About karthikbalakris

karthikbalakris · ‎04-16-2013

Ayn, She is trying to ask the following: there is a log file whose name is the date stamp itself. For Ex: 3-29-2013.log, 3-30-2013.log added to this there are other logs in the same directory which has a date stamp sufficed to it. so *2013.log isnot possible. how can we now configure the input.conf to read these logs?

karthikbalakris · ‎03-29-2013

thanks for the answer... but i tried this many times and i was able to telnet to the server.

karthikbalakris · ‎03-29-2013

hi i am sure i am missing something silly but honestly could not identify why i am getting this error "DeploymentClient - Unable to send handshake message to deployment server. Error status is: not_connected" here is my serverclass.conf : LINUX FORWARDERS [serverClass:all_linux_forwarder] whitelist.0 = 172.23.175.* stateOnClient=enabled restartSplunkd = true [serverClass:all_linux_forwarder:app:unix] stateOnClient=enabled restartSplunkd = true Here is my deployment client: [deployment-client] [target-broker:deploymentServer] targetUri = 192.168.169.59:8889 *8889 is the mgmt port in our environment. i tried reload deployment-server, i restarted splunk and the forwarder several time. can any one help me why i am seeing this issue? Much thanks in advance

karthikbalakris · ‎11-26-2012

i did this. i changed the already existing commands in the nested if structure of the ps.sh file that comes with *NIX app to ps-ef | grep and i tried to execute the file on the linux server itself by typing ./ps.sh upon doing this i got the following error: [karthik.balakrishnan@vtormftqa01 bin]$ ./ps.sh ERROR: Unsupported SysV option.

karthikbalakris · ‎11-26-2012

hi all, i need to monitor process on linux servers. normlly i use ps -ef | grep java to see if my procees arae running. i need to implement this in splunk. can some one help on what should i put on the ps.sh file to get the result of this command on my splunk? I am using RHEL. version varies from server to server.

karthikbalakris · ‎11-16-2012

hi all, How do i monitor the processes that are running on Linux similar to monitoring services in windows. in windows i use WMI:SERVICES to do. but i am not sire of the correct way to do it on Linux processes. Kindly help.

karthikbalakris · ‎11-12-2012

Raw Data for Windows: 1 » 11/12/12 4:46:20.890 PM 20121112164620.890625 PercentProcessorTime=0 PercentUserTime=0 wmi_type=CPUTime host=HPSM_QA_APP Options| sourcetype=WMI:CPUTime Options| source=WMI:CPUTime Options I am just looking for a normal line graph that has the cpu for both windows and linux servers. but i need it in only a single dashboard. Thanks for your time and help.

karthikbalakris · ‎11-12-2012

Raw Data for Linux: 1 » 11/12/12 4:46:07.000 PM CPU pctUser pctNice pctSystem pctIowait pctIdle PM all 0.25 0.00 0.25 99.50 PM 0 0.00 0.00 0.00 100.00 PM 1 0.00 0.00 0.00 100.00 PM 2 0.00 0.00 0.00 100.00 PM 3 0.00 0.00 0.00 100.00 host=CARDS_QA_WLI1 Options| sourcetype=cpu Options| source=cpu Options

karthikbalakris · ‎11-12-2012

is it possible to have a single dash board that gives the cpu usage for both windows and linux machines?? I tried a query some thing like the on below but it dint work. host="CARDS_QA_*" sourcetype=cpu OR source=WMI:CPUTime eval CPULoad = PercentProcessorTime multikv fields pctIdle | eval Percent_CPU_Load = 100 - pctIdle | timechart avg(Percent_CPU_Load) avg(CPULoad) by host

karthikbalakris · ‎11-02-2012

TYPO Its search host and not search hosts

karthikbalakris · ‎11-02-2012

@MHibbin Your idea worked, with a very small correction though. Here is teh one that worked: | metadata type=hosts | search host="HPSM_QA_*" Its search hosts and not search hosts anyway the idea is your and all the credit is to you. Thanks So much

karthikbalakris · ‎11-02-2012

@MHibbin Your idea worked, with a very small correction though. Here is teh one that worked: | metadata type=hosts | search host="HPSM_QA_*" Its search hosts and not search hosts anyway the idea is your and all the credit is to you. Thanks So much

karthikbalakris · ‎11-02-2012

hi all, i have a drop down list box which displays the host names. but i want to filter the hosts that are displayed based on the host names. For Ex: I have hosts named ABC_1 ABC_2 DEF_1 DEF_2 Now i want the drop down bow to display only ABC_* Is this possible? My current xml code is "populatingSearch fieldForValue= "host" fieldForLabel="host"> | metadata type=hosts | hosts = "ABC_*" /populatingSearch>" But this is not working as expected. Kindly help.

Posts	13
Solutions	0
Karma Given	4
Karma Received	1
Member Since	‎11-01-2012

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

DeploymentClient - Unable to send handshake messag...

Linux Scripting

monitor linux processes

Linux and Windows CPU monitoring

Filter results while Populating Drop down box

Re: Extracting date

Re: DeploymentClient - Unable to send handshake me...

DeploymentClient - Unable to send handshake messag...

Re: Linux Scripting

Linux Scripting

monitor linux processes

Re: Linux and Windows CPU monitoring

Re: Linux and Windows CPU monitoring

Linux and Windows CPU monitoring

Re: Filter results while Populating Drop down box

Re: Filter results while Populating Drop down box

Re: Filter results while Populating Drop down box

Filter results while Populating Drop down box