Hi I want to calculate/simulate a data to analysis price difference, my data set in picture, left is my data set, right table is that i want to produce Process like this LOOP find DIFF > 100 and get PAR and _time value get BTC value 5 minutes after, and set BTC as BTC_last get difference BTC_last - PAR Until data finished For example find DIFF> 100 time: 00:02:58 PAR:1655 get 5 minutes after BTC: 1800 as BTC_last get difference BTC_last - PAR = 1800 -1655 = 145 and continue like this find DIFF> 100 time: 00:09:58 PAR:1610 get 5 minutes after BTC: 1510 as BTC_last get difference BTC_last - PAR = 1510 -1610 = -100 and so on? How can i produce this process, given in right table using splunk? ... View more

Hi I want to calculate/simulate a data to analysis price difference, my data set in picture, Process like this - find first DIFF > 95 and get PAR and _time value Red line : time is 2017-11-11 00:48:56 PAR is 6956.45 - find after 10 minutes line 2017-11-11 00:48:56 + 10 minutes = 2017-11-11 00:58:56 at 2017-11-11 00:59:07 BTC is 7088.19 - get difference BTC - PAR = 7088.19 - 6956.45 = 132 and continue to search second ,third etc where diff greater than 95 and calculate difference again How it possible in splunk? ... View more

Hi I am using Splunk addon for Netscaler and Citrix Netscaler with Appflow, My Splunk addon for Netscaler local input.conf is below: I am listening 8514 port via tcpdump, there is traffic but Splunk doesn't index anything [udp://8514] connection_host = dns sourcetype = ns_log index = netscaler disabled = 0 connection_host = ip '# A separate IPFIX addon is needed in order for the following stanza to work. http://apps.splunk.com/app/1801/ [ipfix://NetScaler_AppFlow] sourcetype = appflow index = netscaler address = 0.0.0.0 port = 4739 buffer = 1048576 disabled = 0 [monitor:///opt/filteredCitrixNSLogs.log] disabled = 1 sourcetype = ns_log index = netscaler ... View more