Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About rajneeshc1981
rajneeshc1981
Explorer
Member since:
08-03-2018
06-05-2020
Community Statistics
| Posts | 39 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 08-03-2018 |
Activity Feed
- Got Karma for Re: events time stamp is older than the index retention period ,how can we fix this.. 07-31-2023 12:17 PM
- Posted Re: I want to add a new column to the existing dashboard how will I do it. on Dashboards & Visualizations. 01-15-2019 04:57 PM
- Posted I want to add a new column to the existing dashboard how will I do it. on Dashboards & Visualizations. 01-15-2019 03:55 PM
- Tagged I want to add a new column to the existing dashboard how will I do it. on Dashboards & Visualizations. 01-15-2019 03:55 PM
- Posted Re: How to optimize Splunk for PCI Compliance? on Monitoring Splunk. 12-21-2018 11:26 AM
- Posted how do I get live updates into a Splunk dashboard? on Dashboards & Visualizations. 10-29-2018 02:54 PM
- Tagged how do I get live updates into a Splunk dashboard? on Dashboards & Visualizations. 10-29-2018 02:54 PM
- Tagged how do I get live updates into a Splunk dashboard? on Dashboards & Visualizations. 10-29-2018 02:54 PM
- Posted Re: How do I configure Splunk to monitor network traffic on Juniper devices? on Splunk Enterprise Security. 10-24-2018 09:43 AM
- Posted Re: ITSI Error on App Start on Splunk ITSI. 10-23-2018 12:41 PM
- Posted Re: Splunk ITSI configuration on Splunk ITSI. 10-22-2018 02:59 PM
- Posted Re: Splunk ITSI configuration on Splunk ITSI. 10-18-2018 08:46 AM
- Posted Re: Splunk ITSI configuration on Splunk ITSI. 10-17-2018 02:56 PM
- Posted How to install spunk instance on Installation. 10-17-2018 01:54 PM
- Tagged How to install spunk instance on Installation. 10-17-2018 01:54 PM
- Posted Re: Alerts: when writing a report what are the important parameters on Alerting. 08-23-2018 04:11 PM
- Posted Re: Alerts: when writing a report what are the important parameters on Alerting. 08-23-2018 10:43 AM
- Posted Re: Alerts: when writing a report what are the important parameters on Alerting. 08-22-2018 03:20 PM
- Posted Re: Alerts: when writing a report what are the important parameters on Alerting. 08-22-2018 03:07 PM
- Posted Alerts: when writing a report what are the important parameters on Alerting. 08-22-2018 12:05 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
01-15-2019
04:57 PM
index=pear splunk_server_group=all sourcetype="chef_host_details" * host_tc="" pvc_grp="" NOT (host_is_dr=1) NOT (host_pod_is_live=0) earliest=-4h latest=now
| mvexpand roles{}| rename roles{} as toll list | search tolllist!="base" AND roleslist=*** | search tolllist=*
|dedup tolllist host | mvcombine tolllist| sort host tolllist| table host host_tc pvc_grp tolllist
this creates 4 column >> hosts >> host_tc,pvc_grp,tollist , I want to add another column before hosts and add manually some data .
... View more
01-15-2019
03:55 PM
I want to add a new column to the existing dashboard how will I do it.
I want to add a new column to the existing dashboard how will I do it.
... View more
- Tags:
- splunk-enterprise
12-21-2018
11:26 AM
I want to do pci but not through app, can you tell me what are best practices in Splunk to make logs pci compliance .
... View more
10-29-2018
02:54 PM
I am creating a punch card dashboard. How do I get it to update every few seconds ?.
... View more
10-24-2018
09:43 AM
configure it through syslog-ng
... View more
10-23-2018
12:41 PM
hey do you know how to install. the components of ITSI on the free instance.
... View more
10-22-2018
02:59 PM
I have installed ITSI free instance from the website ,I want to know how to how to install componats in etc$ I don't know how to access it from GUI.
... View more
10-17-2018
01:54 PM
I have access to only splunk search head ,how do I install splunk instance locally to my desktop.
... View more
- Tags:
- splunk-enterprise
08-23-2018
04:11 PM
like whoever is creating an alert should not make any error , so I wan to give them the right format .
how can I do it .
... View more
08-23-2018
10:43 AM
we are triggering alerts through git savedsearches and it further updates saved searches in spunk server . I want to check the validations for the saved searches.conf folder on git. what the correct format should be.
... View more
08-22-2018
03:20 PM
checked ...I want to see if thee are any exceptions
... View more
08-22-2018
03:07 PM
like what are the exceptions on that folder where I am saving the report
... View more
08-22-2018
12:05 PM
When writing a report, please let me know the important parameters and how they should be set without a mistake.
We are triggering alerts through git savedsearches and it further updates saved searches in spunk server. I want to check the validations for the saved searches.conf folder on git. What should the correct format be?
... View more
08-20-2018
01:45 PM
yes its going out from splunk...but we are not receiving it ..do you know what could be the issue with smtp server.
... View more
08-20-2018
11:05 AM
old alerts are triggering but anything configured as new is not triggering .we checked the logs the search head is sending the alert mail but we are not receiving it .
... View more
08-17-2018
11:26 AM
I can see the report in the -searches and reports but I don't know its not triggering the mail.
... View more
- Tags:
- splunk-enterprise
08-14-2018
01:55 PM
how to find it ? ,I don't know how it was extracted ?.
... View more
08-14-2018
12:47 PM
how is queue size related to _time
... View more
08-14-2018
11:39 AM
how to fix _time issues its not matching with index time for the events.
_time shows 2015 and index time shows current time.
... View more
08-14-2018
10:17 AM
How can I know what is wrong when there is a big difference in _time and index time
173,518 events (2/20/13 5:27:50.000 PM to 1/1/18 12:00:00.000 AM) No Event Sampling Job Fast Mode
Events
Statistics (173,518)
Visualization
100 Per Page
Format
Preview
Prev12345678...Next
_time idxtime offset _raw
2015-12-17 07:37:56.000 2018-08-14 04:54:59 83884623 timelag=423 messageId=1450337876eb4ae5bdd1fc7383fe8685 topicName=KistaTopicNC3 retryCount=0 [LogLevel=INFO] -- 2018/08/14 04:54:30 INFO Thread-5 com.apple.keystone.messaging.client.v2.impl.kafka.ReceivedMessagesProcessor - "Kafka consumer received message" timelag=353 messageId=0a9ec5de23bb4f32860895ae5474ea3e topicName=KistaTopicNC3 retryCount=0 [LogLevel=INFO] -- 2018/08/14 04:54:30 INFO Thread-5 com.apple.keystone.messaging.client.v2.impl.kafka.ReceivedMessagesProcessor - "Kafka consumer received message" timelag=257 messageId=228fd880217142c6806367ea28264c24 topicName=KistaTopicNC3 retryCount=0 [LogLevel=INFO] -- 2018/08/14 04:54:30 INFO Thread-5 com.apple.keystone.messaging.client.v2.impl.kafka.ReceivedMessagesProcessor - "Kafka consumer received message" timelag=162 messageId=5383df5980ba4f4882cd464c31ef64aa topicName=KistaTopicNC3 retryCount=0 [LogLevel=INFO] -- 2018/08/14 04:54:30 INFO Thread-5
... View more
- Tags:
- splunk-enterprise
08-10-2018
10:24 AM
what is there is an issue with timestamp recognition or truncating ,how will I fix those type ?.
... View more
08-09-2018
07:25 PM
1 Karma
how do I fix I see some events are older few days than indexed retention.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
