Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About dhirendra761
dhirendra761
Contributor
Member since:
07-23-2018
03-05-2024
Community Statistics
| Posts | 184 |
| Solutions | 4 |
| Karma Given | 25 |
| Karma Received | 15 |
| Member Since | 07-23-2018 |
Activity Feed
- Posted Re: Indexed only Partial Contents of log file on Getting Data In. 03-05-2024 08:18 AM
- Posted Indexed only Partial Contents of log file on Getting Data In. 03-05-2024 07:51 AM
- Got Karma for Re: Can not communicate with task server, please check your settings.. 02-28-2024 09:09 AM
- Posted Re: How to set token value based on selection from multiselect input? on Splunk Search. 06-21-2023 06:37 AM
- Posted Re: set token value based on selection from multiselect input on Splunk Search. 06-15-2023 01:26 AM
- Posted Re: set token value based on selection from multiselect input on Splunk Search. 06-14-2023 10:54 AM
- Posted Re: set token value based on selection from multiselect input on Splunk Search. 06-14-2023 09:13 AM
- Posted How to set token value based on selection from multiselect input? on Splunk Search. 06-14-2023 08:39 AM
- Tagged How to set token value based on selection from multiselect input? on Splunk Search. 06-14-2023 08:39 AM
- Tagged How to get fields value which are not matched with other field value? on Splunk Search. 12-19-2022 05:23 PM
- Posted How to get fields value which are not matched with other field value? on Splunk Search. 12-19-2022 05:13 PM
- Posted Re: Field extraction from table values on Splunk Search. 12-02-2022 03:31 AM
- Posted Re: Field extraction from table values on Splunk Search. 12-02-2022 03:30 AM
- Karma Re: Field extraction from table values for yuanliu. 12-02-2022 02:59 AM
- Posted Re: Field extraction from table values on Splunk Search. 12-01-2022 09:49 PM
- Posted Help with field extraction from table values on Splunk Search. 12-01-2022 09:43 PM
- Posted Re: How to get same values from mutlivalue field on Knowledge Management. 10-04-2022 03:01 AM
- Karma Re: How to get same values from mutlivalue field for ITWhisperer. 10-04-2022 03:00 AM
- Posted Re: How to get same values from mutlivalue field on Knowledge Management. 09-30-2022 06:18 AM
- Posted Re: How to get same values from mutlivalue field on Knowledge Management. 09-30-2022 06:14 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
07-14-2020
03:13 AM
Hi, Sorry for my late answer. You can try with updating with "path" [script://./bin/ksplunkscriptedinput.py] It will work.
... View more
- Tags:
- You
02-17-2020
04:04 AM
1 Karma
Hi All,
I have gone though all the answers and done all required changes in config but nothing will happend.
Finally, I use below steps to reslove this issue.
Backup your files, if exist, ex: db_input.conf and drivers
Stop splunk. Remove db_connect app from app folder.
Restart Splunk.
Upgrade your splunk with just new version.
install > db connect app
check your db it will be okay now.
Happy Splunking !..
... View more
02-17-2020
04:03 AM
Hi All,
I have gone though all the answers and done all required changes in config but nothing will happend.
Finally, I use below steps to reslove this issue.
Backup your files, if exist, ex: db_input.conf and drivers
Stop splunk. Remove db_connect app from app folder.
Restart Splunk.
Upgrade your splunk with just new version.
install > db connect app
check your db it will be okay now.
Happy Splunking !..
... View more
02-17-2020
04:03 AM
Hi All,
I have gone though all the answers and done all required changes in config but nothing will happend.
Finally, I use below steps to reslove this issue.
Backup your files, if exist, ex: db_input.conf and drivers
Stop splunk. Remove db_connect app from app folder.
Restart Splunk.
Upgrade your splunk with just new version.
install > db connect app
check your db it will be okay now.
Happy Splunking !..
... View more
02-17-2020
04:03 AM
Hi All,
I have gone though all the answers and done all required changes in config but nothing will happend.
Finally, I use below steps to reslove this issue.
Backup your files, if exist, ex: db_input.conf and drivers
Stop splunk. Remove db_connect app from app folder.
Restart Splunk.
Upgrade your splunk with just new version.
install > db connect app
check your db it will be okay now.
Happy Splunking !..
... View more
01-22-2020
11:30 AM
hi @muriithikr Please go to details tab on app page :https://splunkbase.splunk.com/app/3777/#/details
and create indexes.conf and inputs.conf
and install the app properly first and make sure you are using linux
... View more
12-30-2019
03:53 AM
hi @yassy, app shared
... View more
12-17-2019
04:12 AM
1 Karma
Thanks @woodcock for answering.
Also I found below config to get the required data from cpu
Splunk_TA_windows/local/wmi.conf
[WMI:process]
index = windows
disabled = 0
interval = 30
wql = Select IDProcess,Name,PercentProcessorTime,TimeStamp_Sys100NS from Win32_PerfRawData_PerfProc_Process
I think it should be work.
... View more
12-16-2019
07:22 AM
Hello Sir,
@woodcock , @somesoni2 @MuS @martin_mueller @niketnilay @Ayn @lguinn2 ...
Could you please look into this. Thanks
... View more
12-16-2019
05:03 AM
Hi,
I want to monitor get, CPU usage **(in percentage) by java application** (installed in my machine).
Could you please suggest the input.conf and query(spl) as well.
Thanks in advance.
... View more
12-03-2019
11:32 PM
can you share your input.conf
... View more
12-02-2019
11:04 PM
Go-tourgh this link https://wiki.splunk.com/Where_do_I_configure_my_Splunk_settings%3F
... View more
11-06-2019
01:39 AM
@yassy shared...Sorry, I missed you message 🙂
... View more
11-05-2019
05:14 AM
Hi,
I don't understand the use of "Counters" in input.conf configuration while monitoring "Memory" of the system.
input.conf
[perfmon://Memory]
counters = Page Faults/sec; Available Bytes; Committed Bytes; Commit Limit; Write Copies/sec; Transition Faults/sec; Cache Faults/sec; Demand Zero Faults/sec; Pages/sec; Pages Input/sec; Page Reads/sec; Pages Output/sec; Pool Paged Bytes; Pool Nonpaged Bytes; Page Writes/sec; Pool Paged Allocs; Pool Nonpaged Allocs; Free System Page Table Entries; Cache Bytes; Cache Bytes Peak; Pool Paged Resident Bytes; System Code Total Bytes; System Code Resident Bytes; System Driver Total Bytes; System Driver Resident Bytes; System Cache Resident Bytes; % Committed Bytes In Use; Available KBytes; Available MBytes; Transition Pages RePurposed/sec; Free & Zero Page List Bytes; Modified Page List Bytes; Standby Cache Reserve Bytes; Standby Cache Normal Priority Bytes; Standby Cache Core Bytes; Long-Term Average Standby Cache Lifetime (s)
disabled = 0
interval = 10
mode = multikv
object = Memory
useEnglishOnly=true
My events are extracting as the attached screenshot. (why fields are extract same as counters with "_" )
So what will be SPL to find out "available memory" suing counters in input.conf?
Please describe the role and use of Counter please in search query.
Thanks in advance.
... View more
09-18-2019
10:19 PM
Hi, @adonio Thanks for the answer. Good News is that Now I am able to incorporate "website Monitoring app" in my native app without installing it in Splunk instances.
I am able to use same setting as WM app uses. Accepting your answer.
Thanks for your time and support.
Happy Splunking!!.. 🙂
... View more
09-18-2019
02:30 AM
Hi @adonio the problem of using this app is I need to integrate this external app in my app-package and I don't know how to do it.
We can not install this external app in splunk enterprise instance. I need to include it my app- package.
Thanks.
... View more
09-16-2019
09:28 PM
@adonio thanks for answer but actually I don't want to use this app, as Already said. Do we have another approach?
... View more
09-16-2019
06:04 AM
Hi Splunkers!.
Is it possible to get the http responce code from website in splunk query.
example:
I need to get 200 or 503 or 404 or 500(depends on the responce codes), if I hit url: https://12.129.252.322/XYYY/ZR/PHJET/ in browser.
It can be solved by "Website Monitoring App" or any other app, but I dont want to use.
Thanks in advance.
... View more
08-21-2019
06:08 AM
Hi All,
In my Splunk forwarder, we were monitoring data and forwarding in one splunk instance, Now I need to add one more receiver in forwarder. 1 forwarder 2 receivers.
I did as below but after config, I am not getting any indexed data, even first splunk instances stop received any data.
below is my config files for input.conf and out.conf for Splunk Forwarder:
input.conf
# first splunk instance
[WinHostMon://Service]
_TCP_ROUTING = default-autolb-group
type = service
interval = 300
disabled = 0
index = index_logs
# second splunk instance
[monitor://D:\SATS\SecureLog\*\Logs_Status\*]
_TCP_ROUTING = default-autolb-group2
disabled = 0
index = index-stats
sourcetype = index:stats:gl
crcSalt = <SOURCE>
output.conf
[tcpout]
defaultGroup = default-autolb-group, default-autolb-group2
[tcpout:default-autolb-group]
server = xxx.xx.xx.xxx:9997
[tcpout-server://xxx.xx.xx.xxx:9997]
[tcpout:default-autolb-group2]
server = yy.yy.yyy.yyy:9997
[tcpout-server://yy.yy.yyy.yyy:9997]
Please suggest. Thanks in advance.
-dhirendra
... View more
08-07-2019
05:28 AM
Hi All,
The final solution, I made to fix this issue, is UPGRADATION.
So I upgraded splunk instance V7.1.1 to v7.1.2 . and it works.
Thanks for the support and time. Happy Splunking!!
Dhirendra
... View more
08-07-2019
12:29 AM
Hi @woodcock , I am using splunk enterprise Version 7.1.1. It was working fine yesterday suddenly it stopped and thrown this error.
Splunkd.log has following errorS:
08-06-2019 16:12:47.846 +0200 WARN ConfPathMapper - Failed to open: C:\Program Files\Splunk\etc\apps\SA_AI_NR_X620_ams_secure_transport_sh\local\inputs.conf: Access is denied.
08-06-2019 16:13:00.970 +0200 INFO loader - win-service: Command pre-flight-checks ran successfully.
08-06-2019 16:13:01.103 +0200 ERROR loader - win-service: Error running check-xml-files (_pclose returned 1).
08-06-2019 16:13:01.103 +0200 ERROR loader - win-service: Here is the output from running check-xml-files:
08-06-2019 16:13:01.103 +0200 ERROR loader - Traceback (most recent call last):
08-06-2019 16:13:01.103 +0200 ERROR loader - File "C:\Program Files\Splunk\Python-2.7\Lib\site.py", line 62, in <module>
08-06-2019 16:13:01.103 +0200 ERROR loader - import os
08-06-2019 16:13:01.103 +0200 ERROR loader - File "C:\Program Files\Splunk\Python-2.7\Lib\os.py", line 400, in <module>
08-06-2019 16:13:01.103 +0200 ERROR loader - import UserDict
08-06-2019 16:13:01.103 +0200 ERROR loader - File "C:\Program Files\Splunk\Python-2.7\Lib\UserDict.py", line 116, in <module>
08-06-2019 16:13:01.103 +0200 ERROR loader - import _abcoll
08-06-2019 16:13:01.103 +0200 ERROR loader - File "C:\Program Files\Splunk\Python-2.7\Lib\_abcoll.py", line 11, in <module>
08-06-2019 16:13:01.103 +0200 ERROR loader - from abc import ABCMeta, abstractmethod
08-06-2019 16:13:01.103 +0200 ERROR loader - File "C:\Program Files\Splunk\Python-2.7\Lib\abc.py", line 8, in <module>
08-06-2019 16:13:01.103 +0200 ERROR loader - from _weakrefset import WeakSet
08-06-2019 16:13:01.103 +0200 ERROR loader - ImportError: cannot import name WeakSet
08-06-2019 16:13:01.103 +0200 ERROR loader - <<<<< EOF (check-xml-files)
... View more
08-06-2019
11:14 AM
@martin_mueller @somesoni2 @woodcock @MuS @niketnilay
Please help me
... View more
08-06-2019
07:46 AM
Hi All,
I am getting below-attached error while doing "Splunk restart" from cmd. Could you please help/suggest me the solution into this. Already tried the solution given in ref: https://answers.splunk.com/answers/542113/splunk-will-not-start-importerror-cannot-import-na.html, but no luck.
Thanks in advance.
Error in text:
Splunk> See your world. Maybe wish you hadn't.
Checking prerequisites...
Checking http port [8000]: open
Checking mgmt port [8089]: open
Checking appserver port [127.0.0.1:8065]: open
Checking kvstore port [8191]: open
Traceback (most recent call last):
File "C:\Program Files\Splunk\Python-2.7\Lib\site.py", line 62, in <module>
import os
File "C:\Program Files\Splunk\Python-2.7\Lib\os.py", line 400, in <module>
import UserDict
File "C:\Program Files\Splunk\Python-2.7\Lib\UserDict.py", line 116, in <modul
e>
import _abcoll
File "C:\Program Files\Splunk\Python-2.7\Lib\_abcoll.py", line 11, in <module>
from abc import ABCMeta, abstractmethod
File "C:\Program Files\Splunk\Python-2.7\Lib\abc.py", line 8, in <module>
from _weakrefset import WeakSet
ImportError: cannot import name WeakSet
... View more
Labels
- Labels:
-
python
08-01-2019
06:58 AM
Shared....
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-05-2024
11:40 AM
|
Karma from
