Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About prachisaxena
prachisaxena
Explorer
Member since:
02-15-2015
09-21-2021
Community Statistics
| Posts | 24 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 02-15-2015 |
Activity Feed
- Posted Re: Is it possible to bulk import URLs into the Website Monitoring App? on All Apps and Add-ons. 06-15-2020 06:17 AM
- Posted Website MonitoringL add inputs from splunk index or database on Getting Data In. 06-15-2020 06:11 AM
- Got Karma for Re: How can we avoid indexing delays?. 06-05-2020 12:51 AM
- Posted Customize notable events filter on Splunk IT Service Intelligence. 05-28-2020 12:17 AM
- Tagged Customize notable events filter on Splunk IT Service Intelligence. 05-28-2020 12:17 AM
- Posted Re: How can we avoid indexing delays? on Getting Data In. 05-01-2020 01:17 PM
- Posted Re: What is Needed resource for CM, LM, DS, HF, DMC on Splunk Search. 05-01-2020 01:10 PM
- Posted Re: What is Needed resource for CM, LM, DS, HF, DMC on Splunk Search. 05-01-2020 01:03 PM
- Posted Re: how do I get the lookup table to update automatically whenever the CSV file is updated in the specific local file ? on Getting Data In. 04-27-2020 01:13 PM
- Posted Re: How to match values if already in table on Splunk Search. 04-27-2020 12:58 PM
- Posted Is it possible to filter data coming through Elasticsearch Modular Input without changing the configuration or data indices on ES? on Splunk Enterprise Security. 04-27-2020 12:51 PM
- Tagged Is it possible to filter data coming through Elasticsearch Modular Input without changing the configuration or data indices on ES? on Splunk Enterprise Security. 04-27-2020 12:51 PM
- Tagged Is it possible to filter data coming through Elasticsearch Modular Input without changing the configuration or data indices on ES? on Splunk Enterprise Security. 04-27-2020 12:51 PM
- Posted Re: Can we use object storage for storing data for cold buckets( as cold storage) on Deployment Architecture. 09-02-2018 09:49 PM
- Posted Re: Can we use object storage for storing data for cold buckets( as cold storage) on Deployment Architecture. 09-02-2018 09:47 PM
- Posted Can we use object storage for storing data for cold buckets( as cold storage) on Deployment Architecture. 08-26-2018 08:23 PM
- Tagged Can we use object storage for storing data for cold buckets( as cold storage) on Deployment Architecture. 08-26-2018 08:23 PM
- Posted Add Event or Fields action menu to dashboard/table on Dashboards & Visualizations. 08-09-2016 03:05 AM
- Tagged Add Event or Fields action menu to dashboard/table on Dashboards & Visualizations. 08-09-2016 03:05 AM
- Posted Need to change the field delimiter after extraction on Splunk Search. 07-22-2016 12:43 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
07-03-2020
04:20 PM
I think I can support this use-case by adding a scripted lookup command that could take in a lookup file (or search results) and perform a ping against them. All you would need to do is to get the URLs dumped into Splunk somewhere (e.g. a lookup file) and then have a saved search run the command against the lookup on whatever the frequency you want them tested. I have this planned for the next version (2.10); see the ticket here: https://lukemurphey.net/issues/2808
... View more
06-15-2020
06:17 AM
Hi Luke, I need to bulk import a list of URLs but do not want to configure it from Web GUi. This list of urls is available in CMDB, we need to query this data from CMDB and then configure website monitoring from its output. Is there a way we can achieve it ?
... View more
05-28-2020
12:17 AM
Hi All,
We have a requirement to add some custom filter in the notable events filter menu such as country. Can you please advise if this is possible and how ?
... View more
Labels
- Labels:
-
configuration
-
using ITSI
05-04-2020
05:25 AM
Yes. HF does little disk I/O so disk speed is not a factor.
... View more
04-27-2020
12:51 PM
Hi All,
I have enabled the Modular Input for Elasticsearch(ES) and I am able to get in the data.
My sample data is metric data that was collected using Metricbeats in ES.
Looking at the data ingested in Splunk, there are a lot of fields that are coming through.
Is it possible to selectively index the data into Splunk without changing the configuration or data indices on ES?
... View more
01-11-2019
08:50 AM
Yes you can use Western Digital ActiveScale Object Storage https://blog.westerndigital.com/splunk-smartstore-supercharge-new-splunk-architecture/
... View more
08-09-2016
08:10 AM
You can drilldown to another dashboard or external link using Splunk drilldown
Reference :
http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Understandbasictableandchartdrilldownactions#Dynamic_drilldown
http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Understandbasictableandchartdrilldownactions#Table
... View more
07-22-2016
04:41 AM
Change the delimiter used in transforms.conf.
FORMAT = $1|$3
FIELDS = "field1"|"field3"
... View more
04-13-2016
02:05 AM
Just to be complete, here is one way to convert the day number in a rank:
... | eval day_rank=case(day_number=1,"first", day_number=2,"second", day_number=3,"third", day_number=4,"fourth", day_number=5,"fifth" ) | ...
You can then rearrange the final concatenation to use day_rank instead of day_number.
... View more
04-05-2016
06:54 PM
Hi Karthik,
Thanks for helping.. I was wondering if we can use inputs.conf, props.conf and transforms.conf in a similar way as we use on Splunk Enterprise filtering. The requirement is it filter the data on MongoDB app for hunk and currently it is not using any inputs.conf. I am still newbie to splunk to may be i am wrong here
... View more
03-01-2016
07:12 AM
1 Karma
Hi,
I found the problem it was quite an stupid thing... in the eval, the variable has to go with single quotes, so the following is working:
search time_in_ms | eval newtime=round('time_in_ms'/1000)
while this is failing:
search time_in_ms | eval newtime=round(time_in_ms/1000)
thanks,
Juan
... View more
01-20-2016
02:04 AM
Have a look at the following.
http://docs.splunk.com/Documentation/Splunk/6.3.2/Forwarding/Routeandfilterdatad
https://answers.splunk.com/answers/42718/filter-indexing-to-avoid-license-issues.html
... View more
