About sruthy

sruthy · ‎12-05-2012

why cant u try this $index$ $sourcetype$ |top source

sruthy · ‎12-03-2012

searchtemplate>source="C:\Users\20875\Desktop\pros-Tomcat-AMGDCPROSAPPP1.log" $username$|fields - _time </searchtemplate> or searchtemplate>source="C:\Users\20875\Desktop\pros-Tomcat-AMGDCPROSAPPP1.log" $username$|fields host index ..... </searchtemplate>

sruthy · ‎11-19-2012

i think the regex in comment is missing some slashes, can you try with the one posted in answer.

sruthy · ‎11-18-2012

Hi all, while i am using delete command to remove my data inputs, i am not able to do that. an error called client doesn't have permission appears. thanks

sruthy · ‎11-15-2012

regExr is to create regular expression . from what u mentioned, the problem is with breakdown of events. did u define it precisely while creating sourcetype or uploading datainputs?

sruthy · ‎11-07-2012

Hi, I am new to splunk and when i add datainputs i was not known about the timestamp issue and later i explored it. when i am trying to delete a data input and trying to reinsert it with proper format, i found that the earlier input is still indexed and when i am querying it , i am able to find it. i tried restarting splunk through splunk manager as well as windows services.(both splunkd and splunkweb)

Posts	6
Solutions	0
Karma Given	8
Karma Received	1
Member Since	‎11-06-2012

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

delete command

Deleting data inputs

Re: dropdown not working

Re: dropdown for the field

Re: slash error in the source

delete command

Re: extracting multiple values for a field from on...

Deleting data inputs

Join the Conversation