About mvdobrinin

mvdobrinin · ‎08-01-2019

Good day everyone. I am looking for a way to be able to send a single event that would include some timeseries data for the last few days. { "service": "A", "series": <???> } Is there a way for Splunk to look at a single field/attribute and pull out time series data? For example something simple like - 6| 5| 4| x 3| x 2| x x 1| x ------------------------- t0 t1 t2 t3 t4 I am flexible on the client side and could encode the payload in whatever format is needed.

mvdobrinin · ‎06-05-2019

Thanks for the quick reply. That was the issue. The docs here were not clear on that.

mvdobrinin · ‎06-05-2019

I am seeing an error when attempting to use the REST API. curl -X POST https://localhost:8089/servicesNS/admin/search/data/indexes -u splunkadmin:splunkadmin -d name=myindexname -k The given request gives me an error about a completely different user. <?xml version="1.0" encoding="UTF-8"?> <response> <messages> <msg type="ERROR">User does not exist: admin</msg> </messages> </response> Looking at the configuration in Splunk Web, I don't even see such a user configured. The version is as follows. Splunk Enterprise Version: 7.2.6 Build: c0bf0f679ce9 Any idea what's going on?

Posts	3
Solutions	0
Karma Given	2
Karma Received	0
Member Since	‎06-05-2019

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Encode time series data in a single field

User does not exist error

Encode time series data in a single field

Re: User does not exist error

User does not exist error

Are you a member of the Splunk Community?

Encode time series data in a single field

User does not exist error

Encode time series data in a single field

Re: User does not exist error

User does not exist error