Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About nandipatisunil
nandipatisunil
Path Finder
Member since:
09-04-2013
06-05-2020
Community Statistics
| Posts | 21 |
| Solutions | 0 |
| Karma Given | 4 |
| Karma Received | 5 |
| Member Since | 09-04-2013 |
Activity Feed
- Karma Re: Test Email in Splunk for petercow. 06-05-2020 12:46 AM
- Karma Re: Converting MIB to Python module and creating the EGG. for Damien_Dallimor. 06-05-2020 12:46 AM
- Karma Re: advanced lookup settings - multiple inputs for somesoni2. 06-05-2020 12:46 AM
- Karma Re: dbConnect restore deleted data for aelliott. 06-05-2020 12:46 AM
- Got Karma for Adding Custom MIBs. 06-05-2020 12:46 AM
- Got Karma for Custom Search - Help needed.. 06-05-2020 12:46 AM
- Got Karma for Custom Search - Help needed.. 06-05-2020 12:46 AM
- Got Karma for Re: Custom Search - Help needed.. 06-05-2020 12:46 AM
- Got Karma for dbConnect restore deleted data. 06-05-2020 12:46 AM
- Posted Re: URL in dashboard on Dashboards & Visualizations. 11-11-2013 02:58 PM
- Posted URL in dashboard on Dashboards & Visualizations. 11-11-2013 08:47 AM
- Tagged URL in dashboard on Dashboards & Visualizations. 11-11-2013 08:47 AM
- Tagged URL in dashboard on Dashboards & Visualizations. 11-11-2013 08:47 AM
- Tagged URL in dashboard on Dashboards & Visualizations. 11-11-2013 08:47 AM
- Tagged URL in dashboard on Dashboards & Visualizations. 11-11-2013 08:47 AM
- Posted dbConnect restore deleted data on All Apps and Add-ons. 11-08-2013 01:23 PM
- Tagged dbConnect restore deleted data on All Apps and Add-ons. 11-08-2013 01:23 PM
- Tagged dbConnect restore deleted data on All Apps and Add-ons. 11-08-2013 01:23 PM
- Posted Re: advanced lookup settings - multiple inputs on All Apps and Add-ons. 11-04-2013 09:36 AM
- Posted advanced lookup settings - multiple inputs on All Apps and Add-ons. 11-01-2013 05:15 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 2 | |||
| 1 | |||
| 0 | |||
| 0 |
11-11-2013
08:47 AM
I have a text which is a URL. I am grouping my results and showing in a dashboard.
sourcetype="xyz" | stats count by AppName, URL
Now when I click on the URL, i want it to redirect to that specific URL page either in the same or new window.
How do I mention the link in my XML?
Lets say I have www.google.com on my URL field value ... when i click it ... i want google to be opened.
... View more
- Tags:
- dashboards
- link
- url
- xml
11-08-2013
01:23 PM
1 Karma
I had a database input which was getting data from a table.
I had to clean it up so that i can only get a subset of the columns.
So I deleted the records on Splunk by doing
sourcetype="dbmon..." | delete
after doing that i had removed the data i initially imported to splunk. however i see that that _internal index is still showing all those records. i am not sure how to clean up that.
Now my problem is ... when i try to chagne the query on my database input, though i save it ... i am not able to get the data back into splunk. Any help would be appreciated.
... View more
11-04-2013
09:36 AM
Thanks soni.
... View more
11-01-2013
05:15 PM
Does Splunk support looking up multiple inputs at the same time.
I have an advanced Query which has something line
Select ... from Table
where field1 = $input_1$ and field2 = $input2$
what is the search query syntax? trying something like
... | lookup lookup_name input_1, input2 output output_1
and getting an error
Error in 'lookup' command: Could not find all of the specified lookup fields in the lookup table.
... View more
11-01-2013
07:48 AM
How do i get this treated as date again?
I was using the above eval to get just the date out (ignoring the time) ... but i see that the string extracted is treated as a number when i graph it.
How do i get it converted back to date?
eg: i have events with different timestamp and the same date. I want to group them based on the date by ignoring the timestamp on it.
... View more
10-29-2013
12:45 PM
thanks lguinn. this will help.
well, on multiple regex ... i was trying to define two regex in my transforms.conf. i figured that out though.
thanks again.
... View more
10-29-2013
09:31 AM
What is the syntax I need to use to handle multiple regex when working with Props.conf and transforms.conf?
Also what is the syntax for if-else with in a Regex?
Any pointers would help.
Thanks.
... View more
10-28-2013
06:43 PM
1 Karma
This did my job
REGEX = \s1.3.6.1.4.1.3279.1.1.8.1.35.2\s=\sObjectSyntax:\s+simple=SimpleSyntax:\s+string=(? .*)
... but had to also mention the below part ... since it was writing the rest of the message also to the above one.
\s+\s+\s1.3.6.1.4.1.3279.1.1.8.1.35.3\s=\sObjectSyntax:\s+simple=SimpleSyntax:\s+string=(? .*)
Thanks Mr. JTrucks.
... View more
10-28-2013
08:17 AM
I am trying to create custom key-value pairs ... my key is "1.3.6.1.4.1.3279.1.1.8.1.35.2" and my value is at the end "application_name".
... View more
10-22-2013
05:55 AM
2 Karma
I have trap data coming onto my Splunk Server ... the data looks like this
1.3.6.1.4.1.3279.1.1.8.1.35.2 = ObjectSyntax: simple=SimpleSyntax: string=application_name
my key is "1.3.6.1.4.1.3279.1.1.8.1.35.2" and my value is at the end "application_name"
can some one help me with the search query here.
... View more
- Tags:
- search-
- search-help
10-17-2013
02:12 PM
Thanks Martin. I threw the .py file in the mibs folder. I mentioned my MIB name in the MIB names column in my SNMP data input settings. I was expecting the trap data i am receiving on my 162 port to be decrypted to more key value pairs using the definitions in my custom MIB. however i am still seeing most of the data is still sitting in the message and not getting converted to more keys. Am i missing something more?
... View more
10-17-2013
11:56 AM
finally i did something like this and was able to create the .py file
smidump -f python -p -p mymibfile.mib > mymibfile.py
Now figuring out a way to 'egg' up.
... View more
10-17-2013
09:20 AM
I tried copying the MIBs into the bin folder as suggested, i also created a environment variable SMIPATH to point to my mibs folder where i had the SNMPV2-SMI, RFC1155-SMI, etc.
But I still am getting the same error messages.
... View more
10-16-2013
03:16 PM
I downloaded the smidump from suggested link above. When trying to run the command
smidump -f python alarms.mib >alarms.mib.py
getting the following errors
alarms.mib:5: failed to locate MIB module SNMPv2-SMI'
alarms.mib:7: failed to locate MIB module RFC1155-SMI'
alarms.mib:9: failed to locate MIB module RFC-1212'
alarms.mib:11: failed to locate MIB module RFC-1215'
alarms.mib:1012: unknown type IpAddress'
...
alarms.mib:14: unknown object identifier label enterprises'
smidump: module `alarms.mib' contains errors, expect flawed output
I can see all the MIBs at ..\smi\mibs\ietf.
... View more
10-16-2013
08:42 AM
Hi Damien, So does that mean currently it does not work if i drop the MIB in the location?
... View more
10-15-2013
01:18 PM
1 Karma
Any updates on this
"This is all just an interim measure until pysnmp supports plain text MIB files, a development feature in the pipeline for pysnmp. When that feature is ready , all you will have to do is drop the plain text MIB in the SPLUNK_HOME/etc/apps/snmp_ta/bin/mibs and the SNMP Modular Input will do the rest. Watch this space !"
I am having a rough time converting my custom MIBs to Py and adding them to the egg.
I am using Windows 7. As per the documentation it says i need to have pysnmp to get the utility to convert it. Is there a way around?
... View more
10-10-2013
09:11 AM
@sdaniels, i did try it. downloaded and installed the file on my splunk 6 server. but no luck. though i see it listed on the apps section, i dont see the snmp on the data inputs.
@halr9000 - i will subscibe and keep an eye. thanks for confirming.
i will see if i can get some time to look at the source code.
... View more
10-10-2013
08:07 AM
Is SNMP Modular Input compatible with Splunk 6?
... View more
10-01-2013
02:31 PM
Oracle database connection issue.
Encountered the following error while trying to update: In handler 'databases': Error connecting to database: java.sql.SQLException. Listener refused the connection with the following error. ORA-12514, TNS:listener does not currently know of service requested in connect descriptor.
... View more
