Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About RashmiGowda
RashmiGowda
Explorer
Member since:
03-06-2014
06-05-2020
Community Statistics
| Posts | 21 |
| Solutions | 0 |
| Karma Given | 3 |
| Karma Received | 1 |
| Member Since | 03-06-2014 |
Activity Feed
- Karma Re: How to create the regex to match the pattern in my data for proper event breaking? for pradeepkumarg. 06-05-2020 12:47 AM
- Got Karma for How to configure the input to index Task scheduler logs from a windows machine?. 06-05-2020 12:47 AM
- Karma Re: How to schedule a search one day a week for yannK. 06-05-2020 12:46 AM
- Karma Re: how to find the Unique field value which is present in two different source logs for gauldridge. 06-05-2020 12:46 AM
- Posted How to configure the input to index Task scheduler logs from a windows machine? on Getting Data In. 04-29-2015 04:02 AM
- Tagged How to configure the input to index Task scheduler logs from a windows machine? on Getting Data In. 04-29-2015 04:02 AM
- Tagged How to configure the input to index Task scheduler logs from a windows machine? on Getting Data In. 04-29-2015 04:02 AM
- Tagged How to configure the input to index Task scheduler logs from a windows machine? on Getting Data In. 04-29-2015 04:02 AM
- Tagged How to configure the input to index Task scheduler logs from a windows machine? on Getting Data In. 04-29-2015 04:02 AM
- Posted Re: How to create the regex to match the pattern in my data for proper event breaking? on Splunk Search. 03-17-2015 09:03 PM
- Posted How to create the regex to match the pattern in my data for proper event breaking? on Splunk Search. 03-17-2015 08:10 PM
- Tagged How to create the regex to match the pattern in my data for proper event breaking? on Splunk Search. 03-17-2015 08:10 PM
- Tagged How to create the regex to match the pattern in my data for proper event breaking? on Splunk Search. 03-17-2015 08:10 PM
- Posted How to set cron schedule alert to trigger only on Saturday and Sunday from 6am to 5pm? on Alerting. 01-23-2015 07:34 AM
- Tagged How to set cron schedule alert to trigger only on Saturday and Sunday from 6am to 5pm? on Alerting. 01-23-2015 07:34 AM
- Tagged How to set cron schedule alert to trigger only on Saturday and Sunday from 6am to 5pm? on Alerting. 01-23-2015 07:34 AM
- Posted Re: How do i get top services and put it in chart?? on Splunk Search. 06-30-2014 08:08 AM
- Posted How do i get top services and put it in chart?? on Splunk Search. 06-30-2014 01:22 AM
- Tagged How do i get top services and put it in chart?? on Splunk Search. 06-30-2014 01:22 AM
- Tagged How do i get top services and put it in chart?? on Splunk Search. 06-30-2014 01:22 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
04-29-2015
04:02 AM
1 Karma
Hello All,
can any one please help me out in how to index the Task scheduler logs from the windows box..??
Need to get the logs from "Microsoft-Windows-TaskScheduler%4Operational".
What will be the input the config for this..? can any one please help me..??
Will it be same as:
[WinEventLog://Application]
or something has to be added..?
Thanks in advance..!! 🙂
... View more
03-17-2015
09:03 PM
Thanks pradeep.. could you please explain the regex pattern which u suggested. Please..!!
... View more
03-17-2015
08:10 PM
Hello All,
Can any one please help me out to create the regular expression / regex for the below pattern -
-- TIME: [2014-12-12 11:53:50,390] --
Need to break the event based on the above pattern. Anyone can help me on this please..!!
Thanks in advance.
... View more
- Tags:
- event-break
- regex
01-23-2015
07:34 AM
Hello All,
I want to schedule alert to trigger only on Saturday and Sunday from 6am to 5pm. Please help me out to schedule this.
Thanks in advance.
... View more
06-30-2014
08:08 AM
martin_mueller - thank you,
The data is in the xml format. it will contain the start time, end time and other user data with success and failure.
... View more
06-30-2014
01:22 AM
Hello,
I need to get the top 25 services from the requesting system and have to put it in a chart with the SUCCESS and FAILURE of transactions. So m using query like this. Can any one suggest how to use "TOP" Command with chart to get the top 25 services.
Query:
index="abc" requestingSystem="RS" | top limit=25 lookup_service_operation_name | transaction messageIdentifier maxspan=1m | search eventcount="2"| chart count as Transactions, count(eval(responseMessageField like"Success%" OR responseMessageField like"SUCCESS%")) as Success, count(eval(responseMessageField!="Success" AND responseMessageField!="SUCCESS")) as Failures by lookup_service_operation_name.
But this query is not helping to get the top 25 services and also count of the transactions for services also not correct.
Can any one plz help me out in this..?
Thanks in advance.
... View more
05-21-2014
06:06 AM
I need to monitor the windows event logs using the universal forwarder. Please help me out for the below queries:-
How to configure the inputs for remote machine.
If i want to monitor only application events logs, how to filter the application event log for a particular application event logs.
Thanks in advance. 🙂
... View more
- Tags:
- universal-forwarder
04-10-2014
04:00 AM
Sorry.. Its working.. I just missed to add sub search thing.. @martin_muller
... View more
04-10-2014
03:28 AM
@martin_muller, The first query suggested is not displaying the results.. 😞 could u ple suggest
... View more
04-10-2014
02:42 AM
I need to find the response time for most occuring / most frequest Transaction
So M trying the following query:
index="abc" source="xyz.log" | timechart max(TransRespTime) by TransName | top 5 TransName.
but this query is not showing the result as expected.
I need to display the result in the form of chart / graph.
Anyone can please suggest me the solution.
Thanks in advance..!!
... View more
03-28-2014
06:27 AM
Hello
M trying to generate the report by using the below query:-
index="xyz" source="abc" | timechart span=1h count as Transactions by host | eval Time=strftime(_time, "%H:%M") | convert timeformat="%m-%d-%y" ctime(_time) as Date
My result is in the below format : _time, Date, Time, Host
In result m getting the default _time column also. how to eliminate this _time column from the result..??
Also i need the report format as Date, Time, Host1 but the generated report file(csv) in mail has _time, Host Date Time..
how to format this..?/
Please help me out..??
... View more
- Tags:
- reports
03-28-2014
06:02 AM
Thank you.. @linu1988
1 more query i have.. Now m using the below Query to generate the report
index="xyz" source="abc" | timechart span=1h count as Transactions by host | eval Time=strftime(_time, "%H:%M") | convert timeformat="%m-%d-%y" ctime(_time) as Date
My result is in the below format :
_time, Date, Time, Host
In result m getting the default _time column also. how to eliminate this _time column from the result..??
Also i need the report format as Date, Time, Host1 but the generated report file in mail has _time, Host Date Time..
how to format this..?/
Please help me out..??
... View more
03-28-2014
03:40 AM
Thank you.. it worked.. @linu1988
could you ple exlpain about how cron scheduling accepts the parameters..
Thanks in advance
... View more
03-27-2014
05:27 AM
Hello,
I have a log file abc.log.
I need to generate a report. Below are the details
1) Report should be generated and triggered through email on weekly-basis (on Mondays' morning by 0800 Hrs)
2) Report should contain the data logged from previous Monday 12:00 AM till Sunday 12:00am Midnight on the week
Time span is every one hour
Format of the report
Date Time Log details
27/3/2014 00:00 ABC
27/3/2014 01:00 xyz
27/3/2014 02:00 pqr
27/3/2014 03:00 lmn
Any one can ple suggest me the solution
Thanks in advance
... View more
- Tags:
- reports
03-21-2014
01:11 AM
Hello
I need a regex expression to match the below patern in my abc.log
Pattern details:
, 2014-03-20 13:43:55.608, 2014-03-20 13:43:55.612,
-- Contains sring values.
Please suggest the regex for this..??
Thanks in advance..!!
... View more
- Tags:
- regex
03-06-2014
10:54 PM
No.. RequestID is Unique. Its not used by Multiple Transactions
@gauldridge
... View more
03-06-2014
10:33 PM
Actually TransactionID is being reused by multiple transactions. Its not that beginning of transaction in abc.log and end in xyz.log.
What i need to do is, i need to corelate the events from abc.log and xyz.log based on the UniqueiD which is present in both the logs. so i created "RequestID" for abc.log and TransactionID for xyz.log.
now i need to pick up the uniqueid which is present in both RequestID and TransactionID. RequestID contains uniqueID of abc.log and TransactionID contains uniqueiD of xyz.log
@gauldridge
... View more
03-06-2014
09:57 PM
above query is giving duplicate results also. its also displaying id's whcih are not present in RequestID and TransactionID.. 😞
... View more
03-06-2014
09:31 PM
Thank you. But how to eliminate the duplicate TransactionID. because in xyz.log there are Transactions which are appering more than once. Could you please suggest..??
... View more
03-06-2014
08:51 PM
My question is how to find the uniqueId which is present in two different source logs..?
I have 2 source logs say, abc.log and xyz.log. abc.log has fields called "RequestID" and "RequestStartTime". xyz.log has fields called "TransactionID" and "TransEndTime". Now i have to find and display a UniqueID which is present in both "RequestID" and "TransactionID" with RequestStartTime and TransEndTime..??
Can anyone please suggest how m able to do this in splunk..??
Thanks in advance 🙂
... View more
- Tags:
- appendcols
- join
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
