Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About raghu_vedic
raghu_vedic
Path Finder
Member since:
01-24-2016
06-05-2020
Community Statistics
| Posts | 17 |
| Solutions | 0 |
| Karma Given | 9 |
| Karma Received | 9 |
| Member Since | 01-24-2016 |
Activity Feed
- Got Karma for Re: How to hide or remove the "edit" button from an app's user interface?. 09-30-2021 11:52 AM
- Karma Re: Ldapsearch not able to get member;range0-1499 in Splunk query. for acharlieh. 06-05-2020 12:49 AM
- Karma Re: Splunk dashboard do mathematical operation for set token value for Umesh_Vedicsoft. 06-05-2020 12:48 AM
- Got Karma for Re: How to troubleshoot why Splunk performance decreased and images were not displaying in navigation menus for a certain day?. 06-05-2020 12:48 AM
- Karma Re: Cooked connection to ip timed out for masonmorales. 06-05-2020 12:47 AM
- Karma Re: Merge Lines Query based on ID for rakeshh123. 06-05-2020 12:47 AM
- Karma Re: what would be the wrapper code for Circle Packing D3 chart for gitanjali. 06-05-2020 12:47 AM
- Karma Re: Email alert error "command="sendemail" [Errno 10060] A connection attempt failed because the connected party did not properly respond after a period of time"? for rakeshh123. 06-05-2020 12:47 AM
- Karma Re: Why are the search and query tags in my dashboard XML failing? for richgalloway. 06-05-2020 12:47 AM
- Got Karma for Re: How to hide or remove the "edit" button from an app's user interface?. 06-05-2020 12:47 AM
- Got Karma for Re: How to hide or remove the "edit" button from an app's user interface?. 06-05-2020 12:47 AM
- Got Karma for Re: How to hide or remove the "edit" button from an app's user interface?. 06-05-2020 12:47 AM
- Got Karma for Re: How to hide or remove the "edit" button from an app's user interface?. 06-05-2020 12:47 AM
- Got Karma for Re: what would be the wrapper code for Circle Packing D3 chart. 06-05-2020 12:47 AM
- Got Karma for Re: what would be the wrapper code for Circle Packing D3 chart. 06-05-2020 12:47 AM
- Got Karma for Re: what would be the wrapper code for Circle Packing D3 chart. 06-05-2020 12:47 AM
- Karma Re: cpu.sh is not working in new unix app for Dimitri_McKay. 06-05-2020 12:46 AM
- Karma Re: HTTP Client Timeout for rakeshh123. 06-05-2020 12:46 AM
- Posted Unable to distribute to peer from search head on Splunk Enterprise Security. 04-20-2018 06:49 AM
- Tagged Unable to distribute to peer from search head on Splunk Enterprise Security. 04-20-2018 06:49 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
04-20-2018
06:49 AM
Hi,
We are facing this issue frequently in splunk search head. Please help me.
Unable to distribute to peer named XXXXXXat uri https://XX.XX.XX.XX:8089 because replication was unsuccessful. replicationStatus Failed failure info: Dispatch Command: Search bundle throttling is occurring because the limit for number of bundles with pending lookups for indexing has been exceeded. This could be the result of large lookup files updating faster than Splunk software can index them. Throttling ends when this instance has caught up with indexing of lookups. If you see this often, contact your Splunk administrator about tuning lookup sizes and max_memtable_bytes. Please verify connectivity to the search peer, that the search peer is up, and an adequate level of system resources are available. See the Troubleshooting Manual for more information.
... View more
04-08-2018
05:17 AM
Hi , Thanks for your reply..
It sending error as
Invalid attribute.
But I can see member;range0-1499 in events.
... View more
04-07-2018
09:19 AM
Hi,
Please find the query
| ldapsearch search="(&(objectCategory=group))" attrs="member;range0-1499" | table member;range0-1499.
Note: I am not getting empty in member attribute
... View more
01-03-2018
06:34 AM
Splunkd instance is not running bcz of multiple defunct pid are created, even we are killing the PIDs splunk is not working.Please help me out how to kill and start splunk.
... View more
- Tags:
- splunk-enterprise
01-03-2018
12:34 AM
@splunkdevabhi I am facing similar issue , did you have any solution for this error?
... View more
09-07-2017
12:14 AM
Thanks for the reply,
but I have one question
for daily data volumn less than 1GB/day we are using only one indexer(12 core CPU),
for indexing process it will use 1 cores and remaining 11 cores will be available. So running 100 concurrent searches it will take more time to exceute ( If No. of sec. per individual search is=10 then Approx. time (sec.) to complete all searches = 90 seconds) .
What will be the solution Will I increase more CPU cores in one indexer(Approx. 128 cores. ) or I have to follow indexer clustering concept because for index clustering minimum daily data volumn should be more than 20 GB/day.
... View more
09-06-2017
10:24 PM
Hi,
I want to setup departmental architecture because we are getting daily data volume is 1 GB/day.
As per the splunk documentation about departmental architecture they said required only one single instance (indexer + search head). But I divide indexer to search head through distributed search , Is this process good or anything wrong.
Hardware setup for indexer and search head
Intel x86 64-bit chip architecture
12 CPU cores at 2Ghz or greater speed per core
12GB RAM
Standard 1Gb Ethernet NIC, optional second NIC for a management network
Standard 64-bit Linux or Windows distribution
Based on daily data volume 1GB/day we decide departmental architecture , but Is it possible to follow small tier architecture. Please let me know, if I am going in wrong direction.
For more 100 concurrent users or searches what setup I have to do in departmental architecture.
... View more
- Tags:
- splunk-enterprise
09-06-2017
09:40 PM
Hi,
What are the system requirements like RAM & cores etc. If we use the departmental architecture in Virtual machine.
... View more
- Tags:
- splunk-enterprise
06-15-2017
12:31 AM
Hi,
I want to set token value for setTailValue
if $job.resultCount$ is 3 then value have to set 20-17=3, but its displaying 20-17 as it taking string.
<set token="setTailValue">20-$job.resultCount$</set>
... View more
- Tags:
- splunk-enterprise
03-01-2017
01:46 AM
I installed splunk in one server and also enabled the receiver please check related urls
url - http://:{private ip address}8000
reciever - http://:{private ip address}9997
I installed universal forwarder in other server (different network too) when I add forwarder server with hostname, it is not connecting because it is taking public IP address instead of private IP address. please let me know, how to solve the problem to forward the logs from UF to splunk instance on different networks.
... View more
- Tags:
- splunk-enterprise
09-28-2016
11:22 PM
If it is possible then please mention in steps.
If not, please mention other way of solution.
... View more
09-28-2016
11:15 PM
I have the splunk license instance in my system. Is it possible to use same license file to cloud server (not splunkcloud) to migrate?
... View more
- Tags:
- splunk-enterprise
06-06-2016
04:44 AM
1 Karma
Hi Donald ,
Convert the images into base 64 encode and replace it instead of URL then it will be very fast
... View more
03-25-2016
04:33 AM
first get the first query data i.e uid and user as index=your_index_name | stats count by uid user
then map it with second query as | map search="search index=your_index_name
ip=$user$ and then display as | stats first(loginLength) as $uid$
final query is
***index=your_index_name | stats count by uid user
| map search="search index=your_index_name
ip=$user$ | stats first(loginLength) as $uid$* | transpose"**
... View more
02-04-2016
04:57 AM
5 Karma
HI,
Create dashboard.css file inside apps//appserver/static/dashboard.css
add this line inside dashboard.css then restart splunk & check it. 🙂
.btn-group:first-child{
display:none;
}
... View more
02-03-2016
11:24 PM
In my app, I created custom fields to write the search.
So when other users install my app, custom fields have to be created automatically. Is it possible?
... View more
Labels
- Labels:
-
app
01-24-2016
10:54 PM
3 Karma
,Create dashboard xml file
<label>Circle chart</label>
<row>
<html>
<div align="center" valign="middle" id="custom"
class="splunk-view"
data-require="app/<Your_app>/components/circlechart/circlechart"
'>
</div>
</html>
</row>
then next create app//components/circlechart/circlechart.js file and paste the code given below.
/*
* Simple TagCloud visualization
* This view is an example for a simple visualization based on search results
*/
define(function(require, module) {
var _ = require('underscore'), $ = require('jquery');
var d3 = require("../d3.v3.min.js"); // create //d3js.org/d3.v3.min.js inside components folder
var SimpleSplunkView = require('splunkjs/mvc/simplesplunkview');
var Drilldown = require('splunkjs/mvc/drilldown');
var Circle= SimpleSplunkView.extend({
moduleId: module.id,
output_mode: 'json',
/* Create svg inside the create view*/
createView: function() {
this.$el.html('');
var svg=d3.select(this.el).append("svg")
.attr("width", diameter)
.attr("height", diameter)
return { container: this.$el, svg: svg};
},
/* result svg append to g tag inside the update view*/
updateView: function(viz, data) {
var diameter = 960,
format = d3.format(",d");
var pack = d3.layout.pack()
.size([diameter - 4, diameter - 4])
.value(function(d) { return d.size; });
viz.svg.
.append("g")
.attr("transform", "translate(2,2)");
d3.json("./flare.json", function(error, root) {
if (error) throw error;
var node = svg.datum(root).selectAll(".node")
.data(pack.nodes)
.enter().append("g")
.attr("class", function(d) { return d.children ? "node" : "leaf node"; })
.attr("transform", function(d) { return "translate(" + d.x + "," + d.y + ")"; });
node.append("title")
.text(function(d) { return d.name + (d.children ? "" : ": " + format(d.size)); });
node.append("circle")
.attr("r", function(d) { return d.r; });
node.filter(function(d) { return !d.children; }).append("text")
.attr("dy", ".3em")
.style("text-anchor", "middle")
.text(function(d) { return d.name.substring(0, d.r / 3); });
});
d3.select(self.frameElement).style("height", diameter + "px");
}
});
return Circle;
});
at last return Circle will display the Circle chart
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
Karma from
Karma given to
