Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About obhatti
obhatti
Explorer
Member since:
08-28-2013
06-05-2020
Community Statistics
| Posts | 13 |
| Solutions | 1 |
| Karma Given | 2 |
| Karma Received | 1 |
| Member Since | 08-28-2013 |
Activity Feed
- Karma Re: Splunk script python no results for mdessus_splunk. 06-05-2020 12:46 AM
- Got Karma for Re: loadjob limits 1000lines. 06-05-2020 12:46 AM
- Posted Re: How do I use my Splunk data to create charts on Google Sheets? on All Apps and Add-ons. 03-23-2017 06:15 AM
- Posted How do I use my Splunk data to create charts on Google Sheets? on All Apps and Add-ons. 03-22-2017 12:36 PM
- Tagged How do I use my Splunk data to create charts on Google Sheets? on All Apps and Add-ons. 03-22-2017 12:36 PM
- Tagged How do I use my Splunk data to create charts on Google Sheets? on All Apps and Add-ons. 03-22-2017 12:36 PM
- Posted Re: loadjob limits 1000lines on Reporting. 02-10-2015 01:23 PM
- Posted Re: "Unknown sid" Error when doing multiple searches on Security. 05-22-2014 12:22 PM
- Posted Re: Lookup Max Match on Splunk Search. 02-10-2014 06:59 AM
- Posted Lookup Max Match on Splunk Search. 02-09-2014 03:08 PM
- Tagged Lookup Max Match on Splunk Search. 02-09-2014 03:08 PM
- Tagged Lookup Max Match on Splunk Search. 02-09-2014 03:08 PM
- Tagged Lookup Max Match on Splunk Search. 02-09-2014 03:08 PM
- Tagged Lookup Max Match on Splunk Search. 02-09-2014 03:08 PM
- Posted Re: Finding next event where field is similar on Splunk Search. 11-11-2013 11:15 AM
- Posted Finding next event where field is similar on Splunk Search. 11-11-2013 09:27 AM
- Tagged Finding next event where field is similar on Splunk Search. 11-11-2013 09:27 AM
- Tagged Finding next event where field is similar on Splunk Search. 11-11-2013 09:27 AM
- Tagged Finding next event where field is similar on Splunk Search. 11-11-2013 09:27 AM
- Posted External script max input limit on Splunk Dev. 10-29-2013 06:52 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
03-23-2017
06:15 AM
Thanks. That worked!
... View more
03-22-2017
12:36 PM
I have Google Import/Export Setup. How do I use data in my Splunk indexes to create charts in Google Sheets?
... View more
02-10-2015
01:23 PM
1 Karma
Hi,
Was this question answered? I am looking at a similar problem.
Thanks
... View more
05-22-2014
12:22 PM
No solution was found but I found a workaround. After starting search, go to Jobs page under Activity from top right hand corner. Then hit Save for the search you are running.
For me, this error usually happens on long searches and this workaround helped.
... View more
02-09-2014
03:08 PM
How can I change the limit on the number of results matched per lookup value? I have a lookup value which has 183 matches in the lookup table, but only 100 results are returning.
Thank you in advance.
... View more
11-11-2013
11:15 AM
Sample:
TIME|DATE|ACCOUNT|TYPE|CAUSE|RESOLUTION
07:04|10/08/2013|112233|Video|Error|Reset
16:48|10/08/2013|112233|Video|Conflict|TechCall
12:34|10/07/2013|121244|DOCSIS|Connection|Tech
For the above data, I want to see a output like this:
TIME|DATE|ACCOUNT|TYPE|CAUSE|RESOLUTION|NEXTTYPE|NEXTCAUSE|NEXTRESOLUTION|DURATION
07:04|10/08/2013|112233|Video|Error|Reset|Video|Conflict|TechCall|584min
16:48|10/08/2013|112233|Video|Conflict|TechCall||||
12:34|10/07/2013|121244|DOCSIS|Connection|Tech||||
NEXTTYPE, NEXTCAUSE, NEXTRESOLUTION, and DURATION should be blank if there are no next events.
... View more
11-11-2013
09:27 AM
How do I find the next event where a field is repeated?
Scenario:
I have following fields in an index
TIME|DATE|ACCOUNT|TYPE|CAUSE|RESOLUTION
And I want to find Type,Cause,Resolution for next event where the Account number is same.
... View more
10-29-2013
06:52 AM
I am trying to run an external python script on an index with 100,000 events, but everytime I run the script only 50,000 events are processed by the script. I tried adding the parameter maxinputs but that did not work either. Do I have to change any of the conf files?
... View more
10-19-2013
02:33 PM
In the Splunk command for the python script, how do I send values from column as arguments? Right now it is only sending "macaddress", "timestamp" and "numofaverages" as arguments.
... View more
10-18-2013
07:01 AM
Hi gkanapathy, thanks for the reply. Yes I can do these calculations in Splunk but this exercise was for me to understand how Splunk interacts with external scripts. Can you give me more information on python CSV header and how to include them in the code?
... View more
10-17-2013
07:31 PM
I am trying to run a python script from Splunk which takes 3 arguments and then suppose to run calculations on those arguments and print the results into Splunk. But I am not getting any results back. There are about 100 events that I want to run the script on.
Splunk command:
... | script python amp2 macaddress timestamp numofaverages
Values of arguments:
macaddress=11:22:33:44:55:66
timestamp=123456789
numofaverages=1,2,3,4,5,6,7,8,9,10
Below is the python script I am trying to run.
import sys
mac=sys.argv[1]
time=sys.argv[2]
avg=sys.argv[3]
avg=avg.split(",")
avgmin=min(avg)
avgmax=max(avg)
count=len(avg)
try:
avg=map(float, avg)
avgmean=round((sum(avg)/count),2)
except (NameError, ValueError):
avgmin="min"
avgmax="max"
count="bin count"
avgmean="mean"
print(mac+","+time+","+avgmin+","+avgmax+","+str(avgmean)+","+str(count))
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
