×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
f_hartmann
New Member
Member since: ‎06-17-2016
‎06-05-2020
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎06-17-2016
Activity Feed
View All

Sendmail sslv3 alert handshake failure

by in Splunk Enterprise
‎05-17-2017 12:58 AM
‎05-17-2017 12:58 AM
After Upgrading to Splunk Light 6.6 last week I did not get any emails from my splunk server. In python.log I see the following errors: ERROR sendemail:443 - [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:676) while sending mail I am connecting to the mail server over port 587 using "Enable TLS" without username. Any ideas whats going wrong? ... View more

Re: How can I bin over specified time periods in a...

by in Splunk Search
‎06-23-2016 07:52 AM
‎06-23-2016 07:52 AM
I have found a way to get the correct binning by shifting the time for the events after 6pm to the next day. It do not think that it is a nice solution but a working one. Below my new search some search (date_hour&lt7 OR date_hour&gt18) | eval _time=if(date_hour>18, _time+86400,_time)| fillnull value=Null | timechart count span=24h ... View more

Re: How can I bin over specified time periods in a...

by in Splunk Search
‎06-17-2016 08:19 AM
‎06-17-2016 08:19 AM
I do not want to combine the two charts into a single one. Rather I would like manipulate the binning. Sofar all I get is the number of results from one day (24h), but what I want is to sum the events such that I get all events collectet during the night (18-6 or non-working hours). For example: If I have one event at 3am and one at 8pm on the same day, I want them to reside in two different bins. If I have one event at 8pm and one at the next day at 3am , I want them to reside in a single bin. ... View more

How can I bin over specified time periods in a tim...

by in Splunk Search
‎06-17-2016 03:01 AM
‎06-17-2016 03:01 AM
Hi, I am trying to create a dashboard showing the amount of events split up in working and non-working hours joined by a sparkline showing the trend over the last 7 days in two different charts. For the working hours, specifying (date_hour>6 AND date_hour<18) together with span=1d works quite fine. However, for the non-working hours I would like to have a bin starting at 6pm and ending the next day at 6am. Using span=24h I get a binning starting at 2am. My search so far looks like: *"some search"* (date_hour<6 OR date_hour>18) | fillnull value=novalue | timechart count span=24h Is it possible to fix the starting point of the binning in a timechart? Thanks! ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM