Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About arjun_krishna
arjun_krishna
Explorer
Member since:
05-16-2018
06-05-2020
Community Statistics
| Posts | 19 |
| Solutions | 0 |
| Karma Given | 4 |
| Karma Received | 0 |
| Member Since | 05-16-2018 |
Activity Feed
- Karma Re: Can you help me create a regular expression to extract 2 values from a string? for renjith_nair. 06-05-2020 12:50 AM
- Karma Re: Get count from multiple urls based on required properties for somesoni2. 06-05-2020 12:49 AM
- Karma Re: Can you help me make a regex for URL having different types of parameters? for FrankVl. 06-05-2020 12:49 AM
- Karma Re: How to write a regex for string followed by number? for mhoogcarspel_sp. 06-05-2020 12:49 AM
- Posted Re: How to get stats from log and display src,dest from another log having uniqueId is common on Splunk Search. 08-25-2019 04:56 AM
- Posted How to get stats from log and display src,dest from another log having uniqueId is common on Splunk Search. 08-23-2019 05:12 AM
- Tagged How to get stats from log and display src,dest from another log having uniqueId is common on Splunk Search. 08-23-2019 05:12 AM
- Tagged How to get stats from log and display src,dest from another log having uniqueId is common on Splunk Search. 08-23-2019 05:12 AM
- Tagged How to get stats from log and display src,dest from another log having uniqueId is common on Splunk Search. 08-23-2019 05:12 AM
- Posted Re: Can you help me create a regular expression to extract 2 values from a string? on Splunk Search. 01-11-2019 02:10 AM
- Posted Re: Can you help me create a regular expression to extract 2 values from a string? on Splunk Search. 01-10-2019 06:07 AM
- Posted Re: Can you help me create a regular expression to extract 2 values from a string? on Splunk Search. 01-10-2019 06:04 AM
- Posted Can you help me create a regular expression to extract 2 values from a string? on Splunk Search. 01-10-2019 04:03 AM
- Tagged Can you help me create a regular expression to extract 2 values from a string? on Splunk Search. 01-10-2019 04:03 AM
- Tagged Can you help me create a regular expression to extract 2 values from a string? on Splunk Search. 01-10-2019 04:03 AM
- Tagged Can you help me create a regular expression to extract 2 values from a string? on Splunk Search. 01-10-2019 04:03 AM
- Posted Get the value after first occrured * in a string on Dashboards & Visualizations. 10-11-2018 08:22 AM
- Tagged Get the value after first occrured * in a string on Dashboards & Visualizations. 10-11-2018 08:22 AM
- Posted Can you help me make a regex for URL having different types of parameters? on Splunk Search. 09-27-2018 06:54 AM
- Tagged Can you help me make a regex for URL having different types of parameters? on Splunk Search. 09-27-2018 06:54 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
08-25-2019
04:56 AM
the above query aggregating start time and endtime from all the events, i dont need aggregation by uniqueID. The uniqueID will have several startTIme (taskbegin ) and subsequent endTime (taskEnd) logs
if 1 uniqueID may have several set (1 per hour) like below
I need sum and avg of all sets (sum of set1, avg set1 and sum of set1, avg set1 and so on ) for every uniqueID
Set1: having src=abc, dest=xyz
Set1:log1: [com.pqr.MyOwnClass] | taskbegin uniqueID=34567, src=abc dest=xyz
Set1:log2: [com.pqr.MyOwnClass] |taskEnd uniqueID=34567, totalExecTime=18765
Set2:log3: [com.pqr.MyOwnClass] | taskbegin uniqueID=34567, src=abc dest=xyz
Set2:log4: [com.pqr.MyOwnClass] |taskEnd uniqueID=34567, totalExecTime=22453
Set7:log13: [com.pqr.MyOwnClass] | taskbegin uniqueID=34567, src=abc dest=xyz
Set7:log14: [com.pqr.MyOwnClass] |taskEnd uniqueID=34567, totalExecTime=23133
Set3/4: having src=mnb, dest=lop
set3:log5: [com.pqr.MyOwnClass] | taskbegin uniqueID=64563, src=mnb dest=lop
set3:log6: [com.pqr.MyOwnClass] |taskEnd uniqueID=64563, totalExecTime=54869
set4:log7: [com.pqr.MyOwnClass] | taskbegin uniqueID=64563, src=mnb dest=lop
set4:log8: [com.pqr.MyOwnClass] |taskEnd uniqueID=64563, totalExecTime=34211
Set5/6: having src=wdf, dest=jcd
set5:log9: [com.pqr.MyOwnClass] | taskbegin uniqueID=76687, src=wdf dest=jcd
set5:log10: [com.pqr.MyOwnClass] |taskEnd uniqueID=76687, totalExecTime=56567
set6:log11: [com.pqr.MyOwnClass] | taskbegin uniqueID=76687, src=wdf dest=jcd
set6:log12: [com.pqr.MyOwnClass] |taskEnd uniqueID=76687, totalExecTime=23212
... View more
08-23-2019
05:12 AM
I have a set of logs...
log1 is task startingtime log having taskbegin ,uniqueID, src ,dest and log2 is task endTime log having only taskEnd , uniqueId, totalExecTime
Now I need accurate stats for avg,sum with src,dest ( per hour one startlog, endlog, in a day hardly 23/24 logs).
Set1: having src=abc, dest=xyz
Set1:log1: [com.pqr.MyOwnClass] | taskbegin uniqueID=34567, src=abc dest=xyz
Set1:log2: [com.pqr.MyOwnClass] |taskEnd uniqueID=34567, totalExecTime=18765
Set1:log3: [com.pqr.MyOwnClass] | taskbegin uniqueID=41523, src=abc dest=xyz
Set1:log4: [com.pqr.MyOwnClass] |taskEnd uniqueID=41523, totalExecTime=22453
Set2: having src=mnb, dest=lop
set2:log5: [com.pqr.MyOwnClass] | taskbegin uniqueID=64563, src=mnb dest=lop
set2:log6: [com.pqr.MyOwnClass] |taskEnd uniqueID=64563, totalExecTime=54869
set2:log7: [com.pqr.MyOwnClass] | taskbegin uniqueID=79561, src=mnb dest=lop
set2:log8: [com.pqr.MyOwnClass] |taskEnd uniqueID=79561, totalExecTime=34211
Now I need accurate stats for avg,sum for totalExecTime ( per hour one startlog, endlog, in a day hardly 23/24 logs).
I have tried with below search, but not sure it is giving accurate results:
source=xxxxxxx "com.pqr.MyOwnClass" (taskbegin OR taskEnd) | eval totalExecMin=round(totalExecTime/60000,1) | selfjoin uniqueID | search runTaskEnd | stats count avg(totalExecMin) sum(totalExecMin) by src dest
Please help me with this.
... View more
01-11-2019
02:10 AM
Thanks for the help @renjith.nair , I want ti take a timechart/linechart to get HospName is x-axis and Time (the time taken for each) in y-axis
I have tried below
|timechart count by HospName, Time but not getting any chart
Please help me on this
... View more
01-10-2019
06:07 AM
"Bound\s(?[\w-]+):\d+ -- total execution took\s(?\d+)\s"
with this query i am exacting the required HospName, TIme attribues , but in table representation getting other logs too. due to this table becomes empty for most rows
... View more
01-10-2019
06:04 AM
With above query getting exact logs, but getting junk logs, due to that my table becomes empty for most of the rows
... View more
01-10-2019
04:03 AM
log1:
com.google.AbcdExtension] [mthd] | null - Bound **CLINIC-MBR-GROUP-INC**:23490110094900 -- total execution took **14** seconds
log2:
com.google.AbcdExtension] [mthd] | null - Bound DEAF-RECO:12310110094900 -- writing 3 records took 14 seconds
log3:
com.google.AbcdExtension] [mthd] | val - Bound EYE-TRIO-GRP-INCREMENTAL:201901342421 -- backup strategy execution took 0 seconds
log4:
com.google.AbcdExtension] [mthd] | val - Bound **HOSPITAL-CARE-GROUP**:201123131323 -- total execution took **3425** seconds
From the above 4 logs, i want to extract log1 and log4 values, like the below table (highlighted)
HospName Timee
CLINIC-MBR-GROUP-INC 14
HOSPITAL-CARE-GROUP 3425
I have tried the below query, but it's giving junk also:
index="*randix*" source="*.log*" sourcetype="abcd-xyz*" "com.google.AbcdExtension" | rex "- Bound (?<HospName>[^\:]*)" | rex "-- total execution took (?<Timee>[\w]*)" | table HospName Timee
Could you please correct my query
... View more
10-11-2018
08:22 AM
I am having below logs, want to create chart for number of activities done on weekday
log1:
index="abc_xyz" |activity="/google.com*bookstore" |eventEndTime=2018-09-27
log2:
index="abc_xyz" |activity="/yahoo.com*groceryStore" |eventEndTime=2018-09-26
log3:
index="abc_xyz" |activity="/bing.com*wineStore" |eventEndTime=2018-09-22
I am came up with below query, but i need a regex to get value after the 1st occured "*" (ex: bookstore, groceryStore, wineStore) in activity2 and want to get count of that activity2 based chart
index="abc_xyz" activity="/google.com*bookstore" earliest=-14d latest=-0d | chart count(activity) over date_hour by date_wday
... View more
- Tags:
- splunk-enterprise
09-27-2018
06:54 AM
I have below 2 log sets which have different activities. i want two different regex for Set1 and Set2 separately in 2 different panels
Set1
log1:
index="abc_xyz"|activity=GET->/cirrus/v2.0/payloads/96a-d3f-4fb/HELLO_WORLD|eventEndTime=2018-09-26
log2:
index="abc_xyz"|activity=GET->/cirrus/v2.0/payloads/f4a-8ef-8cb/abcpayld|eventEndTime=2018-09-26
Set2
log3:
index="abc_xyz"|activity=GET->/cirrus/v2.0/payloads/96a-d3f-4fb/HELLO_WORLD/fd078jkkj24342kljlce989dadc7abc56c28|eventEndTime=2018-09-26
log4:
index="abc_xyz"|activity=GET->/cirrus/v2.0/payloads/f4a-8ef-8cb/abcpayld/thfd078jkkj24342kljlce989dadc7vfc56c28|eventEndTime=2018-09-26
I have tried with below , but No luck
index="abc_xyz" |regex "GET->\/cirrus\/v2.0\/payloads\/([[:alnum:]-]{10,40})\/([[:alpha:]_]{10,40})"
Could you please resolve my query
... View more
08-21-2018
02:55 AM
Great its working for me
... View more
08-20-2018
07:07 AM
@mhoogcarspel , Please respond
... View more
08-20-2018
06:47 AM
regex "EXT_CODE\d{1,3}="
This is working for me , but i want both EXT_CODE & GEN_CODE followed by 1/2/3 digit followed (Eg: GEN_CODE017 (or) GEN_CODE001 (or) GEN_CODE999 (or) EXT_CODE017 (or) EXT_CODE001 (or) EXT_CODE999 (or) ......)
... View more
08-20-2018
05:14 AM
log1: index="zync*"|EXT_CODE2=AB003|EXT_CODE35=BC003|EXT_CODE4=CA010|GEN_CODE14=CD010
log2: index="zync*"CDT|EXT_CODE4=XY005|EXT_CODE42=DE040|EXT_CODE4=ZQ019|GEN_CODE11=PY016
log3: index="zync*"|EXT_CODE5=PC099|EXT_CODE22=BC054|EXT_CODE4=ZC018|GEN_CODE11=ZV010
from multiple logs, i have to get above logs which are having EXT_CODE followed by 1/2/3 digit followed (Eg: EXT_CODE017 (or) EXT_CODE001 (or) EXT_CODE999 (or) ......)
... View more
08-20-2018
03:41 AM
Below are my 3 logs, i want to write a query, to get all the below 3 logs:
**EXT_CODE*[0-9]** with 1/2/3 digit followed by EXT_CODE
index="zync*"|EXT_CODE2=AB003|EXT_CODE35=BC003|EXT_CODE4=CA010|GEN_CODE14=CD010
index="zync*"CDT|EXT_CODE4=XY005|EXT_CODE42=DE040|EXT_CODE4=ZQ019|GEN_CODE11=PY016
index="zync*"|EXT_CODE5=PC099|EXT_CODE22=BC054|EXT_CODE4=ZC018|GEN_CODE11=ZV010
Can some one please suggest the query
my query: index="zync*" EXT_CODE[0-9]*="*"
... View more
06-08-2018
04:29 AM
I have 2 queries producing some results
Query1: index=foo* sourcetype="abc_uvw" activity="POST*/test1" source="/logs/mylogs.log" | table mr_id
Query2: index=foo* sourcetype="abc_uvw" DOMAIN="rkps" src="pqr" source="/logs/mylogs.log"
|dedup mr_id src | table mr_id
Query1 producing 1000 results, and query2 producing 999 records. Want to know that missed mr_id among them
... View more
05-17-2018
02:27 AM
Thanks, its worked
... View more
05-16-2018
11:35 AM
can you please consider above scenario ? please the syntax is almost correct not getting name based count
... View more
05-16-2018
11:18 AM
logs are comes like below sets log1, log2, log3 , log4, log5, log6
log1: Caused by: java.RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/ronaldo/getbilledvspaid/v1: Read timed out
log2: Caused by: java.RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/ronaldo/saysfs/v1: Read timed out
log3: Caused by: java.RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/watson/invoicesummary/v1: Read timed out
log4: Caused by: java.RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/watson/iuaxaddd/v1: Read timed out
log5: KHGM PDF invoice service at endpoint: https://microsoft.word.com/ringert/rkj3/obama/funatwork
log6: and setting service endpoint URL: https://cisco-services.raj.com/ytr-services/gilchrist/health
... View more
05-16-2018
10:39 AM
No, they are not end with v1, rather than i have to depend on the url domains
... View more
05-16-2018
06:22 AM
I am having below content with different (4 sets)urls presented in my logs, having index="abc_uyt"
RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/ronaldo/getbilledvspaid/v1
RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/ronaldo/paymenthistory/v1
RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/ronaldo/requesthistory/v1
RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/ronaldo/runninghistory/v1
RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/watson/invoicedetail/v1
RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/watson/invoicesummary/v1
RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/watson/gettingValue/v1
RuntimeException having https://google.yahoo.com/web/kiran/cart/groups/watson/historyValue/v1
RuntimeException having https://microsoft.word.com/ringert/rkj3/obama/funatwork
RuntimeException having https://microsoft.word.com/ringert/rkj3/obama/runathome
RuntimeException having https://cisco-services.raj.com/ytr-services/gilchrist/vision
RuntimeException having https://cisco-services.raj.com/ytr-services/gilchrist/health
and i want to get the count based on ronaldo, watson, obama, gilchrist with appropriate values also as tabular form like below
ronaldo - 25
watson - 22
obama - 36
gilchrist - 21
Could any one please assist, i have tried with rex, sed, count.. but getting unexpected count
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
