Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- About tkwaller
tkwaller
Builder
Member since:
09-18-2013
06-05-2020
Community Statistics
| Posts | 230 |
| Solutions | 7 |
| Karma Given | 55 |
| Karma Received | 18 |
| Member Since | 09-18-2013 |
Activity Feed
- Got Karma for Summary Index Backfill in Search Head Cluster. 02-04-2022 10:37 AM
- Got Karma for Re: Why is my dashboard panel returning loadjob error "accessing https:///saved/searches/External API Usage/?output_mode=json, statusCode=502, description=Not Found". 06-14-2021 09:06 AM
- Got Karma for Re: Why is my universal forwarder not respecting my limits.conf config?. 09-01-2020 05:29 AM
- Karma Re: How to split data into separate sourcetypes with transforms for alemarzu. 06-05-2020 12:49 AM
- Karma Re: Why does my dashboard crash when a search populates dropdown values? for sundareshr. 06-05-2020 12:48 AM
- Karma Re: Why is my summary index search timechart not displaying? for somesoni2. 06-05-2020 12:48 AM
- Karma Re: Why is my fillnull search with a BY clause not returning any results? for gcusello. 06-05-2020 12:48 AM
- Karma Re: Why is my fillnull search with a BY clause not returning any results? for niketn. 06-05-2020 12:48 AM
- Karma Re: How to search for top 10 with stats list and count? for somesoni2. 06-05-2020 12:48 AM
- Karma Re: How do I configure my heavy forwarders to parse the timestamp for a WinRegistry sourcetype? for woodcock. 06-05-2020 12:48 AM
- Karma Re: How do I use a timerange picker in conjunction with a saved search on a dashboard? for somesoni2. 06-05-2020 12:48 AM
- Karma Re: How can I see the searches that are populating panels in the Splunk App for Windows Infrastructure? for sundareshr. 06-05-2020 12:48 AM
- Karma Re: Summary Index Backfill in Search Head Cluster for somesoni2. 06-05-2020 12:48 AM
- Karma Re: How do I edit my inputs.conf monitor stanzas to route data to the correct indexes? for masonmorales. 06-05-2020 12:48 AM
- Karma Re: Turn stats search into chart for javiergn. 06-05-2020 12:48 AM
- Karma Re: Why is my dropdown not populating a field value as expected? for rjthibod. 06-05-2020 12:48 AM
- Karma Re: Why does my dashboard crash when a search populates dropdown values? for cmerriman. 06-05-2020 12:48 AM
- Karma Re: Why is Splunk for Unix VMStat.sh Script Calculating Incorrectly for acharlieh. 06-05-2020 12:48 AM
- Karma Re: How to search a trending error count to alert when an application pool is more than 2 standard deviations from the normal? for woodcock. 06-05-2020 12:48 AM
- Karma Re: How to search a trending error count to alert when an application pool is more than 2 standard deviations from the normal? for woodcock. 06-05-2020 12:48 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
03-08-2017
12:48 PM
Haha was just gettign there myself:
index=apache* useragent=* | timechart count by useragent | eventstats perc5(count) as Lower by useragent
was close at least.
Small changes
... View more
03-08-2017
12:13 PM
Hello
I have a search that timecharts useragent count by useragent. Simply
index=apache useragent=* | timechart count by useragent limit=100
what I would like to do is overlay a lower boundary so if the count in part of this span is lower than the boundary send an alert.
I tried this several different ways.
This was my last attempt:
index=apache* useragent=* | stats count as TotalCount, avg(TotalCount) AS AvgCount, perc5(TotalCount) by _time, useragent
Unfortunately I only get a TotalCount and nothing more.
Any ideas?
Thanks!
... View more
01-13-2017
02:09 PM
Beautiful, I knew there was a link somewhere I wasn't finding.
Thank you sir
... View more
01-13-2017
01:41 PM
I have some dashboards that have many panels. What I would like to do is convert these panels to saved searches and then add them to a dashboard.
BUT
I would still like to keep the functionality of the timerange picker in place. Is this something that can be done with tokens? Im not sure this can even be done but is worth a try. Maybe Im just not doing it correctly haha?
Thanks for the tips
... View more
01-06-2017
02:21 PM
Here is essentially what I am trying to do
If instances of a specific IP hitting one or more of those uri_paths is over, say, 20% of the total amount for that host then we include that host and all the useragents they use
and then put the useragents together all together and top that.
... View more
01-06-2017
12:11 PM
The first search returns results I am unsure about so I am checking that. The second is count of 1 for each useragent. I thought about multikv too but I didnt get that to work either.
... View more
01-06-2017
11:48 AM
Heres my current search:
index=akamai src_ip!=xxx.xx.xx.xx AND src_ip!=xxx.xx.xx.xx | lookup whitelistip.csv src_ip OUTPUTNEW src_ip as Whitelist | where isnull(Whitelist) | eval useragent=urldecode(useragent) | dedup useragent | stats dc(http_user_agent) AS Number_of_userAgents, list(useragent) as useragent_list, count(eval(uri_path="/search/stuff/v2")) as "SearchV2", count(eval(uri_path="shape/search/stuff/v2")) as "ShapeV2", count(eval(uri_path="/search/stuff/v1")) as "SearchV1", count as EventCount by src_ip | eval TotalCount=SearchV2+ShapeV2+SearchV1 | eval hitPercentage=(TotalCount/EventCount) * 100 | fields src_ip, Number_of_userAgents,useragent_list, hitPercentage, EventCount, SearchV2, ShapeV2, SearchV1, TotalCount
This search give me reults such as:
src_ip Number_of_userAgents useragent_list hitPercentage EventCount SearchV2 ShapeV2 SearchV1 TotalCount
XXX.XXX.XXX.XX1 10
Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Sarafi/601.1.4
Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/9.0 Mobile/13A404 Sarafi/601.1.46
Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Mobile/13A404 Sarafi/601.1.56
Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.17 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Sarafi/601.1.46
Mozilla/5.0 (iPad; CPU OS 9_0 like Mac OS X) AppleWebKit/601.1.39 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Sarafi/601.1
Mozilla/5.0 (iPad; CPU OS 9_0 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Sarafi/600.1.4
Mozilla/5.0 (iPad; CPU OS 9_3 like Mac OS X) AppleWebKit/601.1.17 (KHTML, like Gecko) Version/9.0 Mobile/13C75 Sarafi/601.1.46
Mozilla/5.0 (iPad; CPU OS 9_0 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13E238 Sarafi/601.1.56
Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.17 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Sarafi/601.1
Mozilla/5.0 (iPad; CPU OS 9_0_1 like Mac OS X) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Sarafi/601.1.46
0 10 0 0 0 0
XXX.XXX.XXX.XX2 8
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:21.0) Gecko/20100101 Firefox/21.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/536.29.13 (KHTML, like Gecko) Version/6.0.4 Safari/536.29.13
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/536.29.13 (KHTML, like Gecko) Version/6.0.4 Safari/536.29.13
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.110 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.52 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.116 Safari/537.36
75 8 2 0 4 6
XXX.XXX.XXX.XX3 7
MacOutlook/15.24.0.160709 (Intel Mac OS X Version 10.11.6 (Build 15G1108))
OC/4.0.7577.4500 (Microsoft Lync 2010)
MacOutlook/f.15.1.160411 (Intel Mac OS X Version 10.11.6 (Build 15G1004))
SHMessage/APP_VERSION_NUMBER (iPhone; iOS 10.2; Scale/2.00)
Mozilla/5.0 (iPhone; CPU iPhone OS 10_2 like Mac OS X) AppleWebKit/602.3.12 (KHTML, like Gecko) Mobile/14C89
Microsoft Office/16.0 (Windows NT 6.1; ucmapi 16.0.4456; Pro)
swcd (unknown version) CFNetwork/808.2.16 Darwin/15.6.0
0 7 0 0 0 0
What I am trying to do is get a list of src_ip's that are null in the "Whitelist.csv" file along with a list of their known useragents, which works.
What I want to do now is to list the useragents seen in the results from the most common to least.
So I can say, these are the most used useragents in instances where people are likely scraping.
I tried several options but couldnt get any to work, the problem is with list(useragent).
Any thoughts on how I could accomplish this?
Thanks for the help
... View more
01-03-2017
01:24 PM
VMStat is either interpreting incorrectly OR is calculating incorrectly
the script is:
. `dirname $0`/common.sh
HEADER='memTotalMB memFreeMB memUsedMB memFreePct memUsedPct pgPageOut swapUsedPct pgSwapOut cSwitches interrupts forks processes threads loadAvg1mi'
HEADERIZE="BEGIN {print \"$HEADER\"}"
PRINTF='END {printf "%10d %10d %10d %10.1f %10.1f %10s %10.1f %10s %10s %10s %10s %10s %10s %10.2f\n", memTotalMB, memFreeMB, memUsedMB, memFreePct, memUsedPct, pgPageOut, swapUsedPct, pgSwapOut, cSwitches, interrupts, forks, processes, threads, loadAvg1mi}'
DERIVE='END {memUsedMB=memTotalMB-memFreeMB; memUsedPct=(100.0*memUsedMB)/memTotalMB; memFreePct=100.0-memUsedPct; swapUsedPct=swapUsed ? (100.0*swapUsed)/(swapUsed+swapFree) : 0}'
if [ "x$KERNEL" = "xLinux" ] ; then
assertHaveCommand uptime
assertHaveCommand ps
assertHaveCommand vmstat
CMD='eval uptime ; ps -e | wc -l ; ps -eT | wc -l ; vmstat -s'
PARSE_0='NR==1 {loadAvg1mi=0+$(NF-2)} NR==2 {processes=$1} NR==3 {threads=$1}'
PARSE_1='/total memory$/ {memTotalMB=$1/1024} /free memory$/ {memFreeMB+=$1/1024} /buffer memory$/ {memFreeMB+=$1/1024} /swap cache$/ {memFreeMB+=$1/1024}'
PARSE_2='/pages paged out$/ {pgPageOut=$1} /used swap$/ {swapUsed=$1} /free swap$/ {swapFree=$1} /pages swapped out$/ {pgSwapOut=$1}'
PARSE_3='/interrupts$/ {interrupts=$1} /CPU context switches$/ {cSwitches=$1} /forks$/ {forks=$1}'
MASSAGE="$PARSE_0 $PARSE_1 $PARSE_2 $PARSE_3 $DERIVE"
$CMD | tee $TEE_DEST | $AWK "$HEADERIZE $MASSAGE $FILL_BLANKS $PRINTF" header="$HEADER"
echo "Cmd = [$CMD]; | $AWK '$HEADERIZE $MASSAGE $FILL_BLANKS $PRINTF' header=\"$HEADER\"" >> $TEE_DEST
which results in:
/opt/splunkforwarder/etc/apps/TA-stubhub-all-lin-uf-SplunkforUnix/bin/vmstat.sh
memTotalMB memFreeMB memUsedMB memFreePct memUsedPct pgPageOut swapUsedPct pgSwapOut cSwitches interrupts forks processes threads loadAvg1mi
128950 95092 33858 73.7 26.3 8266537986 2.7 156773 1430358599 1540011497 566455287 769 1182 0.38
BUT
when I go to the host, I can run the command from above and see these numbers are incorrect
eval uptime ; ps -e | wc -l ; ps -eT | wc -l ; vmstat -s
20:26:10 up 332 days, 21:21, 1 user, load average: 0.77, 0.70, 0.75
761
1199
132045632 total memory
130138512 used memory
109152400 active memory
10666064 inactive memory
1907120 free memory
1185436 buffer memory
94279704 swap cache
8388604 total swap
224172 used swap
8164432 free swap
1506464540 non-nice user cpu ticks
5413 nice user cpu ticks
183450991 system cpu ticks
136289253029 idle cpu ticks
1112025 IO-wait cpu ticks
15060 IRQ cpu ticks
6827407 softirq cpu ticks
0 stolen cpu ticks
153941247 pages paged in
8265286006 pages paged out
83885 pages swapped in
156773 pages swapped out
1534356594 interrupts
1419375615 CPU context switches
1454713450 boot time
566387546 forks
This host is roughly 97% used and 3% free
free -m
total used free shared buffers cached
Mem: 128950 127061 1889 0 1157 92060
... View more
12-08-2016
06:48 AM
great ideas, optimization definitely improved performance
... View more
12-08-2016
06:48 AM
I did use this in the dashobard, good thought
... View more
12-08-2016
06:25 AM
I figured out why the dashboard is crashing in the search for the inputs the |s filter for the token was killing it. So i removed that then updated my dashboard searches.
So I just added prefixes and suffixes as needed for the searches and good to go.
Thanks for the ideas!
... View more
12-08-2016
06:09 AM
I cloned the dashboard and tried this as well, same issue. As soon as I pick an option the page crashes
... View more
12-08-2016
05:59 AM
So I broke the first dropwdown search down to this instead:
index=apigateway host=*xxx* requestURI="/xxx/xx/xx/*" ucm=true | search "Inbound" OR "Outbound" | dedup proc | stats count by proc | rename proc as ProcName | table ProcName
but still when I make the selection in the dropdown the page crashes
... View more
12-07-2016
02:21 PM
your revision clipped the opening <input> tag
... View more
12-07-2016
01:40 PM
Hello
I have a dashboard that exhibiting some strange behavior. I have the dashboard panel with the dropdowns that populate via searches, when I load the dashboard the page crashes
When I remove these dropdown fields, the dashboard has no problems.
This is the code for the 2 dropdowns but like I said the page crashes with them.
<label>Proc</label>
<search>
<query>index=api host=*xxx* requestURI="/xxx/xxx/xx/*" ucm=true | rename clientIP AS clientip | lookup dnslookup clientip OUTPUT clienthost | transaction transactionId maxspan=10s | search "Inbound" OR "Outbound" | dedup proc | stats count by proc | rename proc as ProcName | table ProcName</query>
<earliest>-4h@m</earliest>
<latest>now</latest>
</search>
<fieldForLabel>ProcName</fieldForLabel>
<fieldForValue>ProcName</fieldForValue>
</input>
<input type="dropdown" token="status_code_tok|s" searchWhenChanged="true">
<label>Status Code</label>
<search>
<query>index=api host=*xxx* requestURI="/xxx/xxx/xxx/*" ucm=true | rename clientIP AS clientip | lookup dnslookup clientip OUTPUT clienthost | transaction transactionId maxspan=10s | search "Inbound" OR "Outbound" | stats count by statusCode | rename statusCode as StatusCode| table StatusCode</query>
<earliest>-60m@m</earliest>
<latest>now</latest>
</search>
<fieldForLabel>StatusCode</fieldForLabel>
<fieldForValue>StatusCode</fieldForValue>
</input>
Any ideas what the issue may be?
... View more
12-07-2016
06:44 AM
I knew it was something easy I was missing, just needed some new eyes.
thanks!
... View more
12-07-2016
06:36 AM
Yes indeed that worked. So this was an issue with me not using the fieldForLabel or fieldForValue? So really it was creating the search and assigning the value to the fieldForValue field?
... View more
12-07-2016
06:08 AM
*Hello
I have a populating search of:
index=api host=*XXX* requestURI="/xxx/xx/xxx/*" xyz=true | rename clientIP AS clientip | lookup dnslookup clientip OUTPUT clienthost | transaction transactionId maxspan=10s | search "Inbound" OR "Outbound" | eval Proc=if(proc = "null", "NONE", proc) | stats count by Proc
the search returns logs like:
2016-12-07 12:00:38,285 INFO MessageProcessor-123 com.domain.platform.stuff.stuff - className=CookieBasedAuthHandler method=handleRequest js_request=true requestURI=/xxx/xxx/v3/123456789?mode=tools&ucm=true&proc=null requestMethod=GET transactionId=123456789 token_validation_status=success
2016-12-07 12:00:38,290 DEBUG PassThroughMessageProcessor-386 org.wso2.carbon.api.gateway.stuff.stuff.ExtensionHandler - Inbound API call from client to gateway: appName=Application , [email protected] , transactionId=123456789, requestURI=/xxx/xxx/xx/123456789?mode=tools&ucm=true&proc=null , requestTime=Wed Dec 07 12:00:38 UTC 2016 , clientIP=xxx.xx.xxx
2016-12-07 12:00:38,301 DEBUG MessageProcessor-347 org.wso2.carbon.api.gateway.stuff.stuff - Outbound API call from gateway to client: appName=Application , [email protected] , transactionId=123456789, requestURI=/xxx/xxx/xx/123456789?mode=tools&ucm=true&proc=null , requestTime=Wed Dec 07 12:00:38 UTC 2016 , statusCode=200 , EndPointURL=http://api-xxx.xxx.com/catalog-xxx/xx/xxxx
the field proc is what I would like to use in the dropdown. Currently its always the value of the literal "null" but will eventually be other values.
In the top search I eval'd the proc field, just to make sure what I was doing was working. So if proc was the literal null change it to NONE and if not use the value of proc which works but ideally I'd like to not use the eval.
Proc count
NONE 259
but the dropdown never populates with this value.
Hers the dropdown code:
<label>PROC</label>
<search>
<query>index=api host=*XXX* requestURI="/xxx/xx/xxx/*" ucm=true | rename clientIP AS clientip | lookup dnslookup clientip OUTPUT clienthost | transaction transactionId maxspan=10s | search "Inbound" OR "Outbound" | eval Proc=if(proc = "null", "NONE", proc) | stats count by Proc</query>
<earliest>-7d@h</earliest>
<latest>now</latest>
</search>
<fieldForLabel>ProcName</fieldForLabel>
<fieldForValue>ProcName</fieldForValue>
</input>
... View more
11-29-2016
01:47 PM
So:
1. Yes I referenced them correctly
props.conf
[cfj:applog]
REPORT-coldfusionapplog = coldfusionapplication
pulldown_type = 1
EVAL-app= "Coldfusion"
DATETIME_CONFIG = CURRENT
LINE_BREAKER = ([\r\n]+)
SHOULD_LINEMERGE = false
transforms.conf
[coldfusionapplication]
DELIMS=","
FIELDS = status,message_id,message_delivered_date,message_delivered_time,service,payload
mine are in $SPLUNK_HOME/etc/apps/SA-coldfusion/local/ props.conf and transforms.conf
Im building this into my app so I push the changes from my deployer to the search head cluster. I also refresh as well
List item
... View more
11-29-2016
12:09 PM
Ive found the error log:
11-29-2016 20:00:44.305 +0000 WARN SearchOperator:kv - Invalid key-value parser, ignoring it, transform_name='coldfusionapplication'
just not sure whats wrong with it
... View more
11-29-2016
11:51 AM
Nope, not working. The transforms dont even appear in Splunk Web(GUI), like it doesnt exist.
... View more
11-29-2016
09:10 AM
"Information","a0-0.1.0.0-4010-2","11/29/16","02:25:16","INTRANET","inside of autoComplete method with string=fort"
"Information","a0-0.2.0.0-4010-2","11/29/16","02:23:42","INTRANET","inside of autoComplete method with string=at&t"
"Information","a0-0.4.0.0-4010-1","11/29/16","02:05:36","INTRANET","inside of autoComplete method with string=oracle"
"Error","a0-0.0.3.0-4010-1","11/29/16","02:05:36","intranet","Exception returned from api call. StatusCode=503 Service Unavailable FileContent=<p>Site is not available since below pool is down :</p> <p>Pool Name: XXXX</p> The specific sequence of files included or processed is: STUFF, line: 358 "
... View more
11-29-2016
09:02 AM
Hello
I have a field transform setup that doesn't seem to be working:
transforms.conf
[coldfusionapplication]
DELIMS = ","
FIELDS = "status","message_id","message_delivered_date","message_delivered_time","service","payload"
props.conf
[cfj:applog]
REPORT-cfjapplog = coldfusionapplication
EVAL-app= "Coldfusion"
DATETIME_CONFIG = CURRENT
LINE_BREAKER = ([\r\n]+)
SHOULD_LINEMERGE = false
I have this setup on my Search Head Cluster but I'm not seeing the fields from the DELIMS. I DO however see the calculated field "app" from EVAL-app= "Coldfusion" so I know at least PART of this is working.
Fields Available
host
source
sourcetype
FileContent
StatusCode
app
app_pool
datacenter
date_hour
date_mday
date_minute
date_month
date_second
date_wday
date_year
date_zone
environ
eventtype
fieldList
hidden
index
linecount
locale
name
punct
qa_env
rows
sourceId
splunk_server
status
tag
tag::eventtype
target_host
timeendpos
timestartpos
units
are all the available fields.
Any ideas on what I'm doing incorrectly?
Thanks for the help!
... View more
11-15-2016
08:55 AM
and the final result
| inputlookup channel2.csv| eval count=0, Channel=lower(Channel)| append [ search index=java host=*myhost* "PLACEORDER_API_UNSUCCESSFUL" orderSourceId=7 OR orderSourceId=6 OR orderSourceId=5 | eval Channel=lower(Channel) | stats count AS Failure BY Channel] |stats sum(count) AS Failure BY Channel | appendcols [search index=java host=*myhost* "PLACEORDER_API_SUCCESSFUL" orderSourceId=7 OR orderSourceId=6 OR orderSourceId=5 | eval Channel=case(orderSourceId == 7, "Desktop", orderSourceId == 6, "Andriod", orderSourceId == 5, "iOS") |stats count as Success by Channel]| appendcols [search (index=java host=*myhost* "Request received for placeOrder") OR (index=java host=*myhost* "PLACEORDER_API_REQUEST" orderSourceId=*) | transaction cartId maxspan=5sec| eval Channel=case(orderSourceId == 7, "Desktop", orderSourceId == 6, "Andriod", orderSourceId == 5, "iOS") | stats count by Channel] | eval Success_Percentage=(Success/(Success+Failure))*100 | table Channel Success Failure Success_Percentage
Had to update the lookup a bit to get it to return the description as the Channel name
... View more
11-15-2016
08:53 AM
the only thing I haven't figured out yet is how to get the description/Channel names included in the table.
In the channel.csv I have a field called description that names the channels:
"Desktop", "Andriod", "iOS"
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
