Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About iamsgsn
iamsgsn
New Member
Member since:
09-09-2016
06-05-2020
Community Statistics
| Posts | 5 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 09-09-2016 |
Activity Feed
- Posted Re: Saved Searches - Log Events to Existing Index - Not working on Dashboards & Visualizations. 01-23-2019 09:42 AM
- Posted Saved Searches - Log Events to Existing Index - Not working on Dashboards & Visualizations. 01-22-2019 12:42 PM
- Tagged Saved Searches - Log Events to Existing Index - Not working on Dashboards & Visualizations. 01-22-2019 12:42 PM
- Tagged Saved Searches - Log Events to Existing Index - Not working on Dashboards & Visualizations. 01-22-2019 12:42 PM
- Tagged Saved Searches - Log Events to Existing Index - Not working on Dashboards & Visualizations. 01-22-2019 12:42 PM
- Tagged Saved Searches - Log Events to Existing Index - Not working on Dashboards & Visualizations. 01-22-2019 12:42 PM
- Posted Re: Why is the triggered alert not logging event to index? on Alerting. 01-22-2019 12:41 PM
- Posted Re: How to fetch results by grouping the fields with a condition like count>0? on Splunk Search. 09-09-2016 04:30 PM
- Posted How to fetch results by grouping the fields with a condition like count>0? on Splunk Search. 09-09-2016 02:49 PM
- Tagged How to fetch results by grouping the fields with a condition like count>0? on Splunk Search. 09-09-2016 02:49 PM
- Tagged How to fetch results by grouping the fields with a condition like count>0? on Splunk Search. 09-09-2016 02:49 PM
- Tagged How to fetch results by grouping the fields with a condition like count>0? on Splunk Search. 09-09-2016 02:49 PM
- Tagged How to fetch results by grouping the fields with a condition like count>0? on Splunk Search. 09-09-2016 02:49 PM
Topics I've Started
01-23-2019
09:42 AM
Hello Thanks for the reply.
So you mean to say it won't work with any of the existing indexes? i tried with my existing index and i am not able to query the events after doing the above mentioned steps.
Let me know how can i achieve the same using existing indexes and source types.
... View more
01-22-2019
12:42 PM
Hello,
I've created real-time alerts in Splunk Enterprise 7.1.2, and I want to log each triggered event to an index, so I can create a dashboard that shows alerts over time. The task seems pretty straight forward ( create alert, add action, log event, etc); however, I cannot get this to work. I'm trying to redirect this to my existing index.
This seems to be not working, and I don't have access to the main index as per my company's policy. Please help me in logging this event to my custom index.
Looking forward to hear from you.
... View more
01-22-2019
12:41 PM
Hello - I've created a real-time alerts in Splunk Enterprise 7.1.2 and want to log each triggered event to an index so I can create a dashboard to show alerts over time. The task seems pretty straight forward ( create alert, add action, log event, etc) however I cannot get this to work. I'am trying to redirect this to my existing index
This seems to be not working and i dont have access to main index as per my company's policy . Please help me in logging this event to my custom index.
Looking forward to hear from you.
... View more
09-09-2016
04:30 PM
Thanks. It worked.
... View more
09-09-2016
02:49 PM
Hi Team,
I have fields like txn_id and txn_chain_id where txn_chain_id can have more than 1 txn_id like:
Log 1: .....txn_id=100 txn_chain_id=1000
Log 2: .....txn_id=101 txn_chain_id=1000
Log 3: .....txn_id=102 txn_chain_id=1000
Log 4: .....txn_id=201 txn_chain_id=2000
Log 5: .....txn_id=202 txn_chain_id=2000
And so on.
I wish to write a search which gives me output as below, dynamically pulling all the txn_chain_ids having txn_ids > 1.
txn_chain_id count(txn_id)
1000 3
2000 2
Can someone help me getting the search?
Please do the needful.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
