, index=prod | timechart count(R) as ThreadCount,max(ThreadCount) as MaxThreadCount by host_type ] | table ThreadCount ResponseTime MaxThreadCount
... View more
06-12-2018
02:05 AM
it will be available in the local path $SPLUNK_HOME/etc/..../local
because its fully user-specific
... View more
06-12-2018
01:58 AM
we are not able to understand clearly.
Please provide the output format for better understanding
... View more
06-12-2018
01:54 AM
look like you are making thing very difficult.
Please use the below query. it will work
index="index" "message: end"
| timechart span=1h count as complete
| appendcols [ search index="index" "message: end" "status: failed"
| timechart span=1h count as failed ]
| eval percentage=failed*100/complete as "Failed %"
Please let me know if any issues
... View more
06-11-2018
07:44 AM
Could you please try this query
index="testdb" sourcetype="audt" | sort Duration | table Command, Duration | search Duration>=60
because we have to sort and then table it
... View more
06-11-2018
03:44 AM
Hi,
Please refer the answer. it must help you
https://answers.splunk.com/answers/320021/how-do-i-set-timezone-properly-in-propsconf.html
Thanks
Loganathan C
... View more
06-11-2018
03:39 AM
Any update from any one?
... View more
06-08-2018
07:12 AM
did you get the result of ping command using the app?
... View more
06-08-2018
07:03 AM
were you using search query in splunk?
or
were you connecting splunk using the service account?
... View more
06-08-2018
06:57 AM
Please click the setting at the right side top then click searches,report and alert
then enter the alert name in the filter and search
get the alert, here you can get query,time when it trigger etc
there is option "view recent search" just click it
here you can export the result
... View more
06-08-2018
06:36 AM
As Ansif told, please download https://splunkbase.splunk.com/app/507/
To install apps and add-ons directly into Splunk Enterprise
Put the downloaded file in the $SPLUNK_HOME/etc/apps directory.
Untar and ungzip your app or add-on, using a tool like tar -xvf (on *nix) or WinZip (on Windows).
Restart Splunk.
then ping the IP and include the result to dashboard
... View more
06-08-2018
06:26 AM
sometimes i take time to sync but it will show.
... View more
06-08-2018
06:22 AM
could anyone please help in this issue?
... View more
06-08-2018
06:18 AM
i have written splunk query
index=aaa sourcetype=xyz | stats count by xxx
i want to mail only if count greater than 0 to xyz@xyz.com and if count greater than 10 then mail to abcd@xyz.com
Could you please help
... View more
05-30-2018
08:27 AM
here what step i need to follow?
... View more
05-28-2018
06:42 AM
we are using rest API link to get the log information into the splunk
... View more
05-28-2018
05:59 AM
Could anyone please help me in this issue
... View more
05-25-2018
10:45 PM
Please refer the answer. it will help you
https://answers.splunk.com/answers/54674/how-to-increase-the-maximum-number-of-concurrent-historical-searches.html
... View more
05-25-2018
10:40 PM
Please try this query if this work then we work on your target step by step
C:\Windows\System32\windows.exe" sourcetype=windows
[search sourcetype=scanner
| dedup FQDN
| rename FQDN as ComputerName
| table ComputerName]
|table Process ComputerName
|join type=outer ComputerName
[search sourcetype=scanner
"ComputerName"
|convert ctime(_time) as time
|stats earliest(time) as et latest(time) as lt by ComputerName]
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-18-2020
09:59 AM
|
Karma given to
| User | Karma Count |
|---|---|
| 1 | |
| 2 | |
| 2 | |
| 5 | |
| 1 |
