About mridus

mridus · ‎04-25-2012

Hi, Any idea how we can determine which is the last call? So that we can collate all the results? so that we emit nothing until the last call?

mridus · ‎04-25-2012

Hi, Is there a solution for this? I too am facing the same problem. I want to post the results via http, so use a custom command. But looks like the custom command is getting multiple times with EXECUTE (isgetinfo false). How do I prevent this? I want the custom command to be invoked only when the entire result set is available.

mridus · ‎03-20-2012

You are right about the output looking nicely formed. I had more than 1 tab space between columns. Once I reduced it to just 1 tab, the multikv worked without forceheader=1. Thanks for the help

mridus · ‎03-20-2012

Hi, Thanks. I have already done multikv forceheader=1 but I see that the values of the keys are followed by spaces. So currently I am doing "convert rmunit" to convert the numbers to be used with "stat avg". Any idea why the spaces are included in the values? Can they be avoided? I don't want to be changing all the strings to numbers for every arithmetic function I use.

mridus · ‎03-20-2012

Hi, I have written a script whose output is: It is well formatted (arranged in columns although the formatting is not visible here in this post) Type PerSecond PerTransaction PerExec PerCall DB Time(s): 0.7 30.1 0.49 2.75 DB CPU(s): 0.1 3.5 0.06 0.32 Redo size: 1,365.6 55,655.8 0.00 0.00 Logical reads: 2,483.3 101,208.4 0.00 0.00 Block changes: 3.3 132.7 0.00 0.00 Physical reads: 2,436.6 99,305.7 0.00 0.00 Physical writes: 0.6 24.9 0.00 0.00 User calls: 0.3 11.0 0.00 0.00 Parses: 1.2 48.7 0.00 0.00 Hard parses: 0.0 0.6 0.00 0.00 W/A MB processed: 0.0 1.8 0.00 0.00 Logons: 0.0 1.1 0.00 0.00 Executes: 1.5 61.9 0.00 0.00 Rollbacks: 0.0 0.4 0.00 0.00 Transactions: 0.0 0.00 0.00 0.00 My props.conf looks like: [Load_Profile] BREAK_ONLY_BEFORE=Type MAX_EVENTS=16 NO_BINARY_CHECK=1 SHOULD_LINEMERGE=true After the data is Splunked, when I multikv, it does not seem to work. What could be the problem here? I have also tried having the scripted output without the headers: DB Time(s): 0.7 30.1 0.49 2.75 DB CPU(s): 0.1 3.5 0.06 0.32 Redo size: 1,365.6 55,655.8 0.00 0.00 Logical reads: 2,483.3 101,208.4 0.00 0.00 Block changes: 3.3 132.7 0.00 0.00 Physical reads: 2,436.6 99,305.7 0.00 0.00 Physical writes: 0.6 24.9 0.00 0.00 User calls: 0.3 11.0 0.00 0.00 Parses: 1.2 48.7 0.00 0.00 Hard parses: 0.0 0.6 0.00 0.00 W/A MB processed: 0.0 1.8 0.00 0.00 Logons: 0.0 1.1 0.00 0.00 Executes: 1.5 61.9 0.00 0.00 Rollbacks: 0.0 0.4 0.00 0.00 Transactions: 0.0 0.00 0.00 0.00 props.conf: [Load_Profile] SHOULD_LINEMERGE = false LINE_BREAKER = ^()$ TRUNCATE = 1000000 DATETIME_CONFIG = CURRENT REPORT-fields_for_load_profiles_sh = fields_for_load_profiles_sh transforms.conf: [fields_for_load_profiles_sh] REGEX = ([A-Za-z\s\/]+)\:*\s+(\d*\,*\d*\.*\d*)\s+(\d*\,*\d*\.*\d*)\s+(\d*\,*\d*\.*\d*)\s+(\d*\,*\d*\.*\d*) FORMAT = Type::$1 PerSecond::$2 PerTransaction::$3 PerExec::$4 PerCall::$5 This does not seem to work either. Can somebody help?

Posts	5
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎03-20-2012

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Need help with Props and Transforms

Re: Prevent splunk from streaming results to a cus...

Re: python script is being called twice.

Re: Need help with Props and Transforms

Re: Need help with Props and Transforms

Need help with Props and Transforms