index = abc Environment = "PROD" ProcessName = "*"  LogType = "*" TaskName = "*Main*" (LogLevel=ERROR OR LogLevel=FATAL) | bucket _time span=2h |stats count by _time TaskName ... View more

Hi @gcusello I tried Spath to extract them but unsuccessful.  ... View more

Karma and given, one more question from my end which can earn you more  https://community.splunk.com/t5/Splunk-Search/Help-with-extracting-JSON-fields/m-p/614290#M213452 ... View more

I tried this but interestingly 7days ago im getting 10x more values than yesterday data, can you please re-look into this @schose  ... View more

@gcusello I want do a eval calculation like success_count - Failure count but its not working ... View more

@PickleRick  yes two events are different. And at the end I'm looking to take the difference between success count and Failure count , but it's not working with the query shared by @gcusello  ... View more

this article is only for pulling the snowflake data into Splunk, im looking the other way of sending data into snow flake from splunk ... View more

Looks like its grouping well but I'm getting all the events in between, I wanted to get only the exceptions like these if they occur  Some of them are : EXCEPTION: Cannot find the window or application titled 'Oracle Enterprise Performance Management System Workspace, Fusion Edition - Google Chrome' that was open during recording. at Line: 50 EXCEPTION: Please enter the source string. at Line: 27 EXCEPTION: Unable to find CLIENT. Search Criteria did not match. at Line: 120 EXCEPTION: Unable to find LABEL. Search Criteria did not match. at Line: 101 EXCEPTION: Unable to find LABEL. Search Criteria did not match. at Line: 104     I tried to add LogMessage = "Exception:*" but it's giving only the latest run details and not all . Is there any way we can get only this info.Thanks for your reply. ... View more

Hi @SanjayReddy I tried it but it's not working as expected; When I gave depends it is showing the panel even if the output is zero and similarly when I use rejects panel/row is hiding even if the panel has values.   But in depends case its not coming up while processing the results but panels are showing up once the search is completed  Is it something related to drill down tokens ? that is breaking this functionality  OR  query should have Stats for sure to work on these post-processing search results    <row depends="$panel_show5$"> <panel> <single> <search> <query>| makeresults |eval bot="FARollforward Adhoc"|table bot</query> <earliest>$time_second_dashboard.earliest$</earliest> <latest>$time_second_dashboard.latest$</latest> </search> <option name="drilldown">none</option> <option name="refresh.display">progressbar</option> </single> </panel> <panel> <single> <title>Total Runs</title> <search> <query>QUERY|table tot_count</query> <earliest>$time_second_dashboard.earliest$</earliest> <latest>$time_second_dashboard.latest$</latest> <progress> <condition match=" 'job.resultCount' == 0"> <unset token="panel_show5"></unset> </condition> <condition> <set token="panel_show5">true</set> </condition> </progress> </search> <option name="colorMode">none</option> <option name="drilldown">none</option> </single> </panel> <panel> <single> <title>Process completed Successfully</title> <search> <query>QUERY |table tot_count</query> <earliest>$time_second_dashboard.earliest$</earliest> <latest>$time_second_dashboard.latest$</latest> </search> <option name="useColors">1</option> </single> </panel> </row> </form>     ... View more

yes, they never interfere at any time.  ... View more

No that never happens, the next process run would be triggered only if the current process is finished or errored out. ... View more

Hi @ITWhisperer  Yes fields are already extracted  Whenever the process triggers it starts with LogNo 1 and it can go to any number (end LogNo will be inconsistent depends on process execution and end)   process starts with LogType = "Bot Start" And ends with LogType = "Bot end" For every run. Yes all the events have _time but there are instances where process runs more than once so to be precise it should differentiate the errors and group them for each run for different processes  Thanks for the reply , let me know if any additional details are required ... View more