Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About akki2428
akki2428
New Member
Member since:
10-23-2019
06-05-2020
Community Statistics
| Posts | 6 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 10-23-2019 |
Activity Feed
- Posted Deriving one event from another on Splunk Search. 03-30-2020 10:54 PM
- Tagged Deriving one event from another on Splunk Search. 03-30-2020 10:54 PM
- Posted Re: Searching string with patterns on Splunk Search. 10-29-2019 05:19 PM
- Posted Re: Searching string with patterns on Splunk Search. 10-23-2019 07:06 PM
- Posted Re: Searching string with patterns on Splunk Search. 10-23-2019 06:44 PM
- Posted Re: Searching string with patterns on Splunk Search. 10-23-2019 06:25 PM
- Posted Searching string with patterns on Splunk Search. 10-23-2019 05:59 PM
- Tagged Searching string with patterns on Splunk Search. 10-23-2019 05:59 PM
- Tagged Searching string with patterns on Splunk Search. 10-23-2019 05:59 PM
- Tagged Searching string with patterns on Splunk Search. 10-23-2019 05:59 PM
- Tagged Searching string with patterns on Splunk Search. 10-23-2019 05:59 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
03-30-2020
10:54 PM
Hi, pardon if my question is too obvious, am a Splunk noob.
My requirement is:
I have a search String , example "Error occured in getting ID....". In the result log of this search is included a unique ID (there are multiple logs for each time that searh string is matched, unique ID different for all such logs).
I want to further search for one specific log that has same unique ID plus some other text.
E.g - This is search string query:
index=index "Error finding xID for ID:" | dedup uniquId
This is one block of the result:
{"level":"ERROR","uniqueId":"48b3825e993981df25d13670 1", "message":"Error finding xID for ID:1234"}
What I require is, to be able to further search based on uniqueId in log dynamcially.
E.g:
| <uniqueId> "some other search string"
... View more
- Tags:
- splunk
10-29-2019
05:19 PM
Hi @whrg , My search string is now - "record failed (state error) for ID x1IoGPTIBP" . It doesn't extract the id I guess because of (state error) included in search string. How can we escape this.
| makeresults | eval _raw="record failed (state error) for ID x1IoGPTIBP"
| rex field=_raw "record failed (state error) for ID (?<id1>\w+)"
| table id1
... View more
10-23-2019
07:06 PM
Hi @whrg . If instead of length, I want to compare if both IDs are equal, then just |search id1=id2 should work? I tried but it is not returning any result
... View more
10-23-2019
06:44 PM
Sorry for being a splunk noob @whrg . This works as expected. Thanks
... View more
10-23-2019
06:25 PM
Thanks @whrg , I tried using this command. It returns record just for id x1IoGPTIBP. All other records are missed.
... View more
10-23-2019
05:59 PM
Hi, I would want to search for all results for this specific string pattern
'record has not been created for id XXXXXXXXXX,XXXXXXXXXX in DB'
Note that:
XXXXXXXXXX is a variable value, always of 10 character.
Sample text: 'record has not been created for id x1IoGPTIBP,x1IoGPTIBP in DB'
Any help would be highly appreciated. Thanks
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
