About felipecerda

felipecerda · ‎03-05-2017

Hi, You should also monitor the operation of your application. You'd want to send logs of the backed interactions when the users are flowing through your application. Say users have to go through different steps when using the application, it'd be a good practice to measure the effectiveness of each of those steps, as well as the volume of users, so you can detect breaks in the usual behavior of the application. Good luck

felipecerda · ‎03-03-2017

I was having the same problem until I read your comment here. I originally had "order by ID desc" at the end of my query but I removed "desc" and only left "order by ID" like you did, and I got the same result, so far I haven't seen duplicate events.

felipecerda · ‎02-16-2017

Thank you very much!

felipecerda · ‎02-06-2017

Hi, I just installed the REST API Modular Input add-on in my Splunk Enterprise environment. I'm trying to input data from the Usabilla.com REST API using this add-on, but I'm having a problem that I believe has to do with the authentication. Usabilla provides a client access key and a secret key, but I can't find an option in the REST API Modular Input add-on that allows me to put these 2 keys to get it to work. The options are basic, digest, oauth1, oauth2 and custom. What do I have to choose? All of them open a new set of fields to complete, and none of them seem to work with the access and private keys I have. Has anyone been able to set this up correctly? Thanks in advance. Felipe

felipecerda · ‎01-05-2017

Hi, the link is broken.

felipecerda · ‎12-19-2016

did you try this?: index=test |dedup line|timechart span=1d dc(od) as total|stats avg(total)

felipecerda · ‎12-19-2016

It's better to use dc(your_field) whenever you can. I once asked what was the difference to a Splunk Instructor and he said that dc was faster than dedup.

felipecerda · ‎10-12-2016

Try to move "what you know" to the left side of the query. For example the part where you have where (nbr_player_acct1="100261023"). Move that to line 46 before the table. Filter as early as possible.

felipecerda · ‎10-09-2016

It's been a while and we have not received any email regarding the $5000 in education credit... any news on this?

felipecerda · ‎10-09-2016

If you want to know what the URLs contain you could also extract what the descriptions say using regex. Something like: index=* youtube user | rex field=_raw "&description1=(?<desc1>.*),&" | table _time, user, host, src, dest, bytes_in, bytes_out, url, desc1

felipecerda · ‎10-06-2016

I didn't know the Google Maps app. Thanks!

Posts	11
Solutions	0
Karma Given	25
Karma Received	2
Member Since	‎09-28-2016

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

How to configure authentication in REST API Modula...

Re: Best practice to monitor an application

Re: Why is Splunk DB Connect incorrectly tailing m...

Re: Download Splunk Conf 2016 Session materials

How to configure authentication in REST API Modula...

Re: Can I update a CSV lookup file with more rows ...

Re: Is there a performance impact by using Dedup c...

Re: Is there a performance impact by using Dedup c...

Re: How to optimize my current search for better p...

Re: Is there more information about how to take ad...

Re: How to search for specific words in URL

Re: Splunk for end to end web analytics