Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About jaibalaraman
jaibalaraman
Path Finder
Member since:
09-28-2020
11-30-2024
Community Statistics
| Posts | 144 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 3 |
| Member Since | 09-28-2020 |
Activity Feed
- Posted Re: How to freeze the tile in the dashboard on Dashboards & Visualizations. 11-30-2024 02:54 PM
- Posted Re: How to freeze the tile in the dashboard on Dashboards & Visualizations. 11-27-2024 01:38 PM
- Posted How to freeze the tile in the dashboard on Dashboards & Visualizations. 11-26-2024 07:11 PM
- Posted How to share the dashboard as URL ??? on Dashboards & Visualizations. 11-26-2024 06:53 PM
- Posted Re: How to create reset in the dashboard on Getting Data In. 11-07-2024 01:01 AM
- Posted How to create reset in the dashboard on Getting Data In. 11-06-2024 02:11 PM
- Posted Re: How to display day , month and time in single value tile on Dashboards & Visualizations. 11-05-2024 04:16 PM
- Posted How to display day , month and time in single value tile on Dashboards & Visualizations. 11-04-2024 08:08 PM
- Posted How to install Splunk UF to AIX ? on Deployment Architecture. 10-29-2024 03:00 PM
- Tagged How to install Splunk UF to AIX ? on Deployment Architecture. 10-29-2024 03:00 PM
- Posted Re: How to convert the value into months , days on Splunk Search. 10-22-2024 08:31 PM
- Posted How to convert the value into months , days on Splunk Search. 10-22-2024 03:54 PM
- Posted Re: How to find out Server Uptime & Downtime on Splunk Search. 10-14-2024 05:26 PM
- Posted How to find out Server Uptime & Downtime on Splunk Search. 10-14-2024 04:15 PM
- Posted How to find out overall health status for VMWARE on Splunk ITSI. 09-08-2024 09:15 PM
- Posted Re: Missing Data in the Dashboard Tile on Splunk Search. 08-30-2024 02:42 AM
- Posted Re: Missing Data in the Dashboard Tile on Splunk Search. 08-30-2024 02:32 AM
- Posted Missing Data in the Dashboard Tile on Splunk Search. 08-30-2024 01:46 AM
- Posted Re: Spl query is not working on Splunk Search. 08-21-2024 08:26 PM
- Posted Re: Spl query is not working on Splunk Search. 08-21-2024 06:12 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-27-2021
07:08 PM
Hi Team When i tried running the below eval command, i am getting some error message often. I wrote this below command to find out number of Samsung device used in a month. eval Next= if(match(cs_user_agent, "SM-G980F"),"Samsung Galaxy S20-5G",if(match(cs_user_agent, "SM-G975W"),"Samsung Galaxy S10+",if(match(cs_user_agent, "SM-G935F"),"Samsung Galaxy S7 edge ",if(match(cs_user_agent, "SM-T350"),"Samsung Galaxy Tab",if(match(cs_user_agent, "SM-G950"),"Samsung Galaxy S8",if(match(cs_user_agent, "SM-G998"),"Samsung Galaxy S21 Ultra-5G",if(match(cs_user_agent, "SM-J120Z"),"Samsung Galaxy J1",if(match(cs_user_agent, "SM-A217F"),"Samsung Galaxy A21s",if(match(cs_user_agent, "SM-G988"),"Samsung Galaxy S20 Ultra 5G",if(match(cs_user_agent, "SM-A105G"),"Samsung Galaxy A10",if(match(cs_user_agent, "SM-A525"),"Samsung Galaxy A52",if(match(cs_user_agent, "SM-G991"),"Samsung Galaxy S21 5G",if(match(cs_user_agent, "SM-A225F"),"Samsung Galaxy A22",if(match(cs_user_agent, "SM-A725"),"Samsung Galaxy A72",if(match(cs_user_agent, "SM-G781"),"Samsung Galaxy S20 FE 5G",if(match(cs_user_agent, "SM-F900U"),"Samsung Galaxy Fold",if(match(cs_user_agent, "SM-A326"),"Samsung Galaxy A32 5G",if(match(cs_user_agent, "SM-F700"),"Samsung Galaxy Z Flip3 5G",if(match(cs_user_agent, "SM-A226"),"Samsung Galaxy A22 5G",if(match(cs_user_agent, "SM-N986"),"Samsung Galaxy Note20 Ultra 5G",if(match(cs_user_agent, "SM-A526"),"Samsung Galaxy A52 5G",if(match(cs_user_agent, "SM-A515"),"Samsung Galaxy A51",if(match(cs_user_agent, "SM-A217"),"Samsung Galaxy A21s",if(match(cs_user_agent, "SM-M326"),"Samsung Galaxy M32 5G",if(match(cs_user_agent, "SM-T7"),"Samsung Galaxy Tab S7 FE",if(match(cs_user_agent, "SM-T50"),"Samsung Galaxy Tab A7 10.4",if(match(cs_user_agent, "SM-T50"),"Samsung Galaxy Tab A7 10.4",if(match(cs_user_agent, "SM-T50"),"Samsung Galaxy J7 Prime",if(match(cs_user_agent, "SM-M515"),"Samsung Galaxy M51",if(match(cs_user_agent, "SM-A505"),"Samsung Galaxy A50",if(match(cs_user_agent, "SM-T22"),"Samsung Galaxy Tab A7 Lite",if(match(cs_user_agent, "SM-G930"),"Samsung Galaxy S7",if(match(cs_user_agent, "SM-N960"),"Samsung Galaxy Note9",if(match(cs_user_agent, "SM-J700"),"Samsung Galaxy J7",if(match(cs_user_agent, "SM-G970"),"Samsung Galaxy S10e",if(match(cs_user_agent, "SM-M127"),"Samsung Galaxy M12",if(match(cs_user_agent, "SM-N970"),"Samsung Galaxy Note10",if(match(cs_user_agent, "SM-A115"),"Samsung Galaxy A11",if(match(cs_user_agent, "SM-T87"),"Samsung Galaxy Tab S7",if(match(cs_user_agent, "SM-A315"),"Samsung Galaxy A31",if(match(cs_user_agent, "SM-M315F"),"Samsung Galaxy M31",if(match(cs_user_agent, "SM-A205"),"Samsung Galaxy A20",if(match(cs_user_agent, "SM-J500"),"Samsung Galaxy J5",if(match(cs_user_agent, "SM-T97"),"Samsung Galaxy Tab S7+","other")))))))))))))))))))))))))))))))))))))))))))) Note - could some one please help me finding out the best way to get the expected outcome from the user agent or please help to avoid the error.
... View more
05-23-2021
09:17 PM
05-23-2021
09:17 PM
H Team I tried the below command , but the output is incorrect where all the count are showing under other instead . SPL - | stats count(eval(match(User_Agent, "Firefox"))) as "Firefox", count(eval(match(User_Agent, "Chrome"))) as "Chrome", count(eval(match(User_Agent, "Safari"))) as "Safari", count(eval(match(User_Agent, "MSIE"))) as "IE", count(eval(match(User_Agent, "Trident"))) as "Trident", count(eval(NOT match(User_Agent, "Chrome|Firefox|Safari|MSIE|Trident"))) as "Other" | transpose | sort by User_Agent Updating Media
... View more
05-20-2021
07:22 PM
Hi Sorry for the late responce Unfortunately TA - user agent app is not support for Splunk cloud user Also , TA Browscap app is also not supported in Splunk 8.0 version So could you please on this.. Thanks
... View more
05-10-2021
09:26 PM
However, i am trying to get only the browser count from the spl query Mozilla - 400 Chrome - 500 IE - 899 Thanks
... View more
05-10-2021
09:25 PM
Hi yes, i tried Regex it working for individual browser like below sample , Device User agent Rex command Iphone Mozilla/5.0 (iPhone; CPU iPhone OS 14_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.1 Mobile/15E148 Safari/604.1 \((?<hardware_type>\w+);\s+[^ ]+\s(?<os_family>\w+\s[^ ]+)\s+(?<os_version>\w+)\s[^ ]+\s[^ ]+\s\w+\s\w.\s(?<browser_engine>\w+)\/(?<brow_engine_version>\w+[^ ]+)\s+\(.+\)\s+(?<browser_version>\w+\/[^ ]+)\s+\w+\/\w+\s(?<browser>\w+) Ipad Mozilla/5.0 (iPad; CPU OS 12_4_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Mobile/15E148 Safari/604.1 \((?<hardware_type>\w+);\s+[^ ]+\s(?<os_family>\w+)\s(?<os_version>\w+)\s[^ ]+\s[^ ]+\s\w+\s\w.\s(?<browser_engine>\w+)\/(?<brow_engine_version>\w+[^ ]+)\s\(.+\)\s+(?<browser_version>\w+\/[^ ]+)\s\w+\/\w+\s(?<browser>\w+) Window Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 Edge/87.0.664.66 \((?<os_family>\w+)\s+\w+\s+(?<os_version>[^;]+)[^\)]+\)\s(?<browser_egnine>\w+)\/(?<brow_engine_version>\w+[^ ]+)\s\(.+\)\s[^ ]+\s[^ ]+\s(?<browser>\w+)\/(?<browser_version>\w+[^ ]+) Macintosh Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.2 Safari/605.1.15" \((?<hardware_type>\w+);\s\w+\s+(?<os_family>\w+)\s(?<os_version>\w+\s[^ ]+\s[^ ]+)\s(?<browser_enginer>\w+)\/(?<brow_engine_version>\w+[^ ]+)\s\(.+\)\s(?<browser_version>\w+\/[^ ]+)\s(?<browser>\w+) Android / Vodoafone\ Mozilla/5.0 (Linux; Android 10; SM-A217F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.101 Mobile Safari/537.36 \(\w+;\s(?<os_family>\w+)\s(?<os_version>\w+);\s(?<device_brand_model>\w+[^ ]+)\s(?<browser_enginer>\w+)\/(?<brow_engine_version>\w+[^ ]+)\s\(.+\)\s(?<browser>\w+)\/(?<browser_version>\w+[^ ]+)\s(?<hardware_type>\w+)
... View more
05-10-2021
09:23 PM
Hi richgalloway Thanks for your message Yes, i tried executing's the SPL command found no error however i am not getting any statistics result
... View more
05-06-2021
07:08 PM
Hi team I tried the below spl eval command index=aws Website="*" | stats count(eval(match(User_Agent, "Firefox"))) as "Firefox", count(eval(match(User_Agent, "Chrome"))) as "Chrome", count(eval(match(User_Agent, "Safari"))) as "Safari", count(eval(match(User_Agent, "MSIE"))) as "IE", count(eval(match(User_Agent, "Trident"))) as "Trident", count(eval(NOT match(User_Agent, "Chrome|Firefox|Safari|MSIE|Trident"))) as "Other" | transpose | sort by User_Agent When i use this to my Splunk script, it gives all data to "Other". Firefox=0, Chrome=0 IE=0, Thanks
... View more
Labels
- Labels:
-
eval
05-06-2021
06:55 PM
Hi Team I am trying to extract the OS details from the user agent using the below eval command, however I am not able to see new filed was created (test) after i executed the spl query index=aws Website="*" | eval test = case(match(useragent,"Windows .. 5\.1"),"Windows XP",match(useragent,"droid"),"Android",match(useragent,"Windows NT 6.1"),"Windows 7") Any help please Thank s
... View more
Labels
- Labels:
-
eval
03-28-2021
04:45 PM
Hi Sorry , i couldn't find any information. Could you please share any useful link please
... View more
03-25-2021
02:25 PM
Hi Is there any app in Splunk to monitor ups logs or any sample, demo ups monitoring dashboard available which I use as reference. Thanks
... View more
- Tags:
- ups
02-08-2021
07:30 PM
Hi Team Can any one help me on this please ??
... View more
02-01-2021
03:19 PM
Hi Splunk team Please find below image for sample log file
... View more
02-01-2021
02:00 PM
Hi I am happy to share but unfortunately i don't have access to the log file. Sorry Thanks
... View more
02-01-2021
01:48 PM
Hi No, i am still waiting for an answer. Thanks
... View more
01-28-2021
06:34 PM
I am able to search up to the below image after that i am confused what is the next action to find out
... View more
01-28-2021
06:33 PM
Hi I have seen a significant traffic increase (Network In ) in our environment. However i tried investigating though in Splunk but i i am finding difficulties to validate the cause ? Any help or guidance to a potential solution will be much appreciated. Thank you!
... View more
- Tags:
- AWS autoscaling
01-27-2021
07:53 PM
Hi Yes, i tried the SPL command and still same issue
... View more
01-27-2021
06:53 PM
Please find below image
... View more
01-27-2021
06:52 PM
Hi I need help in determining the browser that appear in our logs. I believe the simple way to use the app TA - UA parser or an external script but unfortunately i do not have enough access rights to use the tools. SPL command - index=aws sourcetype = * Website="*" | stats count(eval(match(User_Agent, "Firefox"))) as "Firefox", count(eval(match(User_Agent, "Chrome"))) as "Chrome", count(eval(match(User_Agent, "Safari"))) as "Safari", count(eval(match(User_Agent, "MSIE"))) as "IE", count(eval(match(User_Agent, "Trident"))) as "Trident", count(eval(NOT match(User_Agent, "Chrome|Firefox|Safari|MSIE|Trident"))) as "Other" | transpose | sort by User_Agent I tried the above command, it gives all data to "Other". Firefox=0, Chrome=0 IE=0
... View more
- Tags:
- User agent
01-12-2021
06:12 PM
Hi Due to recent update on "Adobe Flash Player " not supported in any browser Internet explorer, chrome, etc. Is there any option in Splunk which works exactly same like " Nimsoft " CA. I have found app in Splunk which support AS400 " Splunk for iSeries AS400 ". Could anyone give me more information on this app. Link- https://splunkbase.splunk.com/app/633/#/overview Thanks
... View more
- Tags:
- as400
01-11-2021
07:20 PM
Hi I tried the above rex command getting error msg. Sorry about my poor knowledge in Splunk | rex "(\((?<hardware_type>\w+);\s+[^ ]+\s(?<os_family>\w+\s[^ ]+)\s+(?<os_version>\w+)\s[^ ]+\s[^ ]+\s\w+\s\w.\s(?<browser_engine>\w+)\/(?<brow_engine_version>\w+[^ ]+)\s+\(.+\)\s+(?<browser_version>\w+\/[^ ]+)\s+\w+\/\w+\s(?<browser>\w+))|(\(\w+;\s\w;\s(?<os_family>\w+)\s(?<os_version>\w+);\s[^ ]+\s(?<device_brand_model>\w+\s[^ ]+\s[^ ]+)\s[^ ]+\s[^ ]+\s(?<browser_engine>\w+)\/(?<brow_engine_version>\w+[^ ]+)\s\(.+\)\s\w+\/[^ ]+\s[^ ]+\s(?<hardware_type>\w+)\s[^ ]+\s(?<browser>\w+\/\w+)\/(?<browser_version>\w+[^ ]+))
... View more
- Tags:
- User agent
01-10-2021
07:13 PM
Hi Could d you please give me some sample how do i join multiple REX command. Sorry i am new and learning Splunk. Thanks
... View more
01-07-2021
12:41 PM
Hi It seems the browscap is not compatible with our version of Splunk. Could you please recommend list of various option ( Addon app ) to capture user agent details. Thanks
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-30-2024
06:15 PM
|
