Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About p_gurav
p_gurav
Champion
Member since:
09-17-2014
07-27-2020
Community Statistics
| Posts | 970 |
| Solutions | 63 |
| Karma Given | 12 |
| Karma Received | 148 |
| Member Since | 09-17-2014 |
Activity Feed
- Got Karma for Re: AutoLB Volume. 04-07-2025 10:51 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 02-25-2024 04:25 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 01-05-2024 12:57 PM
- Got Karma for Re: Search peer indexer1 has the following message: License Manager: Failed to contact license master: reason='Unable to connect to license master:. 07-31-2023 06:22 AM
- Got Karma for Re: How to forcefully change the current search head captain to actual captain in the search head cluster Environment ?. 07-12-2023 02:24 PM
- Got Karma for Re: round in addcoltotals. 02-10-2023 12:04 PM
- Got Karma for Re: How to forcefully change the current search head captain to actual captain in the search head cluster Environment ?. 10-10-2022 01:46 AM
- Got Karma for How to split a json array into multiple events with separate timestamps?. 09-21-2022 02:16 AM
- Got Karma for Re: splunk dbconnect how to obtain a list of all database connections. 09-02-2022 09:56 AM
- Got Karma for Re: splunk dbconnect how to obtain a list of all database connections. 06-08-2022 08:39 AM
- Got Karma for Re: How do I disable the auto refresh delay on all dashboards?. 02-01-2022 01:51 AM
- Got Karma for Splunk false alerts. 10-25-2021 08:26 AM
- Got Karma for Re: Splunk upgrade from 7.x to 8.x. 09-13-2021 03:15 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 09-10-2021 03:03 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 08-19-2021 01:44 PM
- Got Karma for Re: datamodel command for multilevel data model child datasets. 12-04-2020 11:57 PM
- Got Karma for Re: datamodel command for multilevel data model child datasets. 12-04-2020 11:56 PM
- Got Karma for Re: Splunk Enterprise not working. 11-02-2020 05:47 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 11-02-2020 04:08 AM
- Got Karma for Re: Summary Indexing give duplicated records. 08-05-2020 01:48 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 4 | |||
| 5 | |||
| 0 | |||
| 2 |
08-28-2019
01:30 AM
To props.conf, add the following lines:
[<sourcetype_name>]
TRANSFORMS-<class> = a_b
... View more
08-28-2019
12:54 AM
Could you share the inputs.conf file on HF?
... View more
08-27-2019
01:54 AM
try restarting UF once. The HF configured but not active.
... View more
08-27-2019
01:28 AM
try using else in case command before end .
... View more
08-27-2019
12:33 AM
Try using cloud services module of ITSI:
https://docs.splunk.com/Documentation/ITSICSM/2.4.0/ITSICSM/KPIsandthresholds
... View more
08-27-2019
12:30 AM
Try using delete command:
https://docs.splunk.com/Documentation/Splunk/7.3.1/SearchReference/Delete
Also, this may help to find out duplicates events:
http://www.manvir.net/remove-duplicate-events-from-splunk/
... View more
08-26-2019
04:02 AM
Hi Splunkers,
We are getting critical incidents in Palo alto All incidents dashboard.
We configured ES threat activity notable event with Palo alto threat list as custom threat source. But we are not getting any notable events as same as Palo alto incident feed.
We understand there are two different searches are running behind these two panels.
Does anyone have any idea how we can integrate these incidents in ES? Or ES correlation searches need to be tweaked?
... View more
08-20-2019
10:24 PM
Any help guys!!
... View more
08-20-2019
05:14 AM
Hi Splunkers,
I am working with Splunk add on builder to create REST API input.
I have put REST API e.g. https://abc.com/results?format=json in REST URL and passing username and password as data input parameters.
But I am getting below error:
The response status=401 for request which url=https://abc.com/results?format=json and method=GET
No other parameter has been added.
Can anyone help me to resolve this?
... View more
08-20-2019
12:54 AM
This may help::
https://answers.splunk.com/answers/749516/how-can-gaps-be-detected-in-data.html
... View more
08-19-2019
05:48 AM
This may helpful:
https://docs.splunk.com/Documentation/SplunkCloud/7.2.6/User/DMCoverview#Check_your_total_data_retention_capacity
... View more
07-10-2019
02:50 AM
Hi Splunker,
We are trying to pull data from Kafka queues using Splunk Connect for Kafka at one of our customers. We are using configuration attach in the image below.
The connector is working fine, but we are not able to capture any of the data in Splunk index.
Could you please guide me what troubleshooting steps I need to perform to resolve this?
Thank you in advance.
... View more
- Tags:
- splunk-enterprise
06-18-2019
04:47 AM
Did your forwarder is listed on forwarder management page as a client?
... View more
06-18-2019
04:35 AM
try this:
<your search> | eval level=case(minutes<50 AND minutes>30, "50>Minutes>30", minutes<500 AND minutes>100, "500>Minutes>100" ) | chart values(store) as store over level by _time
... View more
06-17-2019
05:48 AM
Could you please try this:
index=wmi source="C:\\Splunk\\Windows\\WMI\\IMFS_CMDBRawData.csv"
| lookup ping host as Name OUTPUTNEW
| table Name _raw host sent received packet_loss min_ping max_ping avg_ping jitter return_code raw_output
... View more
06-17-2019
05:41 AM
Hi performancemonitoring,
Did you set $JAVA_HOME?
... View more
06-17-2019
05:39 AM
Hi mananthanarayanan,
please go through below document for pre-requisite:
https://docs.splunk.com/Documentation/DBX/3.1.4/DeployDBX/Prerequisites
... View more
05-27-2019
05:55 AM
Is 8089 port is open on forwarder EC2 instance?
... View more
05-23-2019
03:36 AM
Hi Splunkers,
We have a line chart with multi-select where user can select multiple parameter filter.
Now we want to use dual Y-axis based on a parameter selected.
We tried the solution in this link but it didn't work. Please help.
Thanks in advance!!
... View more
05-17-2019
05:25 AM
Try this:
index=XXX | stats count AS "Total", sum(eval(if(eventMessage=="error", 1, 0))) AS Failure|eval Failurerate=(Failure/Total)*100|table Failurerate
... View more
05-09-2019
02:48 AM
Hi Beetej,
You need to configure deploymentclient.conf on your forwarder docker. Please find below doc for the same:
https://docs.splunk.com/Documentation/Splunk/7.2.6/Updating/Configuredeploymentclients
... View more
04-24-2019
07:16 AM
Did you try using splunk internal field called date_year ?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-27-2020
02:54 AM
|
Karma given to
