About Satsan

Satsan · ‎08-22-2018

Thank you, i will go ahead and try

Satsan · ‎08-21-2018

I called all the errors and created to lookup-table . I want to create a job which would compare the last 5 minutes of errors with errors in lookup-table . If it doesn't match it would trigger an alert ( means finding new error from existing) Can we do this via Splunk query ? , if so can you please share the sample query

Satsan · ‎06-07-2018

I am also facing the same issue and please find my query and not able to attach screenshots index="wineventlog" host=myhostnames AND source="WinEventLog:Application" AND Type=Error | top limit=20 Message | eval Message=substr(Message, 13, 100) | table Message count | rename Message as "Error Desc", count as "Error Count"

Posts	3
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎06-07-2018

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

lookuptable compare with new event

Re: lookuptable compare with new event

lookuptable compare with new event

Re: How to remove blank spaces from table in dashb...