Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About harshavrath
harshavrath
Contributor
Member since:
02-19-2014
06-05-2020
Community Statistics
| Posts | 152 |
| Solutions | 1 |
| Karma Given | 68 |
| Karma Received | 3 |
| Member Since | 02-19-2014 |
Activity Feed
- Karma Re: Database Connection for richgalloway. 06-05-2020 12:46 AM
- Karma Re: Disk Space Error for MuS. 06-05-2020 12:46 AM
- Karma Re: Disk Space Error for MuS. 06-05-2020 12:46 AM
- Karma Re: Disk Space Error for MuS. 06-05-2020 12:46 AM
- Karma Re: Disk Space Error for MuS. 06-05-2020 12:46 AM
- Karma Re: Disk Space Error for MuS. 06-05-2020 12:46 AM
- Karma Re: Disk Space Error for MuS. 06-05-2020 12:46 AM
- Karma Re: Database Connection for kaufmanm. 06-05-2020 12:46 AM
- Karma Re: Database Connection for richgalloway. 06-05-2020 12:46 AM
- Karma Re: Disk Space Error for MuS. 06-05-2020 12:46 AM
- Karma Re: Database Connection for richgalloway. 06-05-2020 12:46 AM
- Karma Re: Getting Data from Database's for richgalloway. 06-05-2020 12:46 AM
- Karma Re: Getting Data from Database's for richgalloway. 06-05-2020 12:46 AM
- Karma Re: Getting Data from Database's for dart. 06-05-2020 12:46 AM
- Karma Re: Getting Data from Database's for Ayn. 06-05-2020 12:46 AM
- Karma Re: Splunk Forwarder,Installation for alacercogitatus. 06-05-2020 12:46 AM
- Karma Re: Installation for MuS. 06-05-2020 12:46 AM
- Karma Re: Splunk Installation for richgalloway. 06-05-2020 12:46 AM
- Karma Re: Disk Space Error for dmaislin_splunk. 06-05-2020 12:46 AM
- Karma Re: Delete/clean all the contents of splunk for chimbudp. 06-05-2020 12:46 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
05-13-2014
10:53 PM
Hi,
The output is in EPOCh(Unix)Time you can convert it by using |fieldformat NEW_Field=strftime(date/Time_field."%d-%m-%Y %H: %M: %S")
... View more
05-13-2014
01:53 AM
Hi David,
According to your link
http://docs.splunk.com/Documentation/Splunk/6.0.3/Indexer/Moveanindex#For_Windows_users
In Step-4 Copying the Indexes to new path
it is given as
copy "C:\Program Files\Splunk\var\lib\splunk\." D:\new\path\for\index /s /e /v /o /k
But in my Splunk Instance the var\\lib has occupied very less space but my var\\log\\splunk has occupied 1.52GB.
... View more
05-02-2014
03:17 AM
The query that I used is
source="Logfile.log" | rex field=_raw "(?i) Number: (?P [^ ]+)" | search SERIAL_NUM_CD="*" | join SERIAL_NUM_CD[search source="IndexeddbDATA"]
I’m able to get the matching fields as output from the Log file but my requirement is I want the matching fields from both the log as well as DB to be displayed.
... View more
05-02-2014
03:10 AM
This might be helpful
http://docs.splunk.com/Documentation/Splunk/6.0.3/Knowledge/ExtractfieldsinteractivelywithIFX
this is the link for Automatic generation of rex
Watch this video
http://www.splunk.com/view/SP-CAAADUY
... View more
04-30-2014
05:18 AM
http://answers.splunk.com/answers/126360/disk-space-error
this is my post after which i changed the path in General Settings
... View more
04-30-2014
05:07 AM
long time ago I have changed the path in System Settings>General Settings under that "Path to indexes=Specified the path"
So from then on all my indexed data is located in the Specified path
So i wanted to know what is the cause for the 1GB of data that is been populated under C:Program Files\Splunk\var\log\splunk
... View more
04-30-2014
02:16 AM
Hi,
Splunk is installed in C-drive C:\Program Files\Splunk\var\log\splunk
My Question is can i move the splunk folder(which has occupied 1.04GB) to some otheer drive.
Has anyone come across this issue, I really need your help splunkers.
Any Help is Appreciated,
Thanks.
... View more
04-29-2014
07:14 AM
in query its Caps only, after i commented it was automatically converted into lower case.
... View more
04-29-2014
06:43 AM
source="logFILE"| rex field=_raw "(?i) Number: (?P [^ ]+)"|join SERIAL_NUM_CD[search source="IndexeddbDATA"]
I tried the above query its working, but other non matching fields are also displayed.
... View more
04-28-2014
06:29 AM
Hi,
I have indexed few records from my DB into Splunk & an log file is also indexed into Splunk. There is one matching Field in both the indexed sources i.e, Serial Number.
My question is how can i output only the matching Events with the same Serial Number using Splunk Search.
Any Help is Appreciated,
Thanks.
... View more
04-23-2014
08:00 AM
can you provide an example or link as how to use the outputlookup command.
... View more
04-23-2014
05:59 AM
the query works
SELECT * FROM table_NM WHERE ROWNUM<=30 AND TRUNC(CREATED_DT) BETWEEN to_date('04-10-2014','mm/dd/yyyy') AND to_date('04-10-2014','mm/dd/yyyy') {{AND $rising_column$ > ?}} ORDER BY CREATED_DT ASC
i was able to index data into splunk.
... View more
04-22-2014
08:49 AM
if i schedule an cron how will i be able to solve the CREATED_DT issue..?
... View more
04-22-2014
08:46 AM
SELECT * FROM table_NM WHERE ROWNUM<=30 AND TRUNC(CREATED_DT) BETWEEN to_date('04-10-2014','mm/dd/yyyy') AND to_date('04-10-2014','mm/dd/yyyy') {{AND $rising_column$ > ?}} ORDER BY CREATED_DT ASC
... View more
04-22-2014
08:37 AM
won't it be slow. I mean after i configured my Oracle DB i used dbquery to get the results from DB it takes very long time to fetch the results.
... View more
04-22-2014
08:31 AM
you mean I'm supposed to do it the other way, the reverse of what I'm doing.
... View more
04-22-2014
08:28 AM
Hi,
I have installed Splunk & dbx in windows platform is there a way by which i can index my Oracle table records every 12 hours.Can i automate my indexing process.
Any video or doc that i can refer.
Any Help is Appreciated,
Thanks.
... View more
04-22-2014
08:23 AM
I have installed dbx & indexed few records from an table,i have an log file which i want to link to the indexed data.Is it possible..?
... View more
04-21-2014
02:51 AM
Hi,
Need info on why lookup is necessary what is the use of it.
I have a scenario under which i have indexed 30 records from my Oracle DB into Splunk & have few log files which contain few attributes of the indexed data, My question is how can i link these two.
Please provide some video link or an PDF to refer.
Any Help is Appreciated,
Thanks.
... View more
04-16-2014
05:19 AM
its working thanks, the state.xml file under global was corrupted so i just copied the state.xml from my other db-entries.
... View more
04-16-2014
04:32 AM
Hi guys, I'm facing problems with dbx my Java Bridge is not starting so by reading few answers i got to know it might be the case that the state.xml be corrupted,when i checked the state.xml file its empty.So what I'm i supposed to include in the state.xml
... View more
04-16-2014
03:11 AM
Hi,
If your rising column field is your date field that you are mentioning then its not possible.
If its not then you can use
select to_char(date_attribute,'YYYY-MM-DD HH24:MI:SS') date_attribute,id from table_name {{WHERE $rising_column$ > ?}}
... View more
