cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
bsanjee
Explorer
Member since: ‎10-04-2019
‎02-14-2022
Community Statistics
Posts 6
Solutions 0
Karma Given 3
Karma Received 0
Member Since ‎10-04-2019
Activity Feed
View All

Re: Rex and time conversion

by in Splunk Search
‎02-08-2022 12:20 PM
‎02-08-2022 12:20 PM
@richgalloway , Thanks! it worked ... View more

Re: Rex and time conversion

by in Splunk Search
‎02-07-2022 07:20 AM
‎02-07-2022 07:20 AM
@richgalloway , This is the GMT timeformat that i need to convert. 2021-05-05T11:23:39.426Z ... View more

Re: Rex and time conversion

by in Splunk Search
‎02-06-2022 07:41 PM
‎02-06-2022 07:41 PM
Here is the sample event with time in GMT,  [2021-02-06 15:30:03] production.INFO:{"uri":"https:\/\/platform.ringcentral.com\/restapi\/v1.0\/account\/5706\/call-log\/SU7GHYajgzUA?view=Simple","id":"SU7GHYaeMpjgzUA","sessionId":"886240004","startTime":"2021-05-05T11:23:39.426Z","duration":36,"type":"Voice","internalType":"TollFreeNumber","direction":"Inbound","action":"Phone Call","result":"Rejected","to":{"phoneNumber":"+18558"},"from":{"name":"EARNOS","phoneNumber":"+1509","location":"Spokane, WA"},"telephonySessionId":"s-a0d16c80326f9z135c880000"} thanks, ... View more

Re: Rex and time conversion

by in Splunk Search
‎02-06-2022 03:11 PM
‎02-06-2022 03:11 PM
@richgalloway , thanks for the regex. I am also getting another set of events whose time is GMT. May I know how this can be achieved in the same. Query? ... View more

How to extract startTime using query and then conv...

by in Splunk Search
‎02-04-2022 03:50 PM
‎02-04-2022 03:50 PM
Hi Splunkers, Below is my sample event, [2021-02-06 15:30:03] production.INFO: {"uri":"https:\/\/platform.ringcentral.com\/restapi\/v1.0\/account\/5706\/call-log\/SU7GHYajgzUA?view=Simple","id":"SU7GHYaeMpjgzUA","sessionId":"886240004","startTime":"2022-02-04T07:27:31-08:00","duration":36,"type":"Voice","internalType":"TollFreeNumber","direction":"Inbound","action":"Phone Call","result":"Rejected","to":{"phoneNumber":"+18558"},"from":{"name":"EAR NOS","phoneNumber":"+1509","location":"Spokane, WA"},"telephonySessionId":"s-a0d16c80326f9z135c880000"} 1. I have to extract startTime using query 2. I have to convert the extracted startTime which is in GMT to PST, again using query I want to do 1 and 2 in the same query. How to do this? ... View more
Labels

CIM data model for Azure activity logs in Splunk

by in Knowledge Management
‎10-04-2019 02:02 AM
‎10-04-2019 02:02 AM
Hello, I have onboarded activity logs from an azure subcription to splunk using Azure monitor addon for splunk, https://splunkbase.splunk.com/app/3534/#/details , and the logs are parsed into below sourcetypes, amal:administrative amal:serviceHealth amal:resourceHealth amal:security amal:ascRecommendation amal:ascAlert Is there a CIM model for these sourcetypes? If not, how should CIM compliance be validated? ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎02-14-2022 02:52 PM
Karma given to
View All