cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
Arun_N_00007
New Member
Member since: ‎03-20-2019
‎08-27-2020
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎03-20-2019
Activity Feed
View All

Splunk Custom Command Trimming Spaces in Fields

by in Dashboards & Visualizations
‎08-27-2020 06:13 AM
‎08-27-2020 06:13 AM
Hi All, I observed in Splunk Query Language that, Any field’s values are getting trimmed after going through Splunk’s Custom Command’s execution. Commands are developed using Splunk’s API and we are not touching those fields inside the command. In configurations(commands.conf) found there is no such property values which can avoid this.   With Custom Command Without Custom Command Custom Command Code, import splunk.Intersplunk results,unused1,unused2 = splunk.Intersplunk.getOrganizedResults() keywords, argvals = splunk.Intersplunk.getKeywordsAndOptions() field = argvals.get("field") for r in results:     try:         r[field] = r[r[field]]     except Exception, e:         r[field] = None splunk.Intersplunk.outputResults(results) ... View more
Labels

Re: Splunk pivot screen base search is paused

by in Reporting
‎03-25-2019 12:33 AM
‎03-25-2019 12:33 AM
Whenever i load the data model am getting below error message. This search did not successfully execute. Any results returned from this job are not consistent and should not be used. And in search log am getting entries like below, But i never applied pause.. 😞 03-25-2019 13:01:29.791 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:29.791 INFO DispatchExecutor - User applied action=PAUSE while status=1 03-25-2019 13:01:29.892 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:29.892 INFO DispatchExecutor - User applied action=PAUSE while status=1 03-25-2019 13:01:29.998 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:29.998 INFO DispatchExecutor - User applied action=PAUSE while status=1 03-25-2019 13:01:30.100 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:30.100 INFO DispatchExecutor - User applied action=PAUSE while status=1 03-25-2019 13:01:30.189 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:30.189 INFO DispatchExecutor - User applied action=PAUSE while status=1 03-25-2019 13:01:30.299 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:30.299 INFO DispatchExecutor - User applied action=PAUSE while status=1 03-25-2019 13:01:30.399 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:30.399 INFO DispatchExecutor - User applied action=PAUSE while status=1 03-25-2019 13:01:30.491 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:30.491 INFO DispatchExecutor - User applied action=PAUSE while status=1 03-25-2019 13:01:30.589 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:30.589 INFO DispatchExecutor - User applied action=PAUSE while status=1 03-25-2019 13:01:30.693 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:30.693 INFO DispatchExecutor - User applied action=PAUSE while status=1 03-25-2019 13:01:30.787 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:30.787 INFO DispatchExecutor - User applied action=PAUSE while status=1 03-25-2019 13:01:30.888 INFO ReducePhaseExecutor - ReducePhaseExecutor=1 action=PAUSE 03-25-2019 13:01:30.888 INFO DispatchExecutor - User applied action=PAUSE while status=1 ... View more

Splunk pivot screen base search is paused

by in Reporting
‎03-21-2019 04:23 AM
‎03-21-2019 04:23 AM
Hello All, When i open my datamodel in pivote screen 2 searches are dispatched, One is base search which searches for all time and another one is tscollect runs on top of it to do aggregation/filters. The base search is getting paused within seconds witout any reason. DUe to this my search is not returning any results. If i open the same report in open in search mode it works fine (Then it executes with pivot command.) Please let me know why it happens and how to resolve this? Regards, Arun N ... View more

Splunk pivot screen base search is paused

by in Reporting
‎03-20-2019 08:49 PM
‎03-20-2019 08:49 PM
Hello All, When i open my datamodel in pivote screen 2 searches are dispatched, One is base search which searches for all time and another one is tscollect runs on top of it to do aggregation/filters. The base search is getting paused within seconds witout any reason. DUe to this my search is not returning any results. If i open the same report in open in search mode it works fine (Then it executes with pivot command.) Please let me know why it happens and how to resolve this? Regards, Arun N ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎08-27-2020 09:36 AM