Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About manjuase
manjuase
Explorer
Member since:
12-29-2016
06-25-2020
Community Statistics
| Posts | 15 |
| Solutions | 0 |
| Karma Given | 3 |
| Karma Received | 1 |
| Member Since | 12-29-2016 |
Activity Feed
- Karma Re: Select all values from a dropdown input for niketn. 06-05-2020 12:48 AM
- Got Karma for check server is up or not. 06-05-2020 12:48 AM
- Karma Re: Cooked connection to ip timed out for masonmorales. 06-05-2020 12:47 AM
- Karma How to delete duplicate events? for Flynt. 06-05-2020 12:46 AM
- Posted how to set date field as a token for earliest and latest on Dashboards & Visualizations. 11-15-2019 01:35 AM
- Tagged how to set date field as a token for earliest and latest on Dashboards & Visualizations. 11-15-2019 01:35 AM
- Posted Re: How to set a token based on drop down values on Dashboards & Visualizations. 11-12-2019 08:59 AM
- Posted How to set a token based on drop down values on Dashboards & Visualizations. 11-12-2019 04:06 AM
- Tagged How to set a token based on drop down values on Dashboards & Visualizations. 11-12-2019 04:06 AM
- Tagged How to set a token based on drop down values on Dashboards & Visualizations. 11-12-2019 04:06 AM
- Tagged How to set a token based on drop down values on Dashboards & Visualizations. 11-12-2019 04:06 AM
- Tagged How to set a token based on drop down values on Dashboards & Visualizations. 11-12-2019 04:06 AM
- Tagged How to set a token based on drop down values on Dashboards & Visualizations. 11-12-2019 04:06 AM
- Posted how to find the total time taken by a search to finish the run for both adhoc and saved searches on Splunk Search. 05-26-2019 11:05 PM
- Tagged how to find the total time taken by a search to finish the run for both adhoc and saved searches on Splunk Search. 05-26-2019 11:05 PM
- Tagged how to find the total time taken by a search to finish the run for both adhoc and saved searches on Splunk Search. 05-26-2019 11:05 PM
- Posted How to get the latest events on Splunk Search. 02-26-2018 10:50 PM
- Tagged How to get the latest events on Splunk Search. 02-26-2018 10:50 PM
- Posted Re: How to Check Server availablilty on Deployment Architecture. 07-25-2017 02:36 AM
- Posted Re: check server is up or not on Splunk Search. 07-25-2017 12:40 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
11-15-2019
01:35 AM
Hi All,
I have a comma separated file like below
Name class "Report Date"
x 1 10/11/2019
Y 2 12/11/2019
while indexing in props.conf i mentioned
TIMESTAMP_FIELDS = "Report Date"
TIME_FORMAT = %d/%m/%Y
so in my index I am having the above two events like below
Time Event
10/11/19 x,1,10/11/2019
12:00:00.000 AM
12/11/19 y,2.12/11/2019
12:00:00.000 AM
i have a drop down which is having "Report Date" field values. when i choose 10/11/2019 other panels in my dashboard should show the events on the date 10/11/2019.
i tried to pass the values of the drop down as a token for earliest and latest in panels.. but it is showing invalid earliest time.
can anyone help me on this ?
... View more
- Tags:
- tokens
11-12-2019
08:59 AM
Hi Niketnilay,
Thanks for your valuable answer. it is working fine.. but instead of the below portion
<panel>
<table>
<search>
<query>$tokSPL$</query>
</search>
</table>
</panel>
can't we assign this token to dropdown?
That is when the admin role is selected, the result of the query should be populated in the dropdown instead of showing it in a panel.
... View more
11-12-2019
04:06 AM
Hi all,
I have one drop down(dropdown1) which will display the current user logged into splunk using the below query.
|rest splunk_server=local /services/authentication/current-context
And i have another dropdown (dropdown2) which should display the values based on the value on dropdown1
that is if dropdown1 is having admin then dropdown 2 should run a query1 and display values in the dropdown2, if dropdown1 having users other than admin dropdown2 should run a query2 and display values in the dropdown2..
Over all my expectation is can we run a two different query for a same dropdown based on the value chosen in dropdown1.
p.s: dropdown1 will be having only one username since it is showing current user logged in.
please help me out on this. Thanks in advance
... View more
05-26-2019
11:05 PM
Hi,
i want to find out the total run time of both ad-hoc and saved searches. I checked in _audit index to find out the total_run_time.. there i can find the total_Run_time for saved searches but i want to find the total run time for the ad-hoc search as well.
please help me to get the total_run_time.
... View more
02-26-2018
10:50 PM
Hi
I have two csv which got indexed
csv 1:
Step No,Release Name,Execution Time,Status
1,TA,02-16-2018 at 10:32:32 UTC,Pass
2.TA,02-16-2018 at 10:32:33 UTC,Fail
csv 2:
Step No,Release Name,Execution Time,Status
1,TA,02-16-2018 at 12:40:42 UTC,Pass
2.TA,02-16-2018 at 10:41:43 UTC,Pass
only Execution Time and Status will differ in both the file. indexing time(_time) will be "Execution Time"
my question is i want to get the data from csv2 only as it is only having latest timestamp using pivot .. i don't want to show the data from csv1 as it is having earliest timestamp .
Can somebody help me on this ?
Thanks in advance
... View more
- Tags:
- splunk-enterprise
07-25-2017
02:36 AM
Hi mzemcik,
Did u get anything on this ?
I am also in same requirement.
If u give me the solution then that would be very helpful for me.
Thanks in advance
... View more
07-25-2017
12:40 AM
Hi cusello,
Yeah i agree with your point ...from the internal index we can say if UF is running or not.. In case if server is running and UF is not running , we can't find that server in _internal index right?..So here we can't say server is down..here UF is down..
I want to check the status of server not the status of UF.
Do you have any idea on this ?
... View more
07-25-2017
12:22 AM
Hi cusello ,
Thanks for your reply..I want to check the server status only..
So you are saying that in "_Internal" index if am not seeing the server for which i want to check the status..then that server is down..right ?
... View more
07-24-2017
11:01 PM
1 Karma
I have a lookup with the details of server and I want to check whether that servers are up or not. if not i have to send an email.
In my case pingstatus app is not working so i want some other methods which is not using ping command.
Thanks in advance
... View more
- Tags:
- splunk-enterprise
07-19-2017
11:19 PM
Hi saurabh_tek,
@saurabh_tek
Did u find the solution for this ?
i am also having all host details in lookup file only ...when i do ping status it returns nothing...
Your reply will helpful
Thanks in advance
... View more
02-07-2017
04:13 AM
Hi,
I have two text boxes textbox1 with token name 'texttok' and
textbox2 with token name 'cputok'
Now, i want to set 'cputok' token with the value of 'texttok' when that 'texttok' token met some condition.
Any suggestion?
... View more
- Tags:
- splunk-enterprise
01-09-2017
05:20 AM
Hi,
I have 2 dashboards: dashboard1 & dashboard 2 and 2 users: user1 & user2 and both dashboards are in one app APP.
Now, i would like to restrict user1 to access only dashboard1 and user2 to access only dashboard2.
So, i have created roles for both users and given required access respectively however when user2 tries to load APP getting "the page not found error" because dashaboard1 is default view in my app APP.
Please suggest. Thanks in advance!
... View more
- Tags:
- splunk-enterprise
01-09-2017
01:34 AM
Hi,
I want to make a dashboard to be visible for particular user in splunk?
Is this possible?
Any suggestion?
Thanks in Advance
... View more
- Tags:
- splunk-enterprise
01-01-2017
11:26 PM
Hi,
Thanks for your reply....
It is working....
... View more
12-29-2016
03:18 AM
Hi -
I have saved search returning events from past one year as below
ReadDate Count
20161101 500
20161102 550
.
.
.
.
20161228 800
20161229 900
.
and i have populated this data in to summary index however all this data is indexed with current data instead i want all this data to be indexed based on the ReadDate field. Hence tried setting up _time to ReadDate but results are not successful. Any suggestions how to achieve this please?
Thanks in Advance.
... View more
- Tags:
- splunk-enterprise
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-25-2020
06:46 AM
|
