Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About abhi04
abhi04
Communicator
Member since:
02-12-2018
48m ago
Community Statistics
| Posts | 207 |
| Solutions | 1 |
| Karma Given | 8 |
| Karma Received | 6 |
| Member Since | 02-12-2018 |
Activity Feed
- Posted Re: How avoid the nullroute applying to just one specific source n windows? on Splunk Cloud Platform. 2 hours ago
- Posted Re: How avoid the nullroute applying to just one specific source n windows? on Splunk Cloud Platform. 2 hours ago
- Posted Re: Logs from windows host stops all of a sudden on Splunk Cloud Platform. 5 hours ago
- Posted How avoid the nullroute applying to just one specific source n windows? on Splunk Cloud Platform. 6 hours ago
- Posted Logs from windows host stops all of a sudden on Splunk Cloud Platform. a week ago
- Posted Re: Genesys cloud logs into SPlunk on Splunk Cloud Platform. 2 weeks ago
- Posted Salesforce event logs not ingested into splunk cloud on Splunk Cloud Platform. 2 weeks ago
- Posted Genesys cloud logs into SPlunk on Splunk Cloud Platform. 3 weeks ago
- Posted Re: How to get Genesys cloud logs into splunk? on Splunk Cloud Platform. 3 weeks ago
- Posted Issue with salesforce event logs ingestion on Splunk Cloud Platform. 3 weeks ago
- Posted How to get Genesys cloud logs into splunk? on Splunk Cloud Platform. 3 weeks ago
- Posted Re: Optimizing the search on Splunk Search. 03-13-2024 05:46 PM
- Karma Re: Optimizing the search for bowesmana. 03-13-2024 05:45 PM
- Posted Optimizing the search on Splunk Search. 03-13-2024 10:53 AM
- Posted Splunk alert did not trigger on Splunk Cloud Platform. 03-04-2024 08:06 AM
- Posted how to filter based on hour and minute after using transpose? on Splunk Enterprise. 02-11-2024 10:40 AM
- Posted Re: props on Getting Data In. 02-06-2024 05:58 AM
- Posted Re: props on Getting Data In. 02-05-2024 02:36 PM
- Posted props on Getting Data In. 02-05-2024 01:40 PM
- Got Karma for Re: Send the logs level info to null queue. 12-12-2023 09:30 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
05-31-2018
06:07 AM
Thanks Niketnilay,
The panel shows up with info but the title wont show when using
... View more
05-31-2018
05:53 AM
5/29/18
11:36:58.000 PM
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-29-22.36.59)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-30-03.05.45)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-30-20.00.03)
5/29/18
11:36:50.000 PM
... 13 lines omitted ...
/afiw/batch/scripts/gc01iwcdl_ins.ksh: Job gc01iwcdl_ins - started - time=(2018-05-30-20.01.39)
/afiw/batch/scripts/gc01iwcdl_ins.ksh: Job gc01iwcdl_ins - started - time=(2018-05-30-21.00.02)
/afiw/batch/scripts/gc01iwcdl_ins.ksh: Job gc01iwcdl_ins - started - time=(2018-05-30-21.01.00)
... View more
05-31-2018
05:10 AM
Yes,we have multiple start time and end time for a particular job for same day.we want to take the latest end time as end time and oldest start time as start time for that particular date and job ignoring other time .
... View more
05-31-2018
05:03 AM
YEs ,
So for one job say gc01iwcdl we have multiple start time and end time mentioned for date 29 as you can see below. So we want the oldest start time mentioned as start time and latest end time as end time for this job for each day for last 7 days.
5/29/18
11:36:58.000 PM
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-29-22.36.59)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-30-03.05.45)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-30-20.00.03)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-30-20.01.40)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-30-21.00.02)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-30-21.01.01)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-30-22.00.03)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-30-22.01.01)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-30-23.00.02)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - ENDED - time=(2018-05-30-23.01.00)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-29-22.36.58)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-03.05.43)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-20.00.00)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-20.01.39)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-21.00.01)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-21.01.00)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-22.00.00)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-22.01.00)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-23.00.00)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-23.01.00)
... View more
05-31-2018
04:25 AM
Hi Niketnilay,
The jobname is being extracted using regex.below is the source for the dashboard which is not working.
DFS IW Batch Job Monitor Dashboard
DFS IW Batch Job Monitor
<input type="time" token="field1">
<label></label>
<default>
<earliest>-24h</earliest>
<latest>now</latest>
</default>
</input>
<panel>
<table>
<title>IW Batch Job Duration</title>
<search>
<query>index=auto_prod_iw* "/afiw/batch/scripts/gc01*.ksh" "Job gc01* -" "started - time=" | dedup _raw |rex "\w+\/\w+\/\w+\/(?<Job_Name>\w+)\.ksh" | eval StartTime=strftime(_time,"%Y/%m/%d %H:%M:%S") | append [| search index=auto_prod_iw* "/afiw/batch/scripts/gc01*.ksh" "Job gc01* -" ("ended - time=" OR "ENDED - time") | dedup _raw |rex "\w+\/\w+\/\w+\/(?<Job_Name>\w+)\.ksh" | eval EndTime=strftime(_time,"%Y/%m/%d %H:%M:%S")] | transaction Job_Name |dedup Job_Name | table Job_Name StartTime EndTime duration |eval Duration_Min= round((duration/60),2) | rename duration AS Duration_Sec</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
</search>
<option name="wrap">true</option>
<option name="rowNumbers">false</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">cell</option>
<option name="count">10</option>
<drilldown>
<set token="tokComponent">$row.Job_Name$</set>
</drilldown>
</table>
</panel>
<panel>
<event>
<title>Errors</title>
<search>
<query>index=auto_prod_iw* "/afiw/batch/scripts/gc01*.ksh" "error" OR "abort"</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
</search>
</event>
</panel>
<panel>
<table>
<title>Last 7 Days</title>
<search>
<query>index=auto_prod_iw* "/afiw/batch/scripts/gc01*.ksh" "Job gc01* -" "started - time=" | dedup _raw |rex "\w+\/\w+\/\w+\/(?<Job_Name>\w+)\.ksh" |Job_Name="$tokComponent$"| eval StartTime=strftime(_time,"%Y/%m/%d %H:%M:%S") | append [| search index=auto_prod_iw* "/afiw/batch/scripts/gc01*.ksh" "Job gc01* -" ("ended - time=" OR "ENDED - time") | dedup _raw |rex "\w+\/\w+\/\w+\/(?<Job_Name>\w+)\.ksh" | Job_Name="$tokComponent$"|eval EndTime=strftime(_time,"%Y/%m/%d %H:%M:%S")] | transaction Job_Name |dedup Job_Name | table Job_Name StartTime EndTime duration |eval Duration_Min= round((duration/60),2) | rename duration AS Duration_Sec</query> <earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
</search>
</table>
</panel>
... View more
05-31-2018
02:34 AM
How to get the job start time, end time and duration for each day for last 7 days? Below is the sample log:
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-20.01.39)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-21.00.01)
/afiw/batch/scripts/gc01iwcdl_afdw.ksh: Job gc01iwcdl_afdw - started - time=(2018-05-30-21.01.00)
... View more
- Tags:
- splunk-enterprise
05-31-2018
01:41 AM
I have a dashboard which have panel 1 which displays job start time, end time and time duration of the job run. Now I want to create another panel i.e. panel 2 in the same dashboard where clicking on the job in panel 1 will display that job start time, end time and time duration of the job run for last 7 days. Please help on the same.
... View more
05-30-2018
02:11 AM
Well, yes, I dont see "permisssion" option in the dashboard for me. So how can the pdf scheduler can be made viewed to other users? they are unable to see the pdf scheduled for that dashboard whereas I can see that.
... View more
05-29-2018
08:04 AM
2 Karma
I have a dashboard created and I scheduled a pdf for it but when checked by other users they are not able to see the pdf scheduler and are getting the option for scheduling pdf again. Can someone explain this to me?
... View more
05-16-2018
11:41 AM
Thanks for the quick help.
... View more
05-16-2018
10:35 AM
So the [^_/] will search for characters untill _ and / is found?
If yes then why we are nearing /,only _ should be negated.please explain.
... View more
05-16-2018
09:06 AM
Can you please explain the logic if that's possible?
... View more
05-16-2018
08:39 AM
I have source as : /log/web/output/sat1svmdb1210_0511_kernel.log
/log/web/output/sat2svmdb0100_7689_kernel.log
I want to capture the hostname i.e. sat1svmdb1210 and sat2svmdb0100 in a field and display all the hostname. How can I do it?
... View more
05-16-2018
08:31 AM
I have a lookup excel sheet with the application name, hostname, and IP address. I want to use it in a Splunk query and how shall I do it?
... View more
04-25-2018
12:42 AM
What is the difference between splunk admin and a splunk developer?
... View more
04-05-2018
04:33 AM
How to put/send the result of a report in a index?
... View more
- Tags:
- splunk-enterprise
03-29-2018
11:31 PM
It's running on 8000.splunkd is running.
... View more
03-29-2018
11:30 PM
Getting below error:
Error searchprocessrunner - performed process=/8000 hung up
... View more
03-29-2018
10:07 PM
1 Karma
How to start splunk web I have tried splunk restart but still web is not up?
... View more
- Tags:
- splunk-enterprise
03-24-2018
09:01 AM
How to create dashboard for licensing information containing info like which meeting pools,indexers,host,source are utilizing more license?
... View more
03-24-2018
07:28 AM
I am into advanced dashboard currently. In my recent interview I have been asked about the architecture including the Cpu,memory and IPs for 2 TErabyte of data for splunk.How should I answer that?
... View more
- Tags:
- splunk-enterprise
03-19-2018
07:48 PM
Thanks niketnilay and tiagofbmm.
... View more
03-19-2018
07:14 PM
Hi Frank,
Would you be having detailed steps for spinning up multiple instances with virtual box as well?
... View more
03-19-2018
05:54 AM
I wanted to practise for distributed environment for which separate instance would be required.I am using windows 10 currently.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
48m ago
|
Karma from
Karma given to
