About Kendrick33

Kendrick33 · ‎12-02-2010

Is the splunk add-on script for database inputs compatible with versions of splunk that are after 3.x?

Kendrick33 · ‎11-22-2010

I am performing some math functions in splunk.I am doing a search that will calculate the percentage of each data type. What variable can I use to store values without them having to be charted until the end of my search. For example: chart avg(db_abc_p) as anr, avg(db_efg) as enr, avg(db_hij) as hnr, avg(db_total) as Total | eval percentANR=(anr/Total)*100 | eval percentENR (enr/Total)*100 | eval percentHNR=hnr/Total)*100 what I end up with is valueS outputed for all seven variables, when all I really want is to display the values for : percentANR, percentENR, percentHNR

Kendrick33 · ‎11-17-2010

Thanks travis for your help!

Kendrick33 · ‎11-17-2010

I want add some files from a directory to be monitored by splunk, but I also want to give it a new sourcetype called capacityType According to the admin manual would it be: ./splunk add monitor /opt/capacity_script/newdblog/capacity_* [-sourcetype capacityType]

Kendrick33 · ‎11-12-2010

Each item is written on its separtate line ex. (Table=ABC Deleted Rows=50) I can get the sum off all the data. The problem has been trying to store each item by Table type. what I had was stat sum(Rows) as AllAgedOff | stats sum(Rows) by Table) which will result in NO RESULTS FOUND. If I can store each Table type, the math should be no problem. The results will be each value by Table type divided AllAgedOff multiplied by 100.

Kendrick33 · ‎11-09-2010

I have a table with different types of data that has been age off. I know how get a sum of the data in each row by doing the following: chart sum(Rows) by Table I know how to get the total of all the rows by the following: chart sum(Rows). What I'm trying to do is get the percentage of each type out of the total number of rows So if data types were abc 100 cde 25 efg 25 how would I do this?

Kendrick33 · ‎10-05-2010

I am monitoring a cluster of servers and am trying to capture the network thruput by host. I know splunk has a basic one out of the box. Thrput_by_host(*) . However, I would like to be able to pinpoint the thruput of each server. When I attempted to hone the search, I couldn't get any data back. For example Thruput_by_host(*) | timechart span=24h avg(Thruput_by_host()) as AvgHostThruput, AvgHostThruput renders nothing.

Kendrick33 · ‎10-05-2010

Do you have any examples of searches capturing network thruput?

Posts	9
Solutions	1
Karma Given	0
Karma Received	4
Member Since	‎10-05-2010

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

Script for database inputs

Variable storage

Adding new data to index with a new sourcetype

Calculating percentage of data in a table

examples of searches to capture network thruput

Script for database inputs

Variable storage

Re: Adding new data to index with a new sourcetype

Adding new data to index with a new sourcetype

Re: Calculating percentage of data in a table

Calculating percentage of data in a table

Re: examples of searches to capture network thrupu...

examples of searches to capture network thruput