×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
SSchaff81
New Member
Member since: ‎05-07-2018
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎05-07-2018
Activity Feed
View All

Re: Using Lookup table of known errors in search t...

by in Splunk Search
‎07-16-2018 03:42 PM
‎07-16-2018 03:42 PM
Try this: index=* host=HOSTNAME* source="WinEventLog:Application" Type=Error (SourceName=APP_NAME*) NOT [ |inputlookup | table KNOWN_ERROR | format "" "" "" "" "OR" "" | rex field=search mode=sed "s/KNOWN_ERROR=//g" ] ... View more

Re: We have an application that has a memory leak,...

by in Dashboards & Visualizations
‎05-07-2018 11:48 AM
‎05-07-2018 11:48 AM
How about using below to show memory free timechart? index= host=HOSTNAME | timechart avg(mem_free_percent) ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM