Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Madhan45
Madhan45
Path Finder
Member since:
02-06-2015
06-05-2020
Community Statistics
| Posts | 87 |
| Solutions | 1 |
| Karma Given | 8 |
| Karma Received | 1 |
| Member Since | 02-06-2015 |
Activity Feed
- Karma Re: mvexpand multiple multi-value fields [MACRO BASED SOLUTION] for dmanojbaba. 06-05-2020 12:50 AM
- Karma Microsoft Office 365 Reporting Add-on for Splunk not pulling data - exiting with 500 Internal Server Error for nmadhok. 06-05-2020 12:50 AM
- Karma Re: How to edit content of dashboard values from UI? for rjthibod. 06-05-2020 12:49 AM
- Karma For Splunk Enterprise, Splunk Light, and Hunk pre 6.3, default root certificates expire on July 21, 2016 - Recommendations? for Ellen. 06-05-2020 12:48 AM
- Karma Re: For Splunk Enterprise, Splunk Light, and Hunk pre 6.3, default root certificates expire on July 21, 2016 - Recommendations? for Ellen. 06-05-2020 12:48 AM
- Karma Re: For Splunk Enterprise, Splunk Light, and Hunk pre 6.3, default root certificates expire on July 21, 2016 - Recommendations? for weeb. 06-05-2020 12:48 AM
- Karma Re: What is the difference between frozen bucket and thawed bucket? for javiergn. 06-05-2020 12:48 AM
- Karma Re: After upgrading Splunk from 6.2 to 6.3.1, why am I getting no results searching any indexes? for martin_mueller. 06-05-2020 12:48 AM
- Got Karma for "Edit panel" option is not available in the dashboard (version 6.2.0) What is the problem?. 06-05-2020 12:47 AM
- Posted How to find the app name in splunk internal log? And also How to find that certain APP has data model config in it? on Knowledge Management. 03-28-2018 12:14 AM
- Posted How to assign _time value to another field which is already exist in the data with value? on Getting Data In. 02-05-2018 11:48 PM
- Posted Re: Are inputs.conf attribute values case sensitive? on Getting Data In. 09-21-2017 03:08 AM
- Posted Re: Are inputs.conf attribute values case sensitive? on Getting Data In. 09-21-2017 02:50 AM
- Posted Re: Are inputs.conf attribute values case sensitive? on Getting Data In. 09-21-2017 02:40 AM
- Posted Are inputs.conf attribute values case sensitive? on Getting Data In. 09-21-2017 02:39 AM
- Tagged Are inputs.conf attribute values case sensitive? on Getting Data In. 09-21-2017 02:39 AM
- Posted Re: How to populate the Date field in log in Splunk DBX 1.1.6 ? on Getting Data In. 08-17-2017 11:05 PM
- Posted How to populate the Date field in log in Splunk DBX 1.1.6 ? on Getting Data In. 08-17-2017 10:41 PM
- Posted Re: How to edit content of dashboard values from UI? on Dashboards & Visualizations. 08-04-2017 03:26 AM
- Posted How to edit content of dashboard values from UI? on Dashboards & Visualizations. 08-04-2017 02:53 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
03-28-2018
12:14 AM
How to find the app name in splunk internal log? And also How to find that certain APP has data model config in it(eventtypes & tags conf files)?
Is there way to find a datamodel name which resides inside a certain app using internal/some other logs?
... View more
02-05-2018
11:48 PM
I used below setting in props foe below sample data. But didn't help. Is that possible and how?
1.SEDCMD-Validated_time=sed "s/\"validated_time\":\"\d{4}-\d{2}-\d{2}\s+\d{2}:\d{2}:\d{2}\",/\"validated_time\":\"_time\"/g"
2.SEDCMD-Validated_time=sed "s/\"validated_time\":\"\d{4}-\d{2}-\d{2}\s+\d{2}:\d{2}:\d{2}\",/\"validated_time\":\"$_time\"/g"
3.SEDCMD-Validated_time=sed "s/\"validated_time\":\"\d{4}-\d{2}-\d{2}\s+\d{2}:\d{2}:\d{2}\",/\"validated_time\":\"$_time$\"/g"
exam_date: 2018-01-19
details: { [-]
grade: NEUTRAL
occurrences: { [-]
"validated_time":" 2018-01-19 16:51:28"
}
}
Thanks in advance.
... View more
- Tags:
- props.conf
09-21-2017
02:50 AM
Thanks for response Giuseppe.
so you meant to say "(astric)ABC(actric).txt", will not capture "welcomeabcde.txt" file in unix?
Is my understanding is correct?
... View more
09-21-2017
02:40 AM
Setting:
[monitor:///tmp/ABC.txt]
File name :
welcomeabcdef.txt
... View more
09-21-2017
02:39 AM
[monitor:///tmp/ABC.txt] is my monitor stanza.
But if i have the file welcomeabcdef.txt that is "abc" (lowercase instead of uppercase) will it be read and indexed by Splunk?
... View more
08-17-2017
11:05 PM
Hi Cusello,
thanks for the reply, There is no problem in converting epoch value into human readable format.
after the conversion, the correct timestamp is coming at the begining of the logs but again i need the field event_dt in the log in same format such as event_dt=150023123.
Hope you understood my question.
... View more
08-17-2017
10:41 PM
Actual log format: event_name:myname event_date:150012356 event_id
i Have chosen this event_date as timestamp column, now it is getting converted into human readable format as shown below:
Current log format: 2017-08-17 event_name:myname event_id:2134
(epoch value in event_date is converting and coming at the beggining of the event that is fine. but again i want that is to be present in the log as well like 2017-08-17 event_name:myname event_date:150012356 event_id:2134).
How to resolve this? Is there any parameter needs to amend/sql query needs to changed? im using dbx version 1.1.6.
... View more
08-04-2017
03:26 AM
Thanks much.. This is cool.
... View more
08-04-2017
02:53 AM
I have just uploaded the lookup file into splunk and save that as a dashboard.
Now that dashboard displays the content of file. I want to edit all the cell values from splunk UI. and the bottom of that dashboard i need a save button.
For example Status is column name, under that i would like to add "succedd" and save it.
How could i do that. i knew i need to use javascript to make it as possible?
Can someone help me on this?
... View more
06-25-2016
04:04 AM
Its working.. but now the problem is im not able to reload. But start/stop/restarting is working fine
... View more
06-24-2016
04:49 AM
Okay.. I got it..
Proactively I will reinstall splunk. That would be the best option.
Thanks..!!!
... View more
06-24-2016
04:35 AM
I meant shall I copy & paste that directory from some other splunk instances and then restart?
Will it work?
... View more
06-24-2016
04:32 AM
Below is the error after the deleting that directory:
Could not find platform independent libraries
Could not find platform independent libraries
Consider setting $PYTHONHOME to [:]
ImportError: No module named site
What if I take the directory python2.7 from some other splunk instances ?
Will it lead to splunk crash???
... View more
06-24-2016
04:25 AM
yes still I have this error and i deleted splunk/lib/python2.7
... View more
06-24-2016
03:33 AM
What if I copy the same python2.7 from some other Splunk?
Will it crash existing Splunk ?
... View more
06-24-2016
02:28 AM
While Restartting/Reloading of splunk it showed some error in splunk/lib/python2.7. So I deleted the entire directory python2.7 now it is showing below errors
Could not find platform independent libraries
Could not find platform independent libraries
Consider setting $PYTHONHOME to [:]
ImportError: No module named site
What could be the root cause?
... View more
06-24-2016
01:19 AM
I'm not able to start/stop splunk. And it is passing some error in python2.7 from the directory splunk/lib.
So I just deleted the directory and tried. but still it is not working.
... View more
- Tags:
- python
- start-stop
06-23-2016
10:19 PM
OOPS!! SORRRY TO SAY..!! There were some problem in client outlook. SO we didn't get few mails properly.
Thanks for the response jplumsdaine22 , woodcook
... View more
06-23-2016
04:15 AM
Referred python.log, In that I can see the status as alert has been triggered for that particular search. But none of the recipient's get the mail for that.
What could be the problem?
Thanks in advance!!
(Note: Don't ask whether the condition had met to trigger an alert or not:-P )
... View more
- Tags:
- alert
- python.log
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
