Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Splunk Answers
- :
- About ashajambagi
ashajambagi
Communicator
Member since:
01-10-2019
2 weeks ago
Community Statistics
| Posts | 69 |
| Solutions | 7 |
| Karma Given | 10 |
| Karma Received | 13 |
| Member Since | 01-10-2019 |
Activity Feed
- Got Karma for Re: How do you completely remove Saturdays and Sundays from displaying on a timechart?. 12-03-2020 07:09 PM
- Got Karma for Re: Splunk DB Connect - Error after enabling "Upsert". 10-26-2020 07:31 PM
- Got Karma for Re: Splunk DB Connect - Error after enabling "Upsert". 10-26-2020 07:31 PM
- Got Karma for Re: Splunk DB Connect - Error after enabling "Upsert". 10-26-2020 07:31 PM
- Posted Re: Splunk rest api - get a list of UF agent status on Getting Data In. 10-08-2020 09:30 PM
- Posted Re: XML epoch time to time on Splunk Search. 10-08-2020 09:15 PM
- Posted Re: XML epoch time to time on Splunk Search. 10-08-2020 11:49 AM
- Posted Re: Return 0 when there is no data. on Splunk Search. 10-08-2020 10:38 AM
- Posted Re: Join command not working on Splunk Search. 10-08-2020 10:26 AM
- Got Karma for Re: Sort and compare message_text - noob needs help. 10-08-2020 08:20 AM
- Got Karma for Re: Sort and compare message_text - noob needs help. 10-08-2020 06:23 AM
- Posted Re: Sort and compare message_text - noob needs help on Dashboards & Visualizations. 10-08-2020 06:17 AM
- Posted Re: How to I save my search query output as a lookup ? on Splunk Enterprise. 10-08-2020 04:28 AM
- Posted Memory Usage by streamfwd.exe on Getting Data In. 10-06-2020 03:56 AM
- Tagged Memory Usage by streamfwd.exe on Getting Data In. 10-06-2020 03:56 AM
- Posted Re: query error tstat on Splunk Search. 09-29-2020 11:06 AM
- Got Karma for Re: Google Import/Export app configuration. 09-28-2020 10:06 AM
- Got Karma for Re: How do you completely remove Saturdays and Sundays from displaying on a timechart?. 06-29-2020 12:30 AM
- Karma Re: Why can't I blacklist Windows Security EventCode 5152 in inputs.conf? for vinod94. 06-05-2020 12:50 AM
- Karma Re: Data is not coming in splunk from kafka server for MoniM. 06-05-2020 12:50 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
02-25-2019
05:25 AM
@preacher_15 Please refer the below link
https://answers.splunk.com/answers/716468/change-cell-color-based-on-range.html
... View more
02-25-2019
02:33 AM
Please refer to this splunk doc.
https://docs.splunk.com/Documentation/Splunk/6.5.2/Report/Schedulereports
... View more
02-23-2019
09:48 AM
Try running the query line by line,let me know when you are not able to see the results.
/or share a sample event
... View more
02-22-2019
04:06 AM
3 Karma
Try using this way ,if it helps
index="*"| eval date_wday=lower(strftime(_time,"%A"))|eval date_w=strftime(_time,"%d-%b-%y %a") |where NOT (date_wday = "sunday" OR date_wday = "saturday")|chart count by date_w
... View more
02-22-2019
02:12 AM
1 Karma
Summary indexing is mainly to speed up the searching by filtering the required data which will be fulfilled by using transforming command.
Schedule a report and enable summary indexing on it. You can perform further search on the si data.
... View more
02-21-2019
11:06 PM
Can the user see search results without using dedup command?
... View more
02-21-2019
09:08 PM
| savedsearch "FO_BatteryHealth_Status"
| table Status
| eval severity=case(Status="GOOD", 0, Status="BAD", 1, true(), 999)
| rangemap field=severity low=0-0 severe=1-1 default=guarded
Try this
... View more
02-21-2019
09:06 PM
Glad the suggestion helped resolve your error!
... View more
02-21-2019
01:22 AM
Try using this
| savedsearch "admin:XX:FO_BatteryHealth_Status"
| table Status
| eval severity=case(Status="GOOD", 0, Status="BAD", 1, true(), 999)
| rangemap field=severity low=0-0 severe=1-1 default=guarded
... View more
02-21-2019
12:50 AM
1 Karma
does using stats solve the problem?
index=paloalto-firewall host="firewall IP" rule="any any rule name" | stats count by client_ip src_zone dest_ip dest_zone dest_port rule src_interface dest_interface action
... View more
02-20-2019
02:17 AM
Try this:
| makeresults
| eval "timestamp"="2019.02.19-10:20:30","label"="xxx","size"="100"
| append
[ makeresults
| eval
"timestamp"="2019.02.19-10:20:30","label"="yyy","size"="250"]
| append
[ makeresults
| eval
"timestamp"="2019.02.19-10:20:30","label"="zzz","size"="300"]
| append
[ makeresults
| eval "timestamp"="2019.02.20-10:20:30","label"="xxx","size"="400"]
| append
[ makeresults
| eval "timestamp"="2019.02.20-10:20:30","label"="yyy","size"="500"]
| append
[ makeresults
| eval
"timestamp"="2019.02.20-10:20:30","label"="zzz","size"="900"]
| fields - _time timestamp
| stats first(size) as size_1 last(size) as size_2 range(size) as diff_size by label
... View more
02-19-2019
04:53 AM
Check the format for this : [monitor:/D:\mytest/splunk.csv]
[sourcetype] #have you mentioned test here instead of sourcetype?
INDEXED_EXTRACTIONS = CSV
FIELD_DELIMITER = ,
HEADER_FIELD_DELIMITER = ,
... View more
02-19-2019
04:47 AM
you can check by searching : index=_internal on ui
OR
$SPLUNK_HOME/var/log/splunk/splunkd.log on cli
... View more
02-19-2019
04:42 AM
You can use chart command :
(your search)|chart values(fgcd1) over _time
... View more
02-19-2019
03:11 AM
How long have you been using free license?
Check _internal for any other error.
... View more
02-19-2019
02:19 AM
@rajasekhar14 Where have you placed your props.conf? can you show the stanza in inputs.conf.
Refer this link - https://answers.splunk.com/answers/719666/data-not-getting-extracted-correctly-as-per-csv.html
... View more
02-19-2019
01:52 AM
@damucka Yes,both whitelist and blacklist can be used in same monitoring stanza
... View more
02-19-2019
01:26 AM
try using btool to verify the configuration files
... View more
- « Previous
-
- 1
- 2
- Next »
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
2 weeks ago
|
