Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About AKG1_old1
AKG1_old1
Builder
Member since:
09-02-2016
09-04-2022
Community Statistics
| Posts | 287 |
| Solutions | 10 |
| Karma Given | 101 |
| Karma Received | 55 |
| Member Since | 09-02-2016 |
Activity Feed
- Posted How to Configure Netapp Ontap Add-on for data collection on All Apps and Add-ons. 07-18-2022 05:44 AM
- Got Karma for Re: where does splunk store the logs which specify starting/stoping the splunk ?. 03-29-2022 07:48 PM
- Posted Executing python script as an alert action on windows on Getting Data In. 11-11-2021 03:32 AM
- Tagged Executing python script as an alert action on windows on Getting Data In. 11-11-2021 03:32 AM
- Posted Re: Updated: Help in event break for json file on Getting Data In. 10-06-2021 08:40 AM
- Posted Re: Help in event break for json file on Getting Data In. 10-06-2021 01:29 AM
- Posted Updated: Help in event break for json file on Getting Data In. 10-05-2021 04:49 AM
- Posted Getting data in Splunk through REST API in case of two step connection on Splunk Enterprise. 09-27-2021 08:43 AM
- Tagged Getting data in Splunk through REST API in case of two step connection on Splunk Enterprise. 09-27-2021 08:43 AM
- Tagged Getting data in Splunk through REST API in case of two step connection on Splunk Enterprise. 09-27-2021 08:43 AM
- Posted Re: How to configure request payload in a POST HTTP Method with REST API Modular Input? on All Apps and Add-ons. 09-24-2021 12:11 PM
- Posted Re: REST API Modular Input Help on Splunk Enterprise. 09-24-2021 06:05 AM
- Posted REST API Modular Input Help on Splunk Enterprise. 09-24-2021 03:15 AM
- Got Karma for Re: where does splunk store the logs which specify starting/stoping the splunk ?. 08-25-2021 10:05 PM
- Posted Re: Admin account to view all the Dashboard created by individual users on Security. 06-10-2021 12:57 PM
- Karma Re: Admin account to view all the Dashboard created by individual users for rupkumar4sec. 06-10-2021 12:57 PM
- Karma Re: Admin account to view all the Dashboard created by individual users for isoutamo. 06-10-2021 12:57 PM
- Posted Re: Admin account to view all the Dashboard created by individual users on Security. 06-10-2021 12:35 PM
- Posted Re: Admin account to view all the Dashboard created by individual users on Security. 06-10-2021 10:16 AM
- Karma Re: Admin account to view all the Dashboard created by individual users for isoutamo. 06-10-2021 10:16 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
01-08-2020
04:30 AM
Hello,
we are currently on 7.2.6 and planning to upgrade with 8.0.1.
When I upgraded in test environment, After starting splunk(it took longer to start). but real issue is I am not be able to access Splunk via web.
I read somewhere that Splunk web doesn't support python 2.7 so I just changed it to 3.7.
splunk/etc/system/local/server.conf
python.version = python3
Not sure if anything else I am missing here.
Thanks
Errors in splunkd.log
... View more
12-13-2019
05:59 AM
@kamlesh_vaghela : Thank you, worked like a charm and plus learned new commands 🙂
... View more
12-13-2019
04:17 AM
Hello,
we have complex Json having mutli level with multivalue fields.
In below example
topologyMetrics has 4 subnode and also each subnode have 3 subnode itself(boltMetrics).
I am trying to get table with two fields "name.boldID" and "emitted" and it should display 12 lines for 1 event. when I am trying to mxexpand its showing only 4 lines as name field has 4 entries.
| spath "mtr.gauges.streaming_metrics.topologyMetrics{}.name"
| rename mtr.gauges.streaming_metrics.topologyMetrics{}.name as name
| spath "mtr.gauges.streaming_metrics.topologyMetrics{}.id"
| rename mtr.gauges.streaming_metrics.topologyMetrics{}.id as id
| spath "mtr.gauges.streaming_metrics.topologyMetrics{}.boltMetrics{}.boltID"
| rename mtr.gauges.streaming_metrics.topologyMetrics{}.boltMetrics{}.boltID as boltID
| spath "mtr.gauges.streaming_metrics.topologyMetrics{}.boltMetrics{}.emitted"
| rename mtr.gauges.streaming_metrics.topologyMetrics{}.boltMetrics{}.emitted as emitted
| table name id boltID emitted
| eval x=mvzip(boltID,name)
| mvexpand x
raw
{"v":"1.0","t":"MTR","ts":"2019-12-13T10:30:34.433+01:00","h":"mx20631vm.fr.murex.com","pid":659387,"src":{"c":"positions-management-v1","d":"positions","sd":""},"mtr":{"counters":{"process":{"cpu":{"time_cumulated_s":1458},"memory":{"gc":{"g1_old_generation":{"total_duration_ms":0},"g1_young_generation":{"total_duration_ms":6760}}}}},"gauges":{"caching_metrics":{"readsPerSecond":0.0,"writesPerSecond":0.0,"maxMemoryMB":12288,"totalHitCount":2620435,"totalMissCount":40668,"totalRegionCount":17,"totalRegionEntryCount":10932,"usedMemoryMB":3041,"clientCount":7,"locatorCount":2,"memberCount":5,"regions":[{"regionName":"CollateralBalance_INTERNAL-heartbeat","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":2,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"CollateralBalance_INTERNAL-positions-data","regionType":"PARTITION","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":4536,"entrySizeMB":1,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"CollateralBalance_INTERNAL-state","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":2,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"CollateralInterest_INTERNAL-heartbeat","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":2,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"CollateralInterest_INTERNAL-positions-data","regionType":"PARTITION","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":2221,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"CollateralInterest_INTERNAL-state","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":2,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"CollateralTriparty_INTERNAL-heartbeat","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":2,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"CollateralTriparty_INTERNAL-positions-data","regionType":"PARTITION","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":594,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"CollateralTriparty_INTERNAL-state","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":2,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"Collateralbreakdown_INTERNAL-heartbeat","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":2,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"Collateralbreakdown_INTERNAL-positions-data","regionType":"PARTITION","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":3541,"entrySizeMB":1,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"Collateralbreakdown_INTERNAL-state","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":2,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"position-views","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":4,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"position-views-deployment-metrics","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":4,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"position-views-deployment-queue","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":0,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"topology-lowest-pending-id","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":8,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"regionName":"topology-spout-status","regionType":"REPLICATE","readsPerSecond":0.0,"writesPerSecond":0.0,"entryCount":8,"entrySizeMB":0,"getsPerSecond":0.0,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0}],"nodes":[{"readsPerSecond":0.0,"writesPerSecond":0.0,"maxMemoryMB":2048,"totalHitCount":0,"totalMissCount":0,"totalRegionCount":0,"totalRegionEntryCount":0,"usedMemoryMB":278,"nodeName":"positions-gf-locator-v1-2","bytesReceivedPerSecond":0.0,"bytesSentPerSecond":0.0,"cpuUsage":0.23333333,"getsPerSecond":0.0,"gcCount":41,"gcTimeMilliseconds":640,"locator":true,"server":false,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"readsPerSecond":0.0,"writesPerSecond":0.0,"maxMemoryMB":2048,"totalHitCount":0,"totalMissCount":0,"totalRegionCount":0,"totalRegionEntryCount":0,"usedMemoryMB":1155,"nodeName":"positions-gf-locator-v1-1","bytesReceivedPerSecond":0.0,"bytesSentPerSecond":0.0,"cpuUsage":0.43332613,"getsPerSecond":0.0,"gcCount":40,"gcTimeMilliseconds":961,"locator":true,"server":false,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"readsPerSecond":0.0,"writesPerSecond":0.0,"maxMemoryMB":2048,"totalHitCount":1104067,"totalMissCount":13854,"totalRegionCount":17,"totalRegionEntryCount":7402,"usedMemoryMB":117,"nodeName":"positions-gf-cacheserver-v1-3","bytesReceivedPerSecond":0.0,"bytesSentPerSecond":0.0,"cpuUsage":0.98333335,"getsPerSecond":0.0,"gcCount":76,"gcTimeMilliseconds":724,"locator":false,"server":true,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"readsPerSecond":0.0,"writesPerSecond":0.0,"maxMemoryMB":2048,"totalHitCount":534237,"totalMissCount":13588,"totalRegionCount":17,"totalRegionEntryCount":7327,"usedMemoryMB":1130,"nodeName":"positions-gf-cacheserver-v1-1","bytesReceivedPerSecond":0.0,"bytesSentPerSecond":0.0,"cpuUsage":0.88331866,"getsPerSecond":0.0,"gcCount":63,"gcTimeMilliseconds":855,"locator":false,"server":true,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0},{"readsPerSecond":0.0,"writesPerSecond":0.0,"maxMemoryMB":2048,"totalHitCount":982131,"totalMissCount":13226,"totalRegionCount":17,"totalRegionEntryCount":7223,"usedMemoryMB":285,"nodeName":"positions-gf-cacheserver-v1-2","bytesReceivedPerSecond":0.0,"bytesSentPerSecond":0.0,"cpuUsage":1.0499825,"getsPerSecond":0.0,"gcCount":76,"gcTimeMilliseconds":828,"locator":false,"server":true,"lruEvictionsPerSecond":0.0,"putsPerSecond":0.0}]},"process":{"cpu":{"percentage":0.05882517717583126},"files":{"open_files":158},"memory":{"jvm":{"heap":{"committed_kb":262144,"used_kb":195138},"nonheap":{"committed_kb":165360,"used_kb":159958}},"vsz_kb":2448464}},"streaming_metrics":{"supervisors":2,"slotsTotal":8,"slotsUsed":4,"slotsFree":4,"executorsTotal":28,"tasksTotal":28,"totalMemoryMB":6144.0,"totalCPU":800.0,"availableMemoryMB":2816.0,"availableCPU":800.0,"memoryAssignedPercentUtilization":54.2,"cpuAssignedPercentUtilization":0.0,"nimbusMetrics":[{"host":"mx20636vm.fr.murex.com","port":10011,"status":"Not a Leader","nimbusUpTimeSeconds":177235},{"host":"mx20634vm.fr.murex.com","port":10011,"status":"Leader","nimbusUpTimeSeconds":177238}],"supervisorMetrics":{"Supervisor_1":{"host":"mx20634vm.fr.murex.com","id":"2622c0a4-1d51-409d-a077-b2cfbe78bda4","uptimeSeconds":177234,"slotsTotal":4,"slotsUsed":2,"totalMemoryMB":3072.0,"totalCPU":400.0,"usedMemoryMB":1664.0,"usedCPU":0.0},"Supervisor_4":{"host":"mx20636vm.fr.murex.com","id":"85fa61bc-c546-4cec-8c58-cae0b4ddc532","uptimeSeconds":177234,"slotsTotal":4,"slotsUsed":2,"totalMemoryMB":3072.0,"totalCPU":400.0,"usedMemoryMB":1664.0,"usedCPU":0.0}},"topologyMetrics":[{"id":"CollateralInterest_INTERNAL-5-1576061147","name":"CollateralInterest_INTERNAL","status":"ACTIVE","uptime":"1d 22h 44m 47s","uptimeSeconds":168287,"tasksTotal":7,"workersTotal":1,"executorsTotal":7,"replicationCount":2,"requestedMemoryOnHeapMB":0.0,"requestedMemoryOffHeapMB":0.0,"requestedTotalMemoryMB":0.0,"requestedCPUPercent":0.0,"assignedMemoryOnHeapMB":832.0,"assignedMemoryOffHeapMB":0.0,"assignedTotalMemoryMB":832.0,"assignedCPUPercent":0.0,"spoutMetrics":[{"executors":1,"emitted":2120,"transferred":2120,"acked":1840,"tasks":1,"lastError":"java.lang.RuntimeException: java.sql.SQLException: com.sybase.jdbc4.jdbc.SybSQLException: Database 'TheOne_MX_CI_525' has not been recovered yet - please wait and try again.\n\n\tat com.murex.position.qu","errorLapsedSecs":64915,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"contribution-event-spout","completeLatency":"31.837"},{"executors":1,"emitted":0,"transferred":0,"acked":0,"tasks":1,"lastError":"java.lang.RuntimeException: java.sql.SQLException: com.sybase.jdbc4.jdbc.SybSQLException: Database 'TheOne_MX_CI_525' has not been recovered yet - please wait and try again.\n\n\tat com.murex.position.qu","errorLapsedSecs":64915,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"balancereset-event-spout","completeLatency":"0.000"},{"executors":1,"emitted":0,"transferred":0,"acked":0,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"data-loss-spout","completeLatency":"0.000"}],"boltMetrics":[{"executors":1,"emitted":0,"transferred":0,"acked":0,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"balancereset-filter","executeLatency":"0.000","executed":0,"processLatency":"0.000","capacity":"0.000"},{"executors":1,"emitted":1500,"transferred":1500,"acked":1840,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"contribution-filter","executeLatency":"0.348","executed":1840,"processLatency":"0.152","capacity":"0.000"},{"executors":1,"emitted":0,"transferred":0,"acked":1600,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"aggregator","executeLatency":"1.350","executed":1600,"processLatency":"1.425","capacity":"0.000"}],"workerMetrics":[{"topologyName":"CollateralInterest_INTERNAL","topologyID":"CollateralInterest_INTERNAL-5-1576061147","host":"mx20634vm.fr.murex.com","port":10012,"uptimeSeconds":64898,"executorsTotal":7,"assignedCPUPercent":0.0,"assignedMemoryOnHeapMB":832.0,"assignedMemoryOffHeapMB":0.0,"supervisorId":"2622c0a4-1d51-409d-a077-b2cfbe78bda4","componentTasks":[{"componentName":"contribution-event-spout","numberOfTasks":1},{"componentName":"balancereset-event-spout","numberOfTasks":1},{"componentName":"data-loss-spout","numberOfTasks":1},{"componentName":"aggregator","numberOfTasks":1},{"componentName":"balancereset-filter","numberOfTasks":1},{"componentName":"contribution-filter","numberOfTasks":1}]}],"topologyStats":[{"window":"10m 0s","emitted":0,"transferred":0,"completeLatency":"0","acked":0,"failed":null},{"window":"3h 0m 0s","emitted":0,"transferred":0,"completeLatency":"0","acked":0,"failed":null},{"window":"1d 0h 0m 0s","emitted":3620,"transferred":3620,"completeLatency":"31.837","acked":1840,"failed":null},{"window":"All time","emitted":3620,"transferred":3620,"completeLatency":"31.837","acked":1840,"failed":null}]},{"id":"Collateralbreakdown_INTERNAL-7-1576061152","name":"Collateralbreakdown_INTERNAL","status":"ACTIVE","uptime":"1d 22h 44m 42s","uptimeSeconds":168282,"tasksTotal":7,"workersTotal":1,"executorsTotal":7,"replicationCount":2,"requestedMemoryOnHeapMB":0.0,"requestedMemoryOffHeapMB":0.0,"requestedTotalMemoryMB":0.0,"requestedCPUPercent":0.0,"assignedMemoryOnHeapMB":832.0,"assignedMemoryOffHeapMB":0.0,"assignedTotalMemoryMB":832.0,"assignedCPUPercent":0.0,"spoutMetrics":[{"executors":1,"emitted":1740,"transferred":1740,"acked":1820,"tasks":1,"lastError":"java.lang.RuntimeException: java.sql.SQLException: com.sybase.jdbc4.jdbc.SybSQLException: Database 'TheOne_MX_CI_525' has not been recovered yet - please wait and try again.\n\n\tat com.murex.position.qu","errorLapsedSecs":64916,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"contribution-event-spout","completeLatency":"30.407"},{"executors":1,"emitted":0,"transferred":0,"acked":0,"tasks":1,"lastError":"java.lang.RuntimeException: java.sql.SQLException: com.sybase.jdbc4.jdbc.SybSQLException: Database 'TheOne_MX_CI_525' has not been recovered yet - please wait and try again.\n\n\tat com.murex.position.qu","errorLapsedSecs":64916,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"balancereset-event-spout","completeLatency":"0.000"},{"executors":1,"emitted":0,"transferred":0,"acked":0,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"data-loss-spout","completeLatency":"0.000"}],"boltMetrics":[{"executors":1,"emitted":0,"transferred":0,"acked":0,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"balancereset-filter","executeLatency":"0.000","executed":0,"processLatency":"0.000","capacity":"0.000"},{"executors":1,"emitted":2120,"transferred":2120,"acked":1840,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"contribution-filter","executeLatency":"0.132","executed":1820,"processLatency":"0.087","capacity":"0.000"},{"executors":1,"emitted":0,"transferred":0,"acked":1820,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"aggregator","executeLatency":"1.297","executed":1820,"processLatency":"1.747","capacity":"0.000"}],"workerMetrics":[{"topologyName":"Collateralbreakdown_INTERNAL","topologyID":"Collateralbreakdown_INTERNAL-7-1576061152","host":"mx20636vm.fr.murex.com","port":20012,"uptimeSeconds":64900,"executorsTotal":7,"assignedCPUPercent":0.0,"assignedMemoryOnHeapMB":832.0,"assignedMemoryOffHeapMB":0.0,"supervisorId":"85fa61bc-c546-4cec-8c58-cae0b4ddc532","componentTasks":[{"componentName":"contribution-event-spout","numberOfTasks":1},{"componentName":"balancereset-event-spout","numberOfTasks":1},{"componentName":"data-loss-spout","numberOfTasks":1},{"componentName":"aggregator","numberOfTasks":1},{"componentName":"balancereset-filter","numberOfTasks":1},{"componentName":"contribution-filter","numberOfTasks":1}]}],"topologyStats":[{"window":"10m 0s","emitted":0,"transferred":0,"completeLatency":"0","acked":0,"failed":null},{"window":"3h 0m 0s","emitted":0,"transferred":0,"completeLatency":"0","acked":0,"failed":null},{"window":"1d 0h 0m 0s","emitted":3860,"transferred":3860,"completeLatency":"30.407","acked":1820,"failed":null},{"window":"All time","emitted":3860,"transferred":3860,"completeLatency":"30.407","acked":1820,"failed":null}]},{"id":"CollateralTriparty_INTERNAL-8-1576061154","name":"CollateralTriparty_INTERNAL","status":"ACTIVE","uptime":"1d 22h 44m 40s","uptimeSeconds":168280,"tasksTotal":7,"workersTotal":1,"executorsTotal":7,"replicationCount":2,"requestedMemoryOnHeapMB":0.0,"requestedMemoryOffHeapMB":0.0,"requestedTotalMemoryMB":0.0,"requestedCPUPercent":0.0,"assignedMemoryOnHeapMB":832.0,"assignedMemoryOffHeapMB":0.0,"assignedTotalMemoryMB":832.0,"assignedCPUPercent":0.0,"spoutMetrics":[{"executors":1,"emitted":2060,"transferred":2060,"acked":1820,"tasks":1,"lastError":"java.lang.RuntimeException: java.sql.SQLException: com.sybase.jdbc4.jdbc.SybSQLException: Database 'TheOne_MX_CI_525' has not been recovered yet - please wait and try again.\n\n\tat com.murex.position.qu","errorLapsedSecs":64909,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"contribution-event-spout","completeLatency":"2.747"},{"executors":1,"emitted":40,"transferred":40,"acked":80,"tasks":1,"lastError":"java.lang.RuntimeException: java.sql.SQLException: com.sybase.jdbc4.jdbc.SybSQLException: Database 'TheOne_MX_CI_525' has not been recovered yet - please wait and try again.\n\n\tat com.murex.position.qu","errorLapsedSecs":64909,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"balancereset-event-spout","completeLatency":"20.500"},{"executors":1,"emitted":0,"transferred":0,"acked":0,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"data-loss-spout","completeLatency":"0.000"}],"boltMetrics":[{"executors":1,"emitted":80,"transferred":80,"acked":80,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"balancereset-filter","executeLatency":"0.250","executed":80,"processLatency":"0.500","capacity":"0.000"},{"executors":1,"emitted":0,"transferred":0,"acked":1840,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"contribution-filter","executeLatency":"0.066","executed":1820,"processLatency":"0.065","capacity":"0.000"},{"executors":1,"emitted":0,"transferred":0,"acked":80,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"aggregator","executeLatency":"3.250","executed":80,"processLatency":"5.250","capacity":"0.000"}],"workerMetrics":[{"topologyName":"CollateralTriparty_INTERNAL","topologyID":"CollateralTriparty_INTERNAL-8-1576061154","host":"mx20634vm.fr.murex.com","port":10013,"uptimeSeconds":64892,"executorsTotal":7,"assignedCPUPercent":0.0,"assignedMemoryOnHeapMB":832.0,"assignedMemoryOffHeapMB":0.0,"supervisorId":"2622c0a4-1d51-409d-a077-b2cfbe78bda4","componentTasks":[{"componentName":"contribution-event-spout","numberOfTasks":1},{"componentName":"balancereset-event-spout","numberOfTasks":1},{"componentName":"data-loss-spout","numberOfTasks":1},{"componentName":"aggregator","numberOfTasks":1},{"componentName":"balancereset-filter","numberOfTasks":1},{"componentName":"contribution-filter","numberOfTasks":1}]}],"topologyStats":[{"window":"10m 0s","emitted":0,"transferred":0,"completeLatency":"0","acked":0,"failed":null},{"window":"3h 0m 0s","emitted":60,"transferred":60,"completeLatency":"6.500","acked":40,"failed":null},{"window":"1d 0h 0m 0s","emitted":2180,"transferred":2180,"completeLatency":"3.495","acked":1900,"failed":null},{"window":"All time","emitted":2180,"transferred":2180,"completeLatency":"3.495","acked":1900,"failed":null}]},{"id":"CollateralBalance_INTERNAL-6-1576061149","name":"CollateralBalance_INTERNAL","status":"ACTIVE","uptime":"1d 22h 44m 45s","uptimeSeconds":168285,"tasksTotal":7,"workersTotal":1,"executorsTotal":7,"replicationCount":2,"requestedMemoryOnHeapMB":0.0,"requestedMemoryOffHeapMB":0.0,"requestedTotalMemoryMB":0.0,"requestedCPUPercent":0.0,"assignedMemoryOnHeapMB":832.0,"assignedMemoryOffHeapMB":0.0,"assignedTotalMemoryMB":832.0,"assignedCPUPercent":0.0,"spoutMetrics":[{"executors":1,"emitted":1480,"transferred":1480,"acked":1840,"tasks":1,"lastError":"java.lang.RuntimeException: java.sql.SQLException: com.sybase.jdbc4.jdbc.SybSQLException: Database 'TheOne_MX_CI_525' has not been recovered yet - please wait and try again.\n\n\tat com.murex.position.qu","errorLapsedSecs":64910,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"contribution-event-spout","completeLatency":"5.739"},{"executors":1,"emitted":0,"transferred":0,"acked":0,"tasks":1,"lastError":"java.lang.RuntimeException: java.sql.SQLException: com.sybase.jdbc4.jdbc.SybSQLException: Database 'TheOne_MX_CI_525' has not been recovered yet - please wait and try again.\n\n\tat com.murex.position.qu","errorLapsedSecs":64910,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"balancereset-event-spout","completeLatency":"0.000"},{"executors":1,"emitted":0,"transferred":0,"acked":0,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"spoutID":"data-loss-spout","completeLatency":"0.000"}],"boltMetrics":[{"executors":1,"emitted":0,"transferred":0,"acked":0,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"balancereset-filter","executeLatency":"0.000","executed":0,"processLatency":"0.000","capacity":"0.000"},{"executors":1,"emitted":420,"transferred":420,"acked":1840,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"contribution-filter","executeLatency":"0.099","executed":1820,"processLatency":"0.087","capacity":"0.000"},{"executors":1,"emitted":0,"transferred":0,"acked":500,"tasks":1,"lastError":"","errorLapsedSecs":null,"failed":0,"requestedMemoryOnHeapMB":128.0,"requestedMemoryOffHeapMB":0.0,"requestedCPUPercent":10.0,"boltID":"aggregator","executeLatency":"2.600","executed":500,"processLatency":"3.280","capacity":"0.000"}],"workerMetrics":[{"topologyName":"CollateralBalance_INTERNAL","topologyID":"CollateralBalance_INTERNAL-6-1576061149","host":"mx20636vm.fr.murex.com","port":20013,"uptimeSeconds":64894,"executorsTotal":7,"assignedCPUPercent":0.0,"assignedMemoryOnHeapMB":832.0,"assignedMemoryOffHeapMB":0.0,"supervisorId":"85fa61bc-c546-4cec-8c58-cae0b4ddc532","componentTasks":[{"componentName":"contribution-event-spout","numberOfTasks":1},{"componentName":"balancereset-event-spout","numberOfTasks":1},{"componentName":"data-loss-spout","numberOfTasks":1},{"componentName":"aggregator","numberOfTasks":1},{"componentName":"balancereset-filter","numberOfTasks":1},{"componentName":"contribution-filter","numberOfTasks":1}]}],"topologyStats":[{"window":"10m 0s","emitted":0,"transferred":0,"completeLatency":"0","acked":0,"failed":null},{"window":"3h 0m 0s","emitted":0,"transferred":0,"completeLatency":"0","acked":0,"failed":null},{"window":"1d 0h 0m 0s","emitted":1900,"transferred":1900,"completeLatency":"5.739","acked":1840,"failed":null},{"window":"All time","emitted":1900,"transferred":1900,"completeLatency":"5.739","acked":1840,"failed":null}]}]}},"histograms":{},"meters":{},"timers":{"process":{"memory":{"gc":{"g1_old_generation":{"events":{"count":0,"rate_1m":0.0,"rate_5m":0.0,"rate_15m":0.0,"rate_mean":0.0},"duration_ms":{"max":0.0,"mean":0.0,"median":0.0,"min":0.0,"percentile_75":0.0,"percentile_95":0.0,"percentile_98":0.0,"percentile_99":0.0,"percentile_999":0.0,"standard_deviation":0.0}},"g1_young_generation":{"events":{"count":555,"rate_1m":2.487837344060434E-4,"rate_5m":0.0021054819007852075,"rate_15m":0.002639892616381077,"rate_mean":0.003131245713024466},"duration_ms":{"max":9.0,"mean":8.0,"median":8.0,"min":7.0,"percentile_75":9.0,"percentile_95":9.0,"percentile_98":9.0,"percentile_99":9.0,"percentile_999":9.0,"standard_deviation":1.414213562373095}}}}}}}}
... View more
10-29-2019
04:55 AM
Hello,
we are trying to get elastic search data in Splunk.
Apps we are using:
https://splunkbase.splunk.com/app/4175/
we are getting following errors
10-29-2019 12:46:32.869 +0100 ERROR ExecProcessor - message from "python /hp737srv2/apps/splunk/etc/apps/TA-elasticsearch-data-integrator---modular-input/bin/elasticsearch_json.py" AttributeError: 'NoneType' object has no attribute 'strip'
Configuration (inputs.conf):
[elasticsearch_json://test1]
date_field_name = timestamp
elasticsearch_indice = *
elasticsearch_instance_url = http://hp707srv:10000
index = mlc_test
interval = 60
lower_or_equal = now
use_ssl = 0
port = 10000
disabled = 0
We are using same URL in Grafana and its working fine.
Thanks
... View more
Hi,
I understant that if we have to edit datamodel accelration need to be disabled. but in my case I haven't edit datamodels, its exact same. Even I have tried attaching my full installation as Indexer to another SH without changing anything. Still its rebuilding the datamodels.
Just wanted to know if there is any way to move Indexer to another setup without rebuilding datamodels.
... View more
Hello,
We are trying to move from Single node installation to multinode/Distributed Search Installation(1SH and 2 Indexer) - Not clustered
for this we have copied full Production installation and attached it as Indexer in new distributed Search Setup.
Issue is datamodels are getting rebuild. Is this expected ?
we have many big datamodels and don't want them to rebuild if possible. It takes 12hrs+ to rebuild and machine is swamped as its heavy process.
FYI : When I copied Full Prod as Indexer I have trimmed down our App (having datamodels)
Kept these files in App and removed everything else. Not sure if there is any other files needed to stop rebuilding datamodels.
app.conf
datamodels.conf
eventtypes.conf
indexes.conf
props.conf
transforms.conf
Thanks
... View more
09-12-2019
04:02 AM
Hello,
I am looking to add tooltip message on specific column of a table. I have followed couple post but didn't get success.
Requirement: In below table if some one hover the mouse on Issues_Count table it should display some static message.
I have tried this link but didn't work. I am using Enterprise 7.2.6 version.
Add a Tooltip to Simple XML Tables with Bootstrap and a Custom Cell Renderer
Thanks
... View more
08-28-2019
09:35 AM
@somesoni2 : Agreed !! we are planning to increase hardware. I thought so it will impact load job but we don't use loadjob anywhere so this is working for us. Thank you so much for clarification and help 🙂
... View more
08-28-2019
09:22 AM
@somesoni : Thank you for response. we have converted some real-time searches to scheduled searches. but real issue is we are running many scheduled search in parallel. We enhance your script to run every minute and removing older than 1 minutes of dispatch dir. Now getting better cpu performance. Not sure if its advisible or not but not seeing any negative impact.
... View more
08-28-2019
03:42 AM
@somesoni2 : This script is really helpful. Thanks for that . Inspite of removing dispatch search older than 45 mins still count is really high (13000+) and It impacting the CPU usage. we are running some saved searched on real-time not sure if that creates multiple dispatch. One way is to increase hardware but Is there anything else we can look at ?
... View more
08-21-2019
08:32 AM
thank you 🙂 some times simple answer won't click in mind and keep looking for complex solution.
... View more
08-21-2019
08:16 AM
@mayurr98 : thanks for response. but not working 😞
... View more
08-21-2019
07:55 AM
Hi,
How can we Ignore timechart column if all rows having 0 values.
basically I am using trellis to display and want to ignore charts which doen't have any data.
... View more
08-21-2019
03:17 AM
Hi,
I am using trellis column chart in my dashboard. I am looking to change bar colors based on values.
Requirement : if value = "-1" it should be Green, All others Red.
I am able to change same color for all values but not sure how to do it based on values.
<option name="charting.seriesColors">["0x00A572"]</option>
Thanks
... View more
08-12-2019
04:32 AM
Hello,
I am using sendresults app for email alert. In results table I have one column name as count. I want if any row having count value > 0 then its background color should be red.
This is the default CSS for results table. Not sure if possible implement my requirement.
table {font-family:Arial;font-size:12px;border: 1px solid black;padding:3px}th {background-color:#4F81BD;color:#fff;border-left: solid 1px #e9e9e9} td {border:solid 1px #e9e9e9}
... View more
07-26-2019
06:22 AM
@niketnilay : this is helpful. In your example host is getting updated dynamically. but in default functionality it also shows dashboard name. but in above example it has static string in begnning "My Dynamic". Is there any change to keep default functionality to include dashboard name ?
Like : "Dynamic Dashboard | host 34" .
... View more
07-22-2019
05:13 AM
@harsmarvania57 : Thanks!! it worked like a charm 🙂
... View more
07-22-2019
04:35 AM
Hello,
we have plenty of forwarders install at different machine/folders. Is there any way to list out all forwarders location ?
I have tried below apps but no one provide location for forwarder, Just getting IP of forwarder Machine.
Unified Forwarder Monitoring App for Splunk
https://splunkbase.splunk.com/app/3805/
Monitoring Console
Some Example location:
/net/hp754srv/hp754srv1/apps/ENV1/splunkforwarder1
/net/dell443srv/dell443srv3/apps/ENV2/splunkforwarder2
/net/dell153srv/dell153srv2/apps/ENV3/splunkforwarder3
Thanks
... View more
Hi,
I am looking to get argument for savedsearch from csv.
| savedsearch MYSAVEDSERACH host=(from csv) threshold=(from csv)
Thanks
... View more
07-15-2019
07:14 AM
Hello,
I am using child dataset in data model. Not sure how to use fields which are inherited from parent data model. I am able to access only calculated fields which are created in child dataset.
Search I am trying:
| tstats values(qcst.BA.Duration_sec) AS Duration_sec values(qcst.BA.Duration) AS Duration values(qcst.BA.ActivityType) AS ActivityType FROM datamodel=MTE_RUNTIME_BETA by _time
... View more
06-26-2019
10:47 AM
Hello,
We are using a table in dashboard, taking data from CSV. One column is CSV contain URL links which require some tokens to set.
Requirement: Is it possible if we can get URL from CSV and update them with tokens in dashboard?
Basically, in below example it should take the URL from CSV, update host and time in URL using dashboard tokens and display updated URL.
... View more
06-25-2019
07:08 AM
Brilliant !! @somesoni2 : Thank you. please update this as answer.
... View more
06-25-2019
06:52 AM
Hi,
We are using a table in our dashboard and its output is based on multiple saved search.
How can I run multiple saved search in parallel and combined its result in a single table?
I have created below search which works fine but I am not be able to use in my dashboard.
| makeresults
| eval ALERT="KPI_MXTIMING_MEM_LIVEBOOK_SESSION_FUNCTION"
| append
[ makeresults
| eval ALERT="KPI_MXTIMING_LIVEBOOK_SESSION_CC_1MIN_FUNCTION"]
| table ALERT
| map search="| savedsearch "$ALERT$" host_token=MX_Archival41 earliest_time_token=-10d"
When I add this search in the dashboard it says waiting for input. Reason is $ALERT$ in search which takes results from the first part of the search but on dashboard, even the first part won't run if there is any unassigned token present in search.
If I run this search directly it's working but not on the dashboard.
I am using mapping instead of append as there could be 10 saved searches and it will take longer to execute.
So I'm looking for a solution to run these saved search in parallel and produce results in a single table.
... View more
06-21-2019
12:07 AM
Thank you for answer. it's not fully working in my case may be as I can't use prefix and postfit for multiselect.
I have used this and worked for me.
<set token="form.NICKNAME_TOKEN"> Value 1" "Value2" "Value3</set>
eval is not working with this so I have to use set.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-04-2022
05:07 PM
|
Karma given to
