×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
BinnyK
Explorer
Member since: ‎08-01-2016
‎06-05-2020
Community Statistics
Posts 5
Solutions 0
Karma Given 2
Karma Received 0
Member Since ‎08-01-2016
Activity Feed
View All

Re: How do I preset two separte time span as form ...

by in Splunk Search
‎05-02-2017 05:43 AM
‎05-02-2017 05:43 AM
Thanks @adonio. That was exactly what i was looking for. That helped a lot. ... View more

How do I preset two separte time span as form inpu...

by in Splunk Search
‎05-02-2017 04:42 AM
‎05-02-2017 04:42 AM
I have some research data on a dashabord. The data I want to highlight is in two separate time spans Jan 1 - Jan 30 and Mar 20 - Apr 21. I want to have two radio buttons which presets these two ranges as (span 1 and span 2) rather than asking the visitors to change to these exact dates to view these results. How can I do this? ... View more

Re: Rex for a field with varying number of values

by in Splunk Search
‎08-04-2016 02:32 AM
‎08-04-2016 02:32 AM
I created some complex regex, but solved it. rex field=F "[\"(?.)\",\"(?.)\",\"(?.*)\"]" | rex field=F "[\"(?[^,]+)\",[^,]+]" | rex field=F "[\"[^,]+\",\"(?[^,]+)\"]" | rex field=F "[\"(?[^,]+)\"]" ... View more

Re: Rex for a field with varying number of values

by in Splunk Search
‎08-01-2016 09:06 AM
‎08-01-2016 09:06 AM
It can be from 1 to 3. I can easily use rex to extract fields if it was a fixed number of elements inside. I cant work out a good regex for varying number of elements in each log's F field ... View more

Rex for a field with varying number of values

by in Splunk Search
‎08-01-2016 05:40 AM
‎08-01-2016 05:40 AM
I have some values in a fied which are email addresses. eg: Values of F may be "[""[email protected]""]" "[""[email protected]"",""[email protected]""]" "[""[email protected]"",""[email protected]"",""[email protected]""]" The field F may have 1, 2 or 3 values. If there is only 1 value, it is going to be email_type2, if there are 2 values it will be email_type1 followed by email_type2 and if there are going to be 3 values, it is going to be email_type1 followed by email_type2 and email_type3. I need to extract 3 fields, type1, type2 and type3 and include those values in the extracted fields. Can someone help me with this? ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM
Karma given to
View All