Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About geantver0000
geantver0000
Engager
Member since:
05-23-2016
06-05-2020
Community Statistics
| Posts | 6 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 05-23-2016 |
Activity Feed
- Karma Re: How to write a search to output results where a field from my events match with a field in my lookup CSV file? for splunkton. 06-05-2020 12:48 AM
- Posted Specific Alert on Splunk Search. 03-15-2018 01:48 AM
- Tagged Specific Alert on Splunk Search. 03-15-2018 01:48 AM
- Posted Re: How to switch between active/inactive forwarders when you have a cluster? on Deployment Architecture. 09-15-2017 05:18 AM
- Posted How to switch between active/inactive forwarders when you have a cluster? on Deployment Architecture. 09-14-2017 01:48 AM
- Tagged How to switch between active/inactive forwarders when you have a cluster? on Deployment Architecture. 09-14-2017 01:48 AM
- Tagged How to switch between active/inactive forwarders when you have a cluster? on Deployment Architecture. 09-14-2017 01:48 AM
- Posted Problem Sourcetype - Extraction on Splunk Search. 06-15-2017 06:45 AM
- Tagged Problem Sourcetype - Extraction on Splunk Search. 06-15-2017 06:45 AM
- Posted Re: How to write a search to output results where a field from my events match with a field in my lookup CSV file? on Splunk Search. 05-23-2016 11:56 PM
- Posted How to write a search to output results where a field from my events match with a field in my lookup CSV file? on Splunk Search. 05-23-2016 06:28 AM
- Tagged How to write a search to output results where a field from my events match with a field in my lookup CSV file? on Splunk Search. 05-23-2016 06:28 AM
- Tagged How to write a search to output results where a field from my events match with a field in my lookup CSV file? on Splunk Search. 05-23-2016 06:28 AM
- Tagged How to write a search to output results where a field from my events match with a field in my lookup CSV file? on Splunk Search. 05-23-2016 06:28 AM
- Tagged How to write a search to output results where a field from my events match with a field in my lookup CSV file? on Splunk Search. 05-23-2016 06:28 AM
- Tagged How to write a search to output results where a field from my events match with a field in my lookup CSV file? on Splunk Search. 05-23-2016 06:28 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
03-15-2018
01:48 AM
Hi,
I would like to Know if it is possible !
I want to send an email on the adress mail content on my log .
For example:
Index=mail
Result :
log1 : "message information category status Ip data [email protected]"
log2 : "message information category status Ip data [email protected]"
log3 : "message information category status Ip data [email protected]"
Is that possible for the Log1 to send the content of Log1 and send this to the address email on the log ?
For example, to send "message information category status Ip data [email protected]" to the email on this log : [email protected] ?
Same for the Log2, it contains information about the [email protected] and i want to send a mail with the information to [email protected] ect
Thanks in advance
Steve
... View more
- Tags:
- splunk-enterprise
09-15-2017
05:18 AM
Hi Giuseppe,
For the moment , I have installed the forwarder on the actif, but I want also to do that on the Inactif.
And i know that I will receive data from both on Splunk .... so Duplicate data ...
Is there something to avoid this situation ?
Regards,
Steve
... View more
09-14-2017
01:48 AM
Hi,
When you have a Splunk forwarder on a server using Cluster (Active/Inactive), what can you do to Stop the Splunk forwarder on the server that is Inactive, and Start the forwarder on the Active when it is needed ?
I don't want to have duplicate data ...
Regards,
Steve
... View more
06-15-2017
06:45 AM
Hello,
I receive logs from my server and I want to extract manually some field but I get this error :
The events associated with this job have no sourcetype information: 1487574114.12877
What to do ... ?
Steve
... View more
- Tags:
- splunk
05-23-2016
11:56 PM
Indeed this search seems to works !
Really usefull thanks
Steve
... View more
05-23-2016
06:28 AM
Hi,
I have found many searches using lookup files, but none works correctly for me What is the correct search to get this?:
My event :
Date, URL, IP
My lookup CSV file:
City, Street, SubnetIP
I want to match the IP on my event with the SubnetIP of my CSV file to get this result
Result :
Date, URL, IP ( it matches witch SubnetIP), CITY
Kind regards
Steve
... View more
