Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About shellnight
shellnight
Explorer
Member since:
10-08-2014
06-05-2020
Community Statistics
| Posts | 47 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 10-08-2014 |
Activity Feed
- Got Karma for How to search for hosts with an issue where a type of event was not followed by another type within an hour?. 06-05-2020 12:47 AM
- Posted Re: How to search the count and average count of events per hour? on Splunk Search. 08-14-2015 05:26 AM
- Posted How to search the count and average count of events per hour? on Splunk Search. 08-14-2015 03:25 AM
- Tagged How to search the count and average count of events per hour? on Splunk Search. 08-14-2015 03:25 AM
- Posted Re: Is it impossible to combine the results of a normal search and threshold search in a single table on Splunk Search. 06-18-2015 03:10 AM
- Posted Re: Is it impossible to combine the results of a normal search and threshold search in a single table on Splunk Search. 06-17-2015 08:25 AM
- Posted Re: Is it impossible to combine the results of a normal search and threshold search in a single table on Splunk Search. 06-17-2015 06:50 AM
- Posted Re: Is it impossible to combine the results of a normal search and threshold search in a single table on Splunk Search. 06-17-2015 04:46 AM
- Posted Re: Is it impossible to combine the results of a normal search and threshold search in a single table on Splunk Search. 06-17-2015 04:12 AM
- Posted Is it impossible to combine the results of a normal search and threshold search in a single table on Splunk Search. 06-17-2015 03:19 AM
- Posted Need to get stats count by day on Splunk Search. 05-31-2015 06:10 AM
- Tagged Need to get stats count by day on Splunk Search. 05-31-2015 06:10 AM
- Tagged Need to get stats count by day on Splunk Search. 05-31-2015 06:10 AM
- Tagged Need to get stats count by day on Splunk Search. 05-31-2015 06:10 AM
- Posted how to run a schedule search and Set alert conditions for scheduled searches and sent results by mail on Reporting. 03-13-2015 09:15 AM
- Tagged how to run a schedule search and Set alert conditions for scheduled searches and sent results by mail on Reporting. 03-13-2015 09:15 AM
- Posted How to search for and display all hosts that have more than 1 eventtype? on Splunk Search. 12-29-2014 06:59 AM
- Tagged How to search for and display all hosts that have more than 1 eventtype? on Splunk Search. 12-29-2014 06:59 AM
- Tagged How to search for and display all hosts that have more than 1 eventtype? on Splunk Search. 12-29-2014 06:59 AM
- Posted Re: How to search for hosts with an issue where a type of event was not followed by another type within an hour? on Splunk Search. 12-11-2014 04:54 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 |
01-13-2021
07:10 AM
I have tried lots of the versions available and I'm not able to install any it seems that the forwarder is not compatible with that version of windows. Is there any other tool that I can try? David
... View more
08-14-2015
05:26 AM
THANK YOU VERY MUCH !!!
... View more
06-18-2015
03:10 AM
hi fdi01 , I dont see any mention CPU utlization in the query that you have provided above . Please note that i need to see all other event types + the ones where CPU is higher than 50%
The table should look like this
machine1 - disk failure
machine2 - virus failure
machine4 0- cpu utlization 80
machine5 - ram crash
shellnight · 17 hours ago
I am afraid you are not understanding the request.
I need the list of all problems in machine but exclude the occurences for cpu utlization less than 50
... View more
03-13-2015
09:22 AM
Is your question about how to construct the search itself, or how to set up the alert?
Have you read the Alerting Manual, especially the Create scheduled alerts topic?
... View more
12-29-2014
07:52 AM
Perhaps something like this?
index=foo | stats dc(eventtype) as eventCount by hostname | where eventCount > 1 | table hostname eventtype
... View more
11-26-2014
01:49 AM
please can you provide a update on this issue
... View more
12-29-2014
11:42 PM
Hi @shellnight
@somesoni2 updated the query. can you confirm whether or not this worked for you?
... View more
11-09-2014
12:48 AM
Yes martin_mueller did provide a way using subsearch and it gives the right information but the event count and sparkline for the threshold event was incorrect .
Though they were 5 events for the host , it came as 1 event with a flat sparkline instead of coming as 5.just need that to be corrected
... View more
11-05-2014
11:53 AM
Update please
... View more
10-25-2014
10:38 AM
hello martin
can you give an update on this
Thanks a lot for your help in advance
... View more
10-08-2014
02:38 PM
2 Karma
Try this
yoursearchhere
| stats count by ids source
| where count > 2
... View more
