Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About arunslal
arunslal
Loves-to-Learn Lots
Member since:
08-19-2019
10-18-2023
Community Statistics
| Posts | 8 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 08-19-2019 |
Activity Feed
- Posted Re: How to use the REST API to just run a search and stream the results back? on Splunk Search. 10-18-2023 01:02 PM
- Posted Re: How to use the REST API to run a multisearch and stream the results back? on Splunk Search. 03-13-2023 09:38 AM
- Posted How to use the REST API to run a multisearch and stream the results back? on Splunk Search. 03-13-2023 07:28 AM
- Tagged How to use the REST API to run a multisearch and stream the results back? on Splunk Search. 03-13-2023 07:28 AM
- Posted Re: How to use the REST API to just run a search and stream the results back? on Splunk Search. 03-13-2023 07:22 AM
- Posted Re: How to get data into different variables on similar data lines on Getting Data In. 08-19-2019 06:21 AM
- Posted How to get data into different variables on similar data lines on Getting Data In. 08-19-2019 04:25 AM
- Tagged How to get data into different variables on similar data lines on Getting Data In. 08-19-2019 04:25 AM
- Tagged How to get data into different variables on similar data lines on Getting Data In. 08-19-2019 04:25 AM
- Tagged How to get data into different variables on similar data lines on Getting Data In. 08-19-2019 04:25 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
10-18-2023
01:02 PM
Looks like spaces and quotes are being identified as shell. Try escaping them like below: curl -k -u user:password https://10.236.142.0:8089/services/search/jobs/export -d search='search index=list-service source=\"eventhub://sams-jupiter-prod-scus-logs-premium-1.servicebus.windows.net/list-service;\" \"kubernetes.namespace_name\"=\"list-service\" | stats dc(kubernetes.pod_name) as pod_count' I had a very long query that needed to be passed via rest api. I ran into such issues but url encoding the query was very helpful. I used this website for that: https://meyerweb.com/eric/tools/dencoder/
... View more
03-13-2023
09:38 AM
Hi, yes. UI returns results on screen.
... View more
03-13-2023
07:28 AM
Hi, I am able to run normal search using rest API using below syntax: https://SearchHead_host:8089/servicesNS/admin/search/search/jobs/export -d search=“search index%3D_internal | head 3” -d output_mode=csv/xml/json But when I use a "MULTISEARCH" query, the search doesn't show any results. Does anyone know how to overcome this? Thanks, Arun
... View more
- Tags:
- multisearch
03-13-2023
07:22 AM
Hi @neelamssantosh Apologies for asking as a comment. In case of multiserach, does the rest api call syntax differ? I'm able to do normal search with the above syntax but it fails when put a multisearch query instead. Can you please take a look? thank you.
... View more
08-19-2019
06:21 AM
Thanks a lot !! It worked 🙂
... View more
08-19-2019
04:25 AM
I have got two timestamps. Can anyone please help me extract these 2 timestamps into different fields?
08/02/2019 15:25:30.084 (ID=8238) (Line=4203) Sent ->PJ;1;2;;COMMON;rfscCpackageScan;Y;1;1;;0;Y;<-
08/01/2019 10:38:51.377 (ID=45804) (Line=4229) Received ->PJ;81;S;SUCCESS;<-
The first timestamp needs to be extracted into SentTime field (this line has text Sent in it)
The Second timestamp needs to be extracted into ReceivedTime field (this line has text Received in it)
Basically, I am looking for the below:
SentTime = 08/02/2019 15:25:30.084
ReceivedTime = 08/01/2019 10:38:51.377
When I try to extract directly, both the timestamp goes into same field extraction...
Thanks in advance for the help!
Cheers,
Arun
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-18-2023
03:47 PM
|
