Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About jincy_18
jincy_18
Path Finder
Member since:
09-12-2016
10-25-2023
Community Statistics
| Posts | 31 |
| Solutions | 2 |
| Karma Given | 1 |
| Karma Received | 2 |
| Member Since | 09-12-2016 |
Activity Feed
- Karma Re: Having source ip from 3 sourcetypes, how do I combine them all in one field and table the results? for gcusello. 06-05-2020 12:49 AM
- Got Karma for Re: Using regex to extract a string where the following string may or may not exist. 06-05-2020 12:49 AM
- Got Karma for How can we override Splunk's eventtime with timestamp value present in the event data coming from JMS MQ.. 06-05-2020 12:49 AM
- Posted Does Solaris OS support splunk db connect 2.4.1? on All Apps and Add-ons. 12-28-2018 01:26 AM
- Tagged Does Solaris OS support splunk db connect 2.4.1? on All Apps and Add-ons. 12-28-2018 01:26 AM
- Posted How to index and use unstructured huge volume of data - Splunk HWF and SH cluster? on Getting Data In. 11-01-2018 04:36 AM
- Tagged How to index and use unstructured huge volume of data - Splunk HWF and SH cluster? on Getting Data In. 11-01-2018 04:36 AM
- Tagged How to index and use unstructured huge volume of data - Splunk HWF and SH cluster? on Getting Data In. 11-01-2018 04:36 AM
- Posted Re: Vertical headers in dashboards on Splunk Search. 02-27-2018 09:46 PM
- Posted Re: Vertical headers in dashboards on Splunk Search. 02-26-2018 05:14 AM
- Posted Re: How can we override Splunk's eventtime with timestamp value present in the event data coming from JMS MQ. on Getting Data In. 02-23-2018 02:02 AM
- Posted How can we override Splunk's eventtime with timestamp value present in the event data coming from JMS MQ. on Getting Data In. 02-22-2018 11:38 PM
- Tagged How can we override Splunk's eventtime with timestamp value present in the event data coming from JMS MQ. on Getting Data In. 02-22-2018 11:38 PM
- Tagged How can we override Splunk's eventtime with timestamp value present in the event data coming from JMS MQ. on Getting Data In. 02-22-2018 11:38 PM
- Posted Is Splunk enterprise 6.4.1 compatible with chrome version 40.0.XXXX ? on Splunk Enterprise. 02-16-2018 05:08 AM
- Tagged Is Splunk enterprise 6.4.1 compatible with chrome version 40.0.XXXX ? on Splunk Enterprise. 02-16-2018 05:08 AM
- Tagged Is Splunk enterprise 6.4.1 compatible with chrome version 40.0.XXXX ? on Splunk Enterprise. 02-16-2018 05:08 AM
- Tagged Is Splunk enterprise 6.4.1 compatible with chrome version 40.0.XXXX ? on Splunk Enterprise. 02-16-2018 05:08 AM
- Posted How to know if data inputs are enabled/disabled using splunk query? on All Apps and Add-ons. 11-28-2017 05:19 AM
- Tagged How to know if data inputs are enabled/disabled using splunk query? on All Apps and Add-ons. 11-28-2017 05:19 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
12-28-2018
01:26 AM
Hi ,
I'm trying to configure splunk db connect 2.4.1. The environment is running on Solaris OS with Splunk Enterprise 6.2.2 set as heavy forwarder.
The issue I'm facing is the JRE status still shows red and the JRE path, JVM options that is configured in settings tab is not getting saved.
Please suggest if there is a work around for this.
Thanks in Advance.
... View more
11-01-2018
04:36 AM
Hi All,
We are working on a clustered environment where splunk is fetching logs from various servers. In the source server we have set up splunk heavy weight forwarder which forwards the data to the load balanced HWF then to indexers.
Now the issue we face is that our logs are in nested json/ unstructured format and is of huge volume. This is making the searches too slow and crash.
We have tried index time extractions but that is also slower due to the volume.
Could you please suggest a work around for this.
TIA
... View more
02-27-2018
09:46 PM
Hi Marios, Could share a screenshot, for understanding this better? cause I was able to fix this issue with width and height parameters in th/td and it worked for me.
... View more
02-26-2018
05:14 AM
Hi,
Have you tried using width and height attributes in the css. It should do the trick for you. Do the same for td elements if required.
th
{
width: 50px !important;
height: 30px !important;
transform: rotate(90deg);
}
... View more
02-23-2018
02:02 AM
Thanks Rajesh,
Just to add on in our case the timestamp value will be an epoch value, will this pose an issue?
... View more
02-22-2018
11:38 PM
1 Karma
I am fetching message queue message from JMS app in Splunk Enterprise 6.4.1. All the fields of the event are being extracted at indextime. I want to override the eventtime(_time) with the value present in the message(header timestamp). Please suggest how can this be achieved?
... View more
02-16-2018
05:08 AM
Hi All,
I'm using Splunk enterprise 6.4.1. I want to know if this is compatible with chrome version 40.0.2214.115. As I am facing data load and display issues.
... View more
11-28-2017
05:19 AM
Hi,
We are using jms app to connect to various MQs. I need to know how I can get the info whether inputs are enabled or disabled via a splunk search query. Not really sure if splund_access.log can be used for this purpose.
Many thanks!
... View more
11-22-2017
12:40 AM
Thanks Damien,
I tried this, but we have multiple apps running on same servers using various queue connections. Could it be possible to get the errors for a specific queue?
... View more
11-21-2017
05:13 AM
Hi,
We are using jms app to connect to various MQs. I need to get a triggered alert if there is any issue in the connectivity. How to we achieve this?
Is there something available similar to dbx_health log we use for DBConnect app?
... View more
11-07-2017
11:11 PM
Got a solution for this.
We used javascript to add our own customized div tags which changes on search result and used css for the appropriate styling. Sample snippet for adding div tags:
var div = document.createElement('div');
div.className = 'statusbar';
div.id = 'statusbar';
div.innerHTML = '<ul><li id="dbstatus1" >DB1 : <div id="dbstatus1-icon"></div></li><li id="filestatus" >FILE: <div id="filestatus-icon"></div></li></ul>';
var p= document.getElementsByClassName('header splunk-header splunk-view')[0]
p.appendChild(div);
... View more
10-13-2017
06:41 AM
Hi Nadal7noval,
You can try below:
(?<ERROR>(ERROR:.+?){2})(?=cause\:\s\[)
OR
(?<ERROR>(ERROR:.+?){2})(?=cause\:)
... View more
10-11-2017
11:44 PM
I have a requirement where I need to show multiple DB connectivity status icons right below the apps navigation bar.
Also, I need this to be visible throughout the app, irrespective of which dashboard I navigate to.
Is it possible for any app to have multiple app-bars? How to achieve this?
Alternatively how can we add a div tag below existing app-bar, to customize it with different color and add custom icons to it?
Any other way to achieve this?
Thanks in advance !
... View more
10-11-2017
10:54 PM
Hi rhys,
Have you checked if the space characters are actually spaces or tabs?
Also, in the sample you provided, " Some Text 1 Some Text 2", is " Some Text 1 " always present, I mean is it the same always, like wise for "Some Text 2" when ever it is present is it the same?
... View more
10-11-2017
05:13 AM
@Nadhiya123
This might help.
https://answers.splunk.com/answers/58335/change-chart-bar-color-based-on-data-value.html
... View more
