Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About Nadhiyaa
Nadhiyaa
Path Finder
Member since:
06-18-2018
06-05-2020
Community Statistics
| Posts | 122 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 7 |
| Member Since | 06-18-2018 |
Activity Feed
- Got Karma for Nexpose integration with Splunk. 11-09-2021 09:44 AM
- Got Karma for DBconnect to SCCM database. 06-05-2020 12:50 AM
- Got Karma for Splunk supporting add-on for Active directory. 06-05-2020 12:49 AM
- Got Karma for Microsoft Office 365 Reporting Add-on for Splunk: Data got indexed only .I cant see the latest message traces . Not sure whats wrong with the add-on. 06-05-2020 12:49 AM
- Got Karma for Microsoft Office 365 Reporting Add-on for Splunk: Data got indexed only .I cant see the latest message traces . Not sure whats wrong with the add-on. 06-05-2020 12:49 AM
- Got Karma for How to avoid the data model error if the same data model is used in 2 different apps in the search head cluster?. 06-05-2020 12:49 AM
- Got Karma for where is TA cisco cdr app- To create dashboards for Cisco call manager. 06-05-2020 12:49 AM
- Posted Re: Json parsing - event breaks on Splunk Search. 09-18-2019 01:50 AM
- Posted Sending out email notifications for different users on Reporting. 09-03-2019 01:57 AM
- Tagged Sending out email notifications for different users on Reporting. 09-03-2019 01:57 AM
- Posted Re: Hover on an image inside the number viz customization panel on Dashboards & Visualizations. 09-02-2019 03:15 AM
- Posted Hover on an image inside the number viz customization panel on Dashboards & Visualizations. 09-02-2019 01:19 AM
- Posted How to remove the duplicate values from json events on Getting Data In. 09-01-2019 10:52 PM
- Posted Re: Json parsing - event breaks on Splunk Search. 08-29-2019 04:28 AM
- Posted Re: Json parsing - event breaks on Splunk Search. 08-29-2019 02:42 AM
- Posted Json parsing - event breaks on Splunk Search. 08-29-2019 01:18 AM
- Posted Need help in extracting json fields on Splunk Search. 07-11-2019 03:26 AM
- Tagged Need help in extracting json fields on Splunk Search. 07-11-2019 03:26 AM
- Posted Re: Change Refresh Progress bar to spinning wheel in Splunk dashboard on Dashboards & Visualizations. 07-07-2019 12:31 AM
- Posted Re: Change Refresh Progress bar to spinning wheel in Splunk dashboard on Dashboards & Visualizations. 07-06-2019 11:17 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
01-05-2019
11:17 PM
Hi ,
I have to create a heading as a row value .When i click in the "+" sign , it should display a set of rows .Basically expand and collapse .
Thanks if anyone could help.
... View more
- Tags:
- splunk-enterprise
12-12-2018
12:49 AM
I do have the same requirement . but the way is to use define the circleradius ,circleweight ,etc in the marker type .
... View more
11-06-2018
11:42 PM
I am totally new to this add-on .I configured the aws.yaml file in the local folder of the app.
Still i dont see any logs or csv files .
... View more
11-05-2018
12:33 AM
I configured the AWS Billing App in Splunk .After the configuration , i am not getting the logs in aws-bill .
do i need to run the scripts in the app's bin folder .
... View more
- Tags:
- splunk-enterprise
10-26-2018
02:05 AM
How to show the active menu in the dashboard
... View more
- Tags:
- splunk-enterprise
10-18-2018
01:09 AM
Yes it takes the default database to be "master" But you can edit the jdbc url to specify your database name.
databaseName=XXX;
Also authenticate with MS-SQL Server Using MS Generic Driver and possible create a Splunk user to access those tables . You Can check with your DB guy to do that.
... View more
10-18-2018
12:03 AM
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-Azure-billing/bin/azure_billing.py" HTTP Request error: 401 Client Error: Unauthorized for url: https://management.azure.com/subscriptions/8d493b12-bb81-4d07-9a5a-c0426dec81b3/providers/Microsoft.Consumption/usageDetails?$orderby=properties/usageEnd$expand=meterDetails,additionalProperties&$filter=properties/usageEnd+ge+'2017-01-01'+AND%20properties/usageEnd+le+'2017-01-06'&api-version=2018-03-31
how to fix the above error . When i am trying fetch data using the Microsoft Azure Billing Add-on for Splunk .
I have provided all the configuration settings in the add-on.
... View more
- Tags:
- splunk-enterprise
10-14-2018
01:06 AM
i need to display a message when the map doesnot have the coordinates in the leaflet map.
... View more
- Tags:
- splunk-enterprise
10-14-2018
12:12 AM
I am able to connect to the SCCM database after creating a new user for Splunk giving permissions.
... View more
10-08-2018
12:14 AM
KrbException: Cannot locate default realm
I am getting this above error
... View more
10-07-2018
05:18 AM
1 Karma
Trying to connect to MSSQL for the SCCMdatabase. I'm trying to use a domain account, and Windows Authentication. If I try the MS_SQL Server Using MS Generic Driver with Windows Authentication, point it to the database I want to connect to, I get the following when trying to validate:
"This driver is not configured for integrated authentication." If I try MS-SQL Server Using MS Generic Driver, I get: "Login failed for user". If I try the jTDS drivers, I get connection timed out.
Can anyone help me figure this out? I'm trying to get the SCCM app working, just to see what it gives us, and I can't even get DBConnect to work.
... View more
- Tags:
- splunk-enterprise
10-01-2018
05:32 AM
How do I fix this "Error rendering (Legacy) Clustered Single Value Map Visualization visualization"?
i am getting the above error sometimes and facing slow loading...
... View more
- Tags:
- splunk-enterprise
09-26-2018
02:17 AM
yes telnet is working fine.
... View more
09-24-2018
03:38 AM
How do I rename the value "other(n)" to "OTHERS" in a pie chart after the stats command?
... View more
09-23-2018
10:02 PM
1 Karma
Level=ERROR, Pid=15184, File=search_command.py, Line=373, Abnormal exit: # host: aa.bbb.cc.ddd: Could not access the directory service at ldap://aa.bbb.cc.ddd:389: socket connection error: [Errno 110] Connection timed out
I am getting the above error when i am trying to connect to the AD using the add-on.
... View more
09-18-2018
12:44 AM
No . My purpose is to create Webex usage report .
... View more
09-17-2018
11:37 PM
Hi All,
I have to create a dashboard in which i need to show a Webex usage report. Is there any add-on for this to integrate with Splunk?
Thanks.
... View more
09-15-2018
11:49 PM
/how to customise the pie chart font size labels
Please post the working snippet
... View more
- Tags:
- splunk-enterprise
09-09-2018
01:51 AM
when we do eval , it works .
when i do directly after the stats command ,it is not
... View more
09-08-2018
11:25 PM
XXXXXX y XXXXXX y
So this is my value of a field z . How to replace this with XXXXXX y.
Below is not working
rex mode=sed field=z "s/XXXXXX y XXXXXX y/XXXXXX y/g"
... View more
- Tags:
- splunk-enterprise
08-29-2018
02:53 AM
@niketnilay How to avoid dummy data and fields .however i defined KV_MODE=json in the props.conf.Does this avoid dummy data
... View more
08-29-2018
01:01 AM
Yes it worked .
Now i am trying add a trend in a single value format.
... View more
08-29-2018
12:24 AM
Hi @niketnilay
I validated the json and provided kvmode as json.
got the ouput below using
|spath output=time path=results{}.series{}.values{}{0}|spath output=last path=results{}.series{}.values{}{1}
|eval time=strptime(time,"%Y-%m-%dT%H:%M:%SZ")|search count1!=null|table
Its coming as multivalue fields i want to have one to one in the separate rows.
... View more
08-29-2018
12:03 AM
This is the output of my JSON data. I would want to see it in separate rows and not in a single row.
When I do mvexpand for each time it's taking all the count1 values.
My output should be separate rows with time and count1 value.
... View more
08-28-2018
11:01 PM
{
"results": [
{
"statement_id": 0,
"series": [
{
"name": "sqlserver_server_properties",
"columns": [
"time",
"last"
],
"values": [
[
"2018-08-07T00:00:00Z",
144
]}
This is my json data . I extracted the time and last using index=..|spath output=time path=results{}.series{}.values{}{0}|spath output=count1 path=results{}.series{}.values{}{1}
I want to expand the values as separate events.
Help would be appreciated.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
Karma from
