About owie6466

owie6466 · ‎02-03-2021

thanks @bowesmana I will take a look.

owie6466 · ‎11-06-2020

thanks for the help

sphiwee · ‎09-02-2020

how do you get the up/down status? what query are you using?

owie6466 · ‎05-19-2020

Hi Guiseppe, thanks for the reply. yes they are the same search with the exception of the second search have updated code. the goal is to merge the data to show the difference in execution time. I have the tokens $alertNameTok$ and $alertNameTok1$. Here's what I have for the code. index=_internal source="*scheduler.log" app="hdo_monitoring" status="success" $alertNameTok$ $alertNameTok1$ earliest=$timetok.earliest$ latest=$timetok.latest$ | timechart span=10m first(run_time) first(result_count) by savedsearch_name attached: snapshot - no results thank you!

codebuilder · ‎04-28-2020

Glad it worked for you! erex is a hidden gem 🙂

solarboyz1 · ‎08-26-2019

| search qualifiedSearch=lookupname eai:acl.app=$YOUR_APP$

owie6466 · ‎08-15-2019

YOU ARE AWESOME! this is working perfectly now! thank you so much for all the help and patience!

owie6466 · ‎08-09-2019

this is a sample of the line: Event 0 minutes ago, vmpit-p4cti002.lm.lmig.com, windows 6.3.9600

mayurr98 · ‎08-08-2019

I didn't get you. could you pls elaborate ?

owie6466 · ‎08-07-2019

thank you so much mayurr98 and richgalloway. i will try the code.

Posts	33
Solutions	0
Karma Given	1
Karma Received	3
Member Since	‎07-17-2019

Online Status	Offline
Date Last Visited	‎02-13-2023 11:14 AM

create dropdown list using html in a dashboard

extract string from _raw data

Is it possible to visualize multiple search result...

need help or ideas on how to check status of serve...

need help in extracting a substring from a string

Is there a way to tell if a "specific" lookup file...

How to split field into multiple fields for compar...

hellp with charting search results

see results of a rex command

How to extract a string from an event?

Re: create dropdown list using html in a dashboard

Re: extract string from _raw data

Re: need help or ideas on how to check status of s...

Re: Is it possible to visualize multiple search re...

Re: need help in extracting a substring from a str...

Re: Is there a way to tell if a "specific" lookup ...

Re: How to split field into multiple fields for co...

Re: hellp with charting search results

Re: see results of a rex command

Re: How to extract a string from an event?

Are you a member of the Splunk Community?