Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About otman01
otman01
Communicator
Member since:
02-27-2015
06-05-2020
Community Statistics
| Posts | 77 |
| Solutions | 4 |
| Karma Given | 1 |
| Karma Received | 12 |
| Member Since | 02-27-2015 |
Activity Feed
- Karma Re: How to reuse the count from a previous search to calculate a percentage in a second search or combine the two searches? for chimell. 06-05-2020 12:47 AM
- Got Karma for How to reuse the count from a previous search to calculate a percentage in a second search or combine the two searches?. 06-05-2020 12:47 AM
- Got Karma for How to add custom icons in a javascript file to use in a table based on returned results?. 06-05-2020 12:47 AM
- Got Karma for Splunk DB Connect 2: Why am I getting error "No catalog found" when I click on the query tab?. 06-05-2020 12:47 AM
- Got Karma for Splunk DB Connect 2: Why am I getting error "No catalog found" when I click on the query tab?. 06-05-2020 12:47 AM
- Got Karma for Splunk DB Connect 2: Why am I getting error "No catalog found" when I click on the query tab?. 06-05-2020 12:47 AM
- Got Karma for Display a result when the count =0. 06-05-2020 12:47 AM
- Got Karma for How to configure Splunk to send alert emails from my Gmail account?. 06-05-2020 12:47 AM
- Got Karma for Re: How do I convert the time in my table to a human readable date format?. 06-05-2020 12:47 AM
- Got Karma for How to split multiple lines of data into individual lines?. 06-05-2020 12:47 AM
- Got Karma for How to split multiple lines of data into individual lines?. 06-05-2020 12:47 AM
- Got Karma for How to split multiple lines of data into individual lines?. 06-05-2020 12:47 AM
- Got Karma for Re: DBConnect stopped functioning. 06-05-2020 12:46 AM
- Posted Re: DBConnect stopped functioning on All Apps and Add-ons. 06-29-2017 12:38 AM
- Posted Re: Splunk DB Connect 2: Why am I getting error "No catalog found" when I click on the query tab? on All Apps and Add-ons. 10-26-2015 01:17 AM
- Posted Re: How do I convert the time in my table to a human readable date format? on Splunk Search. 08-18-2015 06:27 AM
- Posted Re: How do I convert the time in my table to a human readable date format? on Splunk Search. 08-18-2015 06:13 AM
- Posted How do I convert the time in my table to a human readable date format? on Splunk Search. 08-18-2015 04:28 AM
- Tagged How do I convert the time in my table to a human readable date format? on Splunk Search. 08-18-2015 04:28 AM
- Posted Re: Splunk DB Connect: The Java Bridge server is not running on All Apps and Add-ons. 08-14-2015 12:55 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 3 | |||
| 0 | |||
| 0 | |||
| 3 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 |
07-10-2015
03:21 AM
yes, I tried it, but the query doesn't return any result. this is my query :
|dbquery "db_sales" "SELECT model, year, product, FROM cars c , product p where v.product=p.idproduct"
| fields model, year, pays, product| where product="$product$"
any ideas
... View more
07-10-2015
02:11 AM
hi,
how can we use where command with a variable that can we get from input text field
<searchTemplate>
| where product =$product$
<input type="text" token="product ">
... View more
07-10-2015
01:23 AM
It works if the data is stored in Splunk server. but if I try to extract data from MySQL database it doesn't work this is the command that I used :
| dbquery "db_ventes" "SELECT model, year, automaker, pays FROM cars c , automaker a where c.automaker=a.automaker " automaker=$automaker$ | fields model, year, automaker, country
<label>sourcetype</label>
<default>splunkd</default>
<choice value="splunk_web_access">audi</choice>
<choice value="splunkd_ui_access">dacia</choice>
</input>
</fieldset>
<option name="showPager">true</option>
<option name="count">20</option>
thank you
... View more
07-09-2015
07:18 AM
hi every one,
how can we add a condition of selection in sql query using db_connect .
what I want to do is to create a input field to give the user the opprtunity to get just data correspending to one automaker (the user will enter his choice in the text field) . below the data that I have in my splunk server
model=focus;year=2000;automaker=ford;country=usa
model=cmax;year=2008;automaker=citroen;country=usa
model=logan;year=2008;automaker=dacia;country=morroco
model=lodgy;year=2008;automaker=dacia;country=morroco
model=golf;year=2008;automaker=volswagen;country=Germany
model=polo;year=2008;automaker=volswagen;country=Germany
model=a4;year=2008;automaker=audi;country=Germany
model=a5;year=2008;automaker=audi;country=Germany
model=a3;year=2008;automaker=audi;country=Germany
model=a3;year=2000;automaker=audi;country=Germany
... View more
07-07-2015
03:26 AM
Can I reindex my data without delete it? because I can't delete data present in the server
... View more
07-07-2015
01:59 AM
I used the parameter with this configuration
BREAK_ONLY_BEFORE=zone
but it doesn't work
... View more
07-07-2015
01:36 AM
how can I use this parameter BREAK_ONLY_BEFORE based on my log ?
thank you
... View more
07-06-2015
07:13 AM
3 Karma
Hello every one,
I have some data in my Splunk server that is not separated correctly. I want to split this data into lines. Below a sample of my data:
06/07/15 15:39:11,000 zone CL=Product;AC=resp;MID=AS5952 ;code=57;time=251;mark=samsung;zone CL=Product;AC=resp;MID=AS5952 ;code=03;time=614;mark=Iphone;zone CL=Product;AC=resp;MID=AS5952 ;code=00;time=506;mark=samsung;zone CL=Product;AC=resp;MID=AS5952 ;code=57;time=274;mark=samsung;zone CL=Product;AC=resp;MID=AS5952 ;code=00;time=892;mark=Iphone;zone CL=Product;AC=resp;MID=AS5952 ;code=57;time=256;mark=samsung;zone CL=Product;AC=resp;MID=AS5952 ;code=00;time=623;mark=samsung;zone CL=Product;AC=resp;MID=AS5952 ;code=57;time=281;mark=samsung;
so what I want to do is to split this log like :
06/07/15 15:39:11,000 zone CL=Product;AC=resp;MID=AS5952 ;code=57;time=251;mark=samsung;
06/07/15 15:39:11,000 zone CL=Product;AC=resp;MID=AS5952 ;code=03;time=614;mark=Iphone;
06/07/15 15:39:11,000 zone CL=Product;AC=resp;MID=AS5952 ;code=00;time=506;mark=samsung;
06/07/15 15:39:11,000 zone CL=Product;AC=resp;MID=AS5952 ;code=57;time=274;mark=samsung;
any help please. thank you .
... View more
06-24-2015
03:00 AM
1 Karma
Hi every one,
I have a problem with splunk server, that it shows that The Java Bridge server is not running. I was looking for this directory $SPLUNK_HOME/var/lib/splunk/persistentstorage/dbx to fix the issue but I didn't find it that means that I didn't find all the files that you talking about.
Have some ideas for my problem
Thank you .
... View more
05-13-2015
12:37 AM
Yes, I'm agree with you, butI found that is very difficult to make somthing that can be applicable to general case. But in my case it works perfectly whit this handling ( I used the regular expression that you send me befor 🙂 https://regex101.com/
Thank you MuS, have a nice day
... View more
05-05-2015
08:42 AM
05-05-2015
05:48 AM
The corret line that we have to put is
source="ok.txt" host="LPO6523" |rex field=_raw "ABC5=\/\w*\W*\/\w*\W*\/\w*\W*\w*\W*\w*\W*\w*\W*\w*\W*\w*\W*(?<DIST>.*).{20}xml"
those 2 links was very helpfull
http://blog.paumard.org/cours/java-api/chap03-expression-regulieres-syntaxe.html
https://regex101.com/
Thank you MuS
... View more
05-05-2015
02:57 AM
ok I will trie and if I find some result I will post a correct answer
... View more
05-05-2015
02:15 AM
This is what I tried. I dont know how it changed.
source="ok.txt" host="LPO6523" |rex field=_raw "ABC5=//////.(?<DIST>.)..*.xml"
... View more
05-05-2015
01:40 AM
Hi ,
I want to extract a part of a text in a new field, and it was very difficult for me .
this is an extract of my log file. what I want to extract is IKEA.
ABC5=/DATAINTER/PROJET/kls-NFS-TDF/nil_ano/input/asd_b1m3_QS_First_Request.IKEA.4578944.201504081236.xml
I tried somyhing like this but it give not a result
source="ok.txt" host="LPO6523" |rex field=_raw "INF1=*.(?<DIST>.*).*.*.xml"
thank you for your help
... View more
04-20-2015
12:46 AM
Thank you for your response, it didn't give me the rigth result because I had a mistake in my source ., It was my fault.
Now it works perfectly thank you sideview have a nice day
... View more
04-17-2015
03:14 AM
Thank you so much Jeffland have a nice day and a nice weekend .
I m from France
... View more
04-17-2015
02:46 AM
you are right. I already created same apps, and now I want to make the same form of the dashboard not the same information . I hope that I was clear. my English is not very well sorry
... View more
04-17-2015
02:28 AM
Thank you, I already use the radia jauge available in splunk tools, but in my intership the boos ask me if I can make samething like the Application Splunk pour VMware
that is why I want to do that 🙂
have a nice day
... View more
04-17-2015
02:06 AM
Hi every one,
I want to know if we can create some dashboards like the one in this picture in this application
Application Splunk pour VMware
( I can't instal this app in my computer )
... View more
- Tags:
- dashboard
04-17-2015
01:37 AM
thank you for your response but the result given by the request is wrong 😞
... View more
04-17-2015
12:40 AM
Thank you for your response.
* so, EventType is a field we can say that is a GameCategory for example.
* Yes, I use searche app.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
Karma from
