Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About vnravikumar
vnravikumar
Champion
Member since:
01-07-2019
11-19-2023
Community Statistics
| Posts | 904 |
| Solutions | 224 |
| Karma Given | 2 |
| Karma Received | 297 |
| Member Since | 01-07-2019 |
Activity Feed
- Got Karma for Re: Fix table header and add vertical scrollbar using CSS and JavaScript. 03-17-2025 09:11 PM
- Got Karma for Re: Mouse hover tooltip on inputs. 12-12-2024 04:58 AM
- Got Karma for Re: Changing data label font size. 12-09-2024 02:22 PM
- Got Karma for Re: How to make table row count 100 over?. 11-08-2024 01:25 AM
- Got Karma for Re: How to sort a chart based on a sum?. 11-04-2024 09:42 AM
- Got Karma for Re: How to sort a chart based on a sum?. 11-04-2024 09:41 AM
- Got Karma for Re: If statement wild card. 10-11-2024 03:26 AM
- Got Karma for Re: Mouse hover tooltip on inputs. 08-22-2024 03:21 AM
- Got Karma for Re: Using panel id to change background color of panel. 06-25-2024 11:49 PM
- Got Karma for Re: How do you have a drilldown condition use Field AND Match?. 05-28-2024 10:41 AM
- Got Karma for Re: Fix table header and add vertical scrollbar using CSS and JavaScript. 03-06-2024 01:29 AM
- Got Karma for Re: View the parameters, e.g. from limits.conf using the search. 02-09-2024 08:47 AM
- Got Karma for Re: regex - everything after last slash. 01-26-2024 07:03 AM
- Got Karma for Re: Why is there a 10000 rows limit?. 09-14-2023 03:17 AM
- Got Karma for Re: Increase width of a multiselect? Of a timepicker?. 04-26-2023 12:49 PM
- Got Karma for Re: How do you remove the first letter of a value?. 04-22-2023 03:19 AM
- Got Karma for Re: How to unset token if I choose other values from dropdown. 04-19-2023 06:32 AM
- Got Karma for Re: Why is there a 10000 rows limit?. 04-05-2023 11:28 PM
- Got Karma for Re: How do you enable/disable (Hide/show) dropdown field based on options in radio buttons?. 11-18-2022 02:24 AM
- Got Karma for Re: How to Horizontally align the radio button in Splunk dashboard. 11-04-2022 02:37 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 |
08-09-2022
06:18 AM
@pavanae , you can try this | makeresults
| eval code_value ="ABC-123 JHLIK,
ABC-456 LKJF,
ABC-781 klklk,
ABC-22 olsd"
| makemv delim="," code_value
| mvexpand code_value
| eval result=mvindex(split(code_value," "),0)
... View more
08-09-2022
06:11 AM
@labaningombam , you want to extract only after '/v1/locations/' or any multiple conditions there?
... View more
03-01-2022
01:50 AM
src refers to your app directory
... View more
02-04-2021
02:01 AM
Hi Try this | makeresults
| eval message="\"] id not found for opp : [12345azeAZE\" (A),
\"] id not found for opp : [12345azeAZE\" (A),
\"] id not found for opp : [12345azeAZE\" (A),
\"] id not found for opp : [75895kezWXE\" (B),
\"] id not found for opp : [75895kezWXE\" (B),
\"] id not found for opp : [35856uioAME\" (C),
\"] id not found for opp : [35856uioAME\" (C)"
| makemv delim="," message
| mvexpand message
| rex field=message ":\s\[(?P<test>[^\"]+)"
| stats count by test
... View more
02-04-2021
01:40 AM
1 Karma
Hi Try this rex | makeresults
| eval message=" \"] id not found for opp : [12345azeAZE\""
| rex field=message ":\s\[(?P<test>[^\"]+)"
... View more
12-15-2020
07:38 AM
Hi I moved the Splunk server(ver.8.0.2 stand alone) into a new instance by copying the entire setup(/opt/splunk). Both are running in Centos7 but the issue is when I started the server in a new instance all the data(till yesterday) got removed from the indexes and the server contains only today's data. What could be wrong? I moved the entire setup. Need your help here. Or at least how to restore from /opt/splunk/var/lib/. Thanks,
... View more
Labels
- Labels:
-
indexer
10-23-2020
02:31 AM
1 Karma
Hi Try this | makeresults
| eval hostname = "DOMAIN\host1,host2.xxxx.xx.xxxx"
| makemv delim="," hostname
| mvexpand hostname
| rex field=hostname "(DOMAIN\\\){0,1}(?P<host>[^.]+)"
... View more
10-19-2020
03:38 AM
2 Karma
Hi Try this | rex field=log max_match=0 "\[{0,}\'(?P<output>[^',]+)"
| mvexpand output
| table output
... View more
07-07-2020
08:06 AM
Hi @limalbert Try this <dashboard theme="dark">
<label>temp</label>
<row depends="$hide$">
<html>
<style>
#rk h2{
text-align:center;background-color:#485959;
}
</style>
</html>
</row>
<row>
<panel id="rk">
<title>Temp</title>
<html/>
</panel>
</row>
</dashboard>
... View more
- Tags:
- hi
06-10-2020
01:39 AM
Hi Try this | makeresults
| eval test="\"POST /operation/requiredword\",\"POST /operation/requiredword | error\""
| makemv delim="," test
| mvexpand test
| regex test!="(\| error)"
... View more
05-30-2020
07:20 AM
Hi
Check this
<dashboard>
<label>tablr</label>
<row depends="$hide$">
<html>
<style>
#table1 .table th,#table1 .table td {
text-align: left !important;
font-weight: bold !important;
}
</style>
</html>
</row>
<row>
<panel>
<table id="table1">
<search>
<query>index="_internal" |stats count by sourcetype</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
</table>
</panel>
</row>
<row>
<panel>
<table id="table2">
<search>
<query>index="_internal" |stats count by source</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
</table>
</panel>
</row>
</dashboard>
... View more
05-26-2020
07:46 PM
Hi
Try this
| makeresults
| eval temp="98000020200512 -992.00 0.00 001 01,
98000020200523 830566.00 0.00 001 02,
98000020200515 -7356.00 0.00 001 03,
98000020200516 -18760.00 0.00 001 04,
98000020200518 764074.00 0.00 001 05,
98000020200530 165432.00 0.00 001 06,
98000020200531 98715.00 0.00 001 07,
98000020200511 119993.00 0.00 001 08,
98000020200502 908831.00 0.00 001 09,
12000020200507 -5481.00 0.00 001 10"
| makemv delim="," temp
| mvexpand temp
| eval result= mvindex(split(temp," "),1)
| table result
... View more
05-20-2020
09:06 PM
1 Karma
Hi
You can try with CSS like
<form>
<label>checkbox</label>
<row>
<panel>
<input type="checkbox" token="Registrations" id="chk">
<label></label>
<choice value="Registered Subscribers">Registered Subscribers</choice>
</input>
</panel>
</row>
<row depends="$hide$">
<html>
<style>
#chk div[data-component="splunk-core:/splunkjs/mvc/components/CheckboxGroup"]{
height:150px !important;
}
</style>
</html>
</row>
</form>
... View more
05-20-2020
05:39 AM
Hi
Check this
| makeresults
| eval str="pgn-aemrules,1.1,2020-04-02;pgn-csharp,8.4 (build 15306),2020-02-21;pgn-csharp,8.5 (build 15942),2020-03-16;"
| makemv delim=";" str
| mvexpand str
| rex field=str "(?P<Key>[^,]+),(?P<Version>[^,]+),(?P<Date>\S+)"
| table Key Version Date
... View more
05-20-2020
05:31 AM
1 Karma
Hi
Check this sample
<form script="dp.js">
<label>dropdown_js</label>
<fieldset submitButton="false">
<input type="dropdown" token="choice" id="dp">
<label>field1</label>
<choice value="one">one</choice>
<choice value="two">two</choice>
</input>
</fieldset>
</form>
js:
require([
"jquery",
"splunkjs/mvc",
"splunkjs/mvc/simplexml/ready!"], function($, mvc) {
var dropdown = splunkjs.mvc.Components.get("dp");
dropdown.settings.set("selectFirstChoice",true);
});
... View more
05-19-2020
02:55 AM
Hi
Try this rex
|rex "\"device\"\:\"(?P<device>[^"]+)\"\,\"host\"\:\"(?P<ip>[^"]+)"
... View more
05-19-2020
01:01 AM
Hi
Try with id in CSS
<style>
#single_dropdown .input-dropdown {
}
#single_dropdown .splunk-dropdown .select2-container {
}
</style>
... View more
05-17-2020
08:51 PM
1 Karma
Hi
Check this
| makeresults
| eval total_seconds="9386717.000000"
| eval temp =tostring(total_seconds, "duration")
| rex field=temp "((?<days>^[^+]+)\+){0,1}(?P<hour>[^:]+):(?P<minutes>[^:]+):(?P<seconds>[^.]+)"
| eval day_to_hour=if(days>0,days*24+hour,days)
| eval output=if(days>0,day_to_hour.":".minutes.":".seconds,hour.":".minutes.":".seconds)
| table output
... View more
05-15-2020
10:59 PM
Hi
Check this
| makeresults
| eval json="{\"clusterA\": ubuntu,
\"clusterA\": ubuntu,
\"clusterA\": rhel5,
\"clusterA\": sles11,
\"clusterB\": sles11,
\"clusterB\": sles11,
\"clusterB\": ubuntu,
\"clusterC\": centos,
\"clusterC\": ubuntu}"
| eval json=replace(json,"\"|{|\s|}","")
| makemv delim="," json
| mvexpand json
| eval temp=split(json,":"),cluster=mvindex(temp,0),os=mvindex(temp,1)
| stats count by cluster,os
... View more
05-15-2020
07:07 AM
1 Karma
Hi
Check this
| makeresults
| eval Entorno="test","tip de red"="dmz",FW="yes"
| append
[| makeresults
| eval Entorno="test","tip de red"="dmz",FW="no" ]
| append
[| makeresults
| eval Entorno="test","tip de red"="lan",FW="yes" ]
| append
[| makeresults
| eval Entorno="production","tip de red"="dmz",FW="yes" ]
| append
[| makeresults
| eval Entorno="production","tip de red"="dmz",FW="no" ]
| append
[| makeresults
| eval Entorno="production","tip de red"="lan",FW="yes" ]
| append
[| makeresults
| eval Entorno="production","tip de red"="lan",FW="no" ]
| eval temp='tip de red'.",".'FW'
| stats list(temp) as temp by Entorno
| rex field=temp "(?P<tip_de_red>[^,]+),(?P<FW>\S+)"
| table Entorno "tip_de_red" FW
... View more
05-15-2020
02:56 AM
Hi
Check this
...yourquery..| table date,year,quarter,statementType,dataCode,value
| eval {dataCode}=value
| fillnull value=0.0
| fields - dataCode,value
... View more
05-14-2020
07:51 PM
Hi
Check this
| makeresults
| eval _time="2020-05-12",field1="40-35-32",field2="A-B-C"
| append
[| makeresults
| eval _time="2020-05-13",field1="63-28-74",field2="A-B-C"]
| eval field1=split(field1,"-"),field2=split(field2,"-")
| eval temp=mvzip(field1,field2)
| mvexpand temp
| eval temp=split(temp,",")
| eval field1=mvindex(temp,0),field2=mvindex(temp,1)
| fields - temp
... View more
05-14-2020
12:11 AM
Hi
Give a try with this rex
| makeresults
| eval _raw="x_forwarded_proto:\"https\" vcap_request_id:\"2978162c-8dcc-47cb-ad10- e73187c36896\" response_time:1.833375 gorouter_time:0.000280 app_id:\"fd22e808-539c-4003-b221-cdc42aa03dbb\" app_index:\"0\" x_b3_traceid:\"12474aa9e6d47857\" x_b3_spanid:\"d3745ed0d25bd8d3\" x_b3_parentspanid:\"12474aa9e6d47857\" b3:\"12474aa9e6d47857- d3745ed0d25bd8d3-1-12474aa9e6d47857\" "
| rex "response_time:(?P<response_time>\S+)"
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-19-2023
05:21 PM
|
