About gowtham08091

gowtham08091 · ‎08-27-2020

we have several columns which needs to be changes time to time, line process and comments. ? if we go with scheduled reports, all the 10+ fields has to be configured manually during every change.

gowtham08091 · ‎08-27-2020

Hello, I would need to add the splunk search results to an existing lookup table. Example. I have a splunk lookup table and this would be a static as below, where I have static text defined, and every row there would a splunk query has to run / scheduled and the result has to be printed in the lookup table on "Splunk Search Result" column every day. Is there a way to achieve the same? Thanks

gowtham08091 · ‎08-04-2020

@richgalloway Thanks for your quick reply, but I have already configure the current time, but still the same issue

gowtham08091 · ‎08-04-2020

I have a set if CSV files getting created every day, none of the CSV files have any default data or time printed within it, when i index the files i could see the data is getting index with different time stamps over the past date. I have also used crcSalt=<SOURCE> Soucettype is CSV and set to Current, But all the file has created date and last modified data is the same (example today's date.) but the data gets indexed with different timestamp

gowtham08091 · ‎07-24-2020

Thanks for the feedback, with your comment i found that i am missing the _time in my search and i get the expected results when I add _time in dedup Thanks

gowtham08091 · ‎07-20-2020

@anilchaithu I am looking for a trend report like weekly and monthly trend, like. Weekly trend should how the result from last data of a week and monthly trend to show the data from last day of a month. (not the cumulative sum of week and month)

gowtham08091 · ‎07-20-2020

Hello, I am trying to span for 1 week and 1 month chart from the summary index search, but When in use | bin span=1w, instead of showing the last or latest data of week it is summing the weeks total. I am looking for trend chart, where to display first or last data of a week or month. i used same bin command earlier and but this time one difference is i a, using stats. I use the query in the following format

gowtham08091 · ‎07-12-2020

Hello, I get a response with one of my index "Root Cause(s): The percentage of small of buckets created (100) over the last hour is very high and exceeded the red thresholds (50) for index=jenkins_statistics, and possibly more indexes, on this indexer" Any idea how to fix this issue.

gowtham08091 · ‎07-10-2020

Hello, Recently I been getting Bucket error in index processor everyday. I am rebooting the Splunkd service everyday to get rid of this error. How to identify the root cause of this issue and fix it. error attached Thanks

gowtham08091 · ‎07-01-2020

Hello @Shweta7775 Did you find any solution for your post, I am also looking for such a solution with MS project Thanks

gowtham08091 · ‎06-12-2020

Hi @ktugwell_splunk Thanks for your response, In this case the count 5 is dynamic, They may 100's of rows with the parent child relationship. in such a use case how would I build the relationship. Thanks,

Posts	11
Solutions	1
Karma Given	1
Karma Received	0
Member Since	‎06-12-2020

Online Status	Offline
Date Last Visited	‎08-27-2020 08:38 AM

How to add the splunk search results to an existin...

time stamp mismatch in csv files

time span = week

Splunkd Bucket error

Re: How to add the splunk search results to an exi...

How to add the splunk search results to an existin...

Re: time stamp mismatch in csv files

time stamp mismatch in csv files

Re: time span = week

Re: time span = week

time span = week

Re: Splunkd Bucket error

Splunkd Bucket error

Re: Can we index data from Microsoft Project (PWA)...

Re: Looping in Splunk Query