About rteja9

rteja9 · ‎01-12-2021

@hontakyu I still haven't fixed it yet. I know it is some code issue in JS.

rteja9 · ‎01-12-2021

@niketn Thanks for the wonderful code snippet. It works good for me. But the token is updating on change of date. But I want to see token update only on submit button click. Can you please help on this?

rteja9 · ‎11-19-2020

@kamlesh_vaghela Thanks for your help on multi select checkbox. I have one issue with code. The select all check box keeps disappearing after sometime ever after I added time out. Can you please help?

rteja9 · ‎06-04-2020

Hi Chris, Thanks for your quick response.

rteja9 · ‎06-04-2020

Hello, I am using Sunburst Viz for one of my charts. When I choose "Zoom in" as an action, I can only see 2 layers initially. When I click on anything it zooms into more layers. Can I increase the number of layers I see initially? Ex: I want to see 3 layers initially. Thanks in advance!!

rteja9 · ‎05-21-2020

I can't see the custom panels created in the Splunk App for Jenkins. If I create a new one I see all old custom panels created, but when I log in again all of the custom panels previously created disappear again. I can only see them all again if I create a new custom panel. Any help here is appreciated.

rteja9 · ‎05-06-2020

Hi dipereira, I am having the same issue. I still see dat files getting generated at default locaton even after I moved DPLUNk_DB path. Did you find any solution?

rteja9 · ‎04-13-2020

Thanks for your response. That makes sense.

rteja9 · ‎04-12-2020

I have a 5 node Indexer cluster with version 7.3.1.1. I added configuration to replicate data on indexer cluster but only new data is getting replicated. Old data which is in cluster before I added replication configuration is not replicated. Is this how it is supposed to be? If not, how can I replicate old data? Thanks in advance!!

rteja9 · ‎06-26-2018

Try below query, index=cms_vm | eval DatastoreName=replace(DatastoreName,"^[^]+[^_]+(.*)","") | table DatastoreName | dedup DatastoreName | sort DatastoreName

rteja9 · ‎06-25-2018

Try below search, index="cs_test" "Refund succeeded" OR "\"action\"=>\"refund\""

rteja9 · ‎06-19-2018

You need to line break the events into individual events. This can be done either on HF or on indexers. Below is the document explaining how to enable event line breaking on Splunk, https://docs.splunk.com/Documentation/Splunk/7.1.1/Data/Configureeventlinebreaking Basically Splunk auto line breaks based on timestamp value. But in your case as event doesn't start with timestamp, you need to explicitly specify line breaking configuration. You can try below configuration, props.conf [] SHOULD_LINEMERGE=true BREAK_ONLY_BEFORE = ^[catalina-exec-

rteja9 · ‎06-19-2018

You should enable boot-start for Splunk service. This will make sure Splunk starts after VM is down/restarted. Here is the documentation on how to enable it, https://docs.splunk.com/Documentation/Splunk/7.1.1/Admin/ConfigureSplunktostartatboottime You need to run $SPLUNK_HOME/bin/splunk enable boot-start.

Posts	13
Solutions	2
Karma Given	2
Karma Received	0
Member Since	‎06-19-2018

Online Status	Offline
Date Last Visited	‎01-12-2021 07:58 PM

Sunburst Viz: How to increase number of levels dis...

Splunk App for Jenkins: Custom panels keep disappe...

Splunk replication of old data

Re: Splunk App for Jenkins: Custom panels keep dis...

Re: Jquery datepicker in splunk

Re: How to have a checkbox, check all the rows in ...

Re: Sunburst Viz: How to increase number of levels...

Sunburst Viz: How to increase number of levels dis...

Splunk App for Jenkins: Custom panels keep disappe...

Re: How to move .dat files after moving indexes to...

Re: Splunk replication of old data

Splunk replication of old data

Re: How to create a regex that removes everything ...

Re: How do you search for events that match the ex...

Re: Break Events from a single Event

Re: Ingestion does not survive reboot