Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About seregaserega
seregaserega
Explorer
Member since:
03-08-2015
06-05-2020
Community Statistics
| Posts | 13 |
| Solutions | 0 |
| Karma Given | 3 |
| Karma Received | 0 |
| Member Since | 03-08-2015 |
Activity Feed
- Karma Re: Why is my search producing "Error in 'geostats' command: The argument 'lon1' is invalid."? for acharlieh. 06-05-2020 12:47 AM
- Karma Re: group by index and count for rsennett_splunk. 06-05-2020 12:47 AM
- Karma Re: group by index and count for martin_mueller. 06-05-2020 12:47 AM
- Posted Re: Why is my search producing "Error in 'geostats' command: The argument 'lon1' is invalid."? on Splunk Search. 08-09-2015 12:39 PM
- Posted Re: Why is my search producing "Error in 'geostats' command: The argument 'lon1' is invalid."? on Splunk Search. 08-09-2015 09:03 AM
- Posted Why is my search producing "Error in 'geostats' command: The argument 'lon1' is invalid."? on Splunk Search. 08-09-2015 06:55 AM
- Tagged Why is my search producing "Error in 'geostats' command: The argument 'lon1' is invalid."? on Splunk Search. 08-09-2015 06:55 AM
- Tagged Why is my search producing "Error in 'geostats' command: The argument 'lon1' is invalid."? on Splunk Search. 08-09-2015 06:55 AM
- Posted Re: Why is Splunk not parsing a CSV file correctly with TAB as a delimiter and \n as a line separator? on Getting Data In. 08-04-2015 10:30 AM
- Posted Re: Why is Splunk not parsing a CSV file correctly with TAB as a delimiter and \n as a line separator? on Getting Data In. 08-04-2015 09:56 AM
- Posted Re: Why is Splunk not parsing a CSV file correctly with TAB as a delimiter and \n as a line separator? on Getting Data In. 08-04-2015 09:21 AM
- Posted Why is Splunk not parsing a CSV file correctly with TAB as a delimiter and \n as a line separator? on Getting Data In. 08-03-2015 04:46 PM
- Tagged Why is Splunk not parsing a CSV file correctly with TAB as a delimiter and \n as a line separator? on Getting Data In. 08-03-2015 04:46 PM
- Tagged Why is Splunk not parsing a CSV file correctly with TAB as a delimiter and \n as a line separator? on Getting Data In. 08-03-2015 04:46 PM
- Tagged Why is Splunk not parsing a CSV file correctly with TAB as a delimiter and \n as a line separator? on Getting Data In. 08-03-2015 04:46 PM
- Posted How to create a custom Hunk dashboard with JavaScript and CSS to display data on top of Google Maps? on Dashboards & Visualizations. 06-18-2015 04:31 AM
- Tagged How to create a custom Hunk dashboard with JavaScript and CSS to display data on top of Google Maps? on Dashboards & Visualizations. 06-18-2015 04:31 AM
- Tagged How to create a custom Hunk dashboard with JavaScript and CSS to display data on top of Google Maps? on Dashboards & Visualizations. 06-18-2015 04:31 AM
- Tagged How to create a custom Hunk dashboard with JavaScript and CSS to display data on top of Google Maps? on Dashboards & Visualizations. 06-18-2015 04:31 AM
- Tagged How to create a custom Hunk dashboard with JavaScript and CSS to display data on top of Google Maps? on Dashboards & Visualizations. 06-18-2015 04:31 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
08-09-2015
12:39 PM
??? x=y and x= y are not the same?
... View more
08-09-2015
09:03 AM
So I added rename step to rename lon1, lat1 to lon, lat (default expected fields), Splunk started to run query. I'm confused. Doc says it's ok to tell geostats what fields keep longitude, latitude values.
... View more
08-09-2015
06:55 AM
Hi,
I'm trying to use the geostats command and got confusion.
I'm running my search without geostats:
some_stuff_here| fields some_field_with_value, lon1, lat1
I see lon1, lat1 fields in output. They are valid float numbers. Then I try to apply geostats function:
some_stuff_here | fields some_field_with_value, lon1, lat1
| geostats latfield=lat1 longfield= lon1 sum(some_field_with_value)
** Error in 'geostats' command: The argument 'lon1' is invalid. **
What is the right way to debug that problem?
... View more
08-04-2015
10:30 AM
it doesn't work.
So the working solution is:
fileWriter.append(
Arrays.asList(entry.getProperties().getCellId(),
c1.get(0),c1.get(1),
c2.get(0),c2.get(1),
c3.get(0),c3.get(1),
c4.get(0),c4.get(1)
)
.stream().map(Object::toString).collect(Collectors.joining(","))+"\r\n"
And extra movement: add header to the file.
Then splunk does what expected:
1. reads file line by line
2. doesn't try to put first line as a header
3. correctly splits fields not ignoring \t. When splunk did put all line into the first field it even displays in UI that '\t' are between values.
weird!
... View more
08-04-2015
09:56 AM
It doesn't work. It even can't parse ',' separated file.
really-really-weird behaviour.
Here is a code to write the file:
fileWriter.append(
Arrays.asList(entry.getProperties().getCellId(),
c1.get(0),c1.get(1),
c2.get(0),c2.get(1),
c3.get(0),c3.get(1),
c4.get(0),c4.get(1)
)
.stream().map(Object::toString).collect(Collectors.joining(","))+"\r\n"
I changed '\t' to ',' doesn't help.
\n to \r\n doesn't help
Now splunk does it best to create single long row from my 10K lines file. Have no idea why it tries to do so.
Beofre that splunk did put all fields into the first one.
... View more
08-04-2015
09:21 AM
Yes, I generate that file
Didn't understand, I tried to rename it to XXX, no luck.
Did it, no luck
... View more
08-03-2015
04:46 PM
Hi, I'm trying to parse csv file with TAB as separator and \n as a line separator. I don't have time in csv, I would use file as a dictionary.
The problem is that I can't force Splunk to parse the file.
file same is:
1 12.01 45.35
2 10.01 45.35
I used these settings:
FIELD_DELIMITER=tab
FIELD_QUOTE=" (I don't have any quotes, there are only numbers)
FIELD_NAMES=id,lon,lat
And Splunk puts the whole row into field id:
{"1\t12.01\t45.35\t":"2\t10.01\t45.35\t"}
1. why does it ignores tab as separator?
2. why does it splunk adds the first line in each "event"? I have 1000 lines, splunk sees 1000 events and each event has single field "id" where the first line "1 12.01 45.35 " is always in the beginning of event.
Have no Idea what splunk tries to do...
... View more
06-18-2015
04:31 AM
Hi,
I want to create custom hunk dashboard.
This dashboard should have custom javascript, css. Javascript would query hunk to get data and display results on top of Google Maps.
There should be controls on the dashboard (day/hour dropdown for example).
Where can I find a sample for such stuff?
I've found some REST API docs, places where to drop custom javascript/css, but didn't find the right way to create and deploy such a dashboard.
... View more
05-07-2015
03:17 AM
It works for indexes using hadoop-provider. It doesn't work for indexes based on mongo-provider
... View more
05-07-2015
02:42 AM
|metadata type=sources index=coll*
returns nothing unfortunately
|metadata type=sources index=*
returns hadoop index based on hadoop provider. My coll* virtual indexes are based on mongo. I use mongo provider https://splunkbase.splunk.com/app/1810/#/documentation
to get access to mongo data using Hunk
... View more
05-07-2015
02:05 AM
Great thank you!
It works, thanks for the detailed explanation, useful.
... View more
05-06-2015
02:50 PM
Hi, I have several collections:
coll_2015_01_01, coll_2015_01_02, coll_2015_01_03, coll_2015_01_04 ...
I want to write a query:
index=coll_2015_01_01 | group by $indexname count
and get:
coll_2015_01_01 123
coll_2015_01_02 234
coll_2015_01_03 333
coll_2015_01_04 555
coll_2015_01_05 444
count of entries in each collection. Can I do it using splunk?
...
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
