Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About benji00
benji00
New Member
Member since:
02-26-2019
06-05-2020
Community Statistics
| Posts | 13 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 02-26-2019 |
Activity Feed
- Posted CommonBaseEvent treatment on Monitoring Splunk. 09-10-2019 08:31 AM
- Tagged CommonBaseEvent treatment on Monitoring Splunk. 09-10-2019 08:31 AM
- Posted Re: event with time record on Getting Data In. 07-12-2019 01:17 AM
- Posted Re: event with time record on Getting Data In. 07-11-2019 06:52 AM
- Posted event with time record on Getting Data In. 07-11-2019 06:04 AM
- Tagged event with time record on Getting Data In. 07-11-2019 06:04 AM
- Posted Re: Query execution time on Splunk Search. 03-13-2019 05:18 AM
- Posted Query execution time on Splunk Search. 03-12-2019 01:47 AM
- Tagged Query execution time on Splunk Search. 03-12-2019 01:47 AM
- Posted Re: chart for startup time on Splunk Search. 03-01-2019 10:52 AM
- Posted Re: chart for startup time on Splunk Search. 03-01-2019 07:43 AM
- Posted chart for startup time on Splunk Search. 03-01-2019 05:17 AM
- Tagged chart for startup time on Splunk Search. 03-01-2019 05:17 AM
- Tagged chart for startup time on Splunk Search. 03-01-2019 05:17 AM
- Posted Re: Can you help me with DB/Index app monitoring? on Splunk Search. 03-01-2019 05:02 AM
- Posted Re: Can you help me with DB/Index app monitoring? on Splunk Search. 03-01-2019 04:57 AM
- Posted Re: Can you help me with DB/Index app monitoring? on Splunk Search. 03-01-2019 04:56 AM
- Posted Can you help me with DB/Index app monitoring? on Splunk Search. 02-26-2019 02:44 AM
- Tagged Can you help me with DB/Index app monitoring? on Splunk Search. 02-26-2019 02:44 AM
- Tagged Can you help me with DB/Index app monitoring? on Splunk Search. 02-26-2019 02:44 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-10-2019
08:31 AM
Hello all,
I receiving some event from our Monitoring Agent tool (from the editor Dassault Systemes) through Common Base Event format like:
<extendedDataElements name="status" type="string">
<values>0</values>
</extendedDataElements>
<extendedDataElements name="elapsed" type="string">
<values>203</values>
</extendedDataElements>
<extendedDataElements name="_period" type="string">
<values>300</values>
</extendedDataElements>
<extendedDataElements name="connection" type="string">
<values>47</values>
</extendedDataElements>
<extendedDataElements name="logoutTime" type="string">
<values>62</values>
</extendedDataElements>
<extendedDataElements name="getLoginPageTime" type="string">
<values>78</values>
</extendedDataElements>
<sourceComponentId componentType="ProductName" instanceId="3dpassport_TEST1" component="serviceHealthCheck" processId="" locationType="Hostname" location="io-ws-3de71ts" subComponent="" componentIdType="ProductName"/>
<situation categoryName="ReportSituation">
<situationType reportCategory="LOG" xsi:type="ReportSituation" reasoningScope="INTERNAL"/>
</situation>
</CommonBaseEvent>
I don't really understand how can I operate for example the "ELAPSED" extended elements and moreover be able to track his value evolution
Any clue on your side?
... View more
- Tags:
- splunk-enterprise
03-13-2019
05:18 AM
Hello @nickhillscpl,
Thanks for you feedback.
Yes finally I used the extractong fields mode by using delimiters and it is working correctly. Not sure if it is the most efficient way but it is working.
Your way seems quite clean... why do you say it is a dirty way ?
Anyway I am going to accept your comment.
... View more
03-01-2019
05:28 AM
The query below is a mock up because nobody has access to your data. It builds your data and then adds the statistics I believe is what you wanted there
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
