×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
splunk_pn
Explorer
Member since: ‎10-16-2015
‎06-05-2020
Community Statistics
Posts 6
Solutions 0
Karma Given 0
Karma Received 2
Member Since ‎10-16-2015
Activity Feed
View All

Re: Scheduled report is done, but report page says...

by in Reporting
‎10-08-2018 11:04 PM
‎10-08-2018 11:04 PM
Hi, I think you maybe have another issue, because I didn't have this problem in 6.x version or in 7.0, the bug I was struck by was only in version 7.1.1. I believe this was the bug corrected in 7.1.2: 2018-06-03 SPL-154567, SPL-154139 embedded report uses oldest search artifact from the history endpoint My case id was 001116998. /Patrik ... View more

Re: Scheduled report is done, but report page says...

by in Reporting
‎10-08-2018 07:22 AM
‎10-08-2018 07:22 AM
Hi, It turned out to be a bug in 7.1.1, fixed in 7.1.2 (and newer). , ... View more

Re: Scheduled report is done, but report page says...

by in Reporting
‎09-03-2018 05:40 AM
‎09-03-2018 05:40 AM
Hi, did you find any solution to this? I am seeing the same thing on my installation. Have a scheduled report that says in the job monitor that it is "done", and when opening that job id link - it is run and shows the correct result. But going in to the report and clicking the report it says "There are no results because the first scheduled...". OS:Windows 2012 R2 Splunk stand-alone 7.1.1. ... View more

Re: How can I use tstats to search event count com...

by in Splunk Search
‎10-12-2017 11:51 PM
‎10-12-2017 11:51 PM
Ok, thank you! I knew it was something simple - sometimes you need someone else eyes - to see the obvious... Thanka, again. ... View more

How can I use tstats to search event count compari...

by in Splunk Search
‎10-12-2017 06:50 AM
1 Karma
‎10-12-2017 06:50 AM
1 Karma
I have a search that works with stats - but fail to work when using tstats.. Here is the search with stats: index=wineventlog sourcetype="xmlwineventlog:security" earliest=-15m@m-1w latest=@m-1w | stats count by host | rename count as LastWeek | appendcols [search index=wineventlog sourcetype="xmlwineventlog:security" earliest=-15m@m latest=@m | stats count by host | rename count as Today] | table host Today LastWeek Since this search take some time - I thought that I should use tstats instead - but some how I can't make it work. The individual searches works - but not combined as subsearch as in this example: | tstats count where index=wineventlog sourcetype="xmlwineventlog:security" earliest=-15m@m-1w latest=@m-1w by host | rename count as LastWeek | appendcols [search [|tstats count where index=wineventlog sourcetype="xmlwineventlog:security" earliest=-15m@m latest=@m by host | rename count as Today]] | table host LastWeek Today In this search it only returns values for "LastWeek" - nothing for "Today", but the individual searches with tstast works without problems. Anyone with a clue? ... View more

Re: Template for Citrix XenApp error from GetXAApp...

by in All Apps and Add-ons
‎10-16-2015 05:57 AM
1 Karma
‎10-16-2015 05:57 AM
1 Karma
This is probably because you have published desktops - which do not have any "CommandLine". So you could change the Get-XAApplicationReport line: foreach( $Application in (Get-XAApplicationReport * ) ) { to: foreach( $Application in (Get-XAApplicationReport * | where-object {$_.ApplicationType -ne "ServerDesktop"}) ) { Then it will not check those published "app".,This is probably because you have published desktops - which do not have any "CommandLine". So you could change the Get-XAApplicationReport line: foreach( $Application in (Get-XAApplicationReport * ) ) { to: foreach( $Application in (Get-XAApplicationReport * | where-object {$_.ApplicationType -ne "ServerDesktop"}) ) { Then it will not check those published "app". ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM
Karma from
View All