Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About nagendraDumpala
nagendraDumpala
Engager
Member since:
06-17-2020
10-15-2020
Community Statistics
| Posts | 7 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 06-17-2020 |
Activity Feed
- Posted Re: AWS S3 Bucket Connectivity with Splunk Cloud on Dashboards & Visualizations. 10-14-2020 11:31 PM
- Posted indexed fields are not creating while events are collected into summary index by using collect command on Splunk Enterprise. 07-15-2020 12:37 AM
- Tagged indexed fields are not creating while events are collected into summary index by using collect command on Splunk Enterprise. 07-15-2020 12:37 AM
- Tagged indexed fields are not creating while events are collected into summary index by using collect command on Splunk Enterprise. 07-15-2020 12:37 AM
- Tagged indexed fields are not creating while events are collected into summary index by using collect command on Splunk Enterprise. 07-15-2020 12:37 AM
- Tagged indexed fields are not creating while events are collected into summary index by using collect command on Splunk Enterprise. 07-15-2020 12:37 AM
- Posted why indexed fields are not creating when i collect data to summary index on Splunk Enterprise. 07-08-2020 05:29 AM
- Tagged why indexed fields are not creating when i collect data to summary index on Splunk Enterprise. 07-08-2020 05:29 AM
- Tagged why indexed fields are not creating when i collect data to summary index on Splunk Enterprise. 07-08-2020 05:29 AM
- Tagged why indexed fields are not creating when i collect data to summary index on Splunk Enterprise. 07-08-2020 05:29 AM
- Tagged why indexed fields are not creating when i collect data to summary index on Splunk Enterprise. 07-08-2020 05:29 AM
- Posted how to write eval inside tstats command? on Splunk Enterprise. 07-08-2020 05:15 AM
- Tagged how to write eval inside tstats command? on Splunk Enterprise. 07-08-2020 05:15 AM
- Tagged how to write eval inside tstats command? on Splunk Enterprise. 07-08-2020 05:15 AM
- Tagged how to write eval inside tstats command? on Splunk Enterprise. 07-08-2020 05:15 AM
- Posted Re: How to create regex for Array of objects while creating indexed-fields on Splunk Enterprise. 06-23-2020 11:26 PM
- Posted How to create regex for Array of objects while creating indexed-fields on Splunk Enterprise. 06-23-2020 12:04 PM
- Tagged How to create regex for Array of objects while creating indexed-fields on Splunk Enterprise. 06-23-2020 12:04 PM
- Tagged How to create regex for Array of objects while creating indexed-fields on Splunk Enterprise. 06-23-2020 12:04 PM
- Posted indexed fields creation and linking into config files on Splunk Enterprise. 06-17-2020 12:44 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
10-14-2020
11:31 PM
@thambisetty Thanks for your response. Can you make us to get those add-on names? This would be appreciated.
... View more
07-15-2020
12:37 AM
Hi, we configured transform.conf, props.conf and fields.conf file while pushing the events into main index. In that time indexed fields are created and when using tstats command is also working fine. No we are trying to move the search matched events into summary index from main index by using collect command. In this time our main indexed fields are coming into the summary index but, those fields are not acting as indexed fields in summary index. And when we are try to use tstats on summary index also not working on those fields. Can you please help us to resolve this problem. What we need is, the collected fields also act as indexed fields in summary index. Please correct us if we missing something. Thanks & Reguards Nagendra D
... View more
Labels
- Labels:
-
using Splunk Enterprise
07-08-2020
05:29 AM
Hello, I have created indexed fields at the time of indexing, then i executed the tstats query, and it's working fine. But when i collect resulted data into summary index using splunk collect command, my tstats is not working on summary index. | tstats latest(result._time) as _time ,values(result.relational_correlationId) as relational_correlationId,values(result.tracePoint) as tracePoint where index="hec_example1" by result.environment,result.businessGroup,result.appName,result.interfaceName,result.correlationId | table _time,tracePoint | collect index="summary_mt" tstats is not working on summary index(I have configured fields.conf as well)
... View more
Labels
- Labels:
-
using Splunk Enterprise
07-08-2020
05:15 AM
Hello, we want to combined two fields by using eval inside the tstats where clause search. Please see my search below | tstats latest(result._time) as _time ,values(result.relational_correlationId) as relational_correlationId,values(result.tracePoint) as tracePoint,values(result.timestamp) as timestamp,values(result.content.businessFields{}.key) as content.businessFields{}.key,values(result.content.businessFields{}.value) as content.businessFields{}.value where index="hec_example1" by result.environment,result.businessGroup,result.appName,result.interfaceName,result.correlationId |rename result.environment as environment,result.businessGroup as businessGroup,result.appName as appName,result.interfaceName as interfaceName,result.correlationId as correlationId| table _time,environment,businessGroup,appName,interfaceName,tracePoint,timestamp,correlationId,content.businessFields{}.key,content.businessFields{}.value Please help me on this.
... View more
Labels
- Labels:
-
using Splunk Enterprise
06-23-2020
11:26 PM
Hi Birbal, Thank you so much for your support. Your suggestion make my job very cool.
... View more
06-23-2020
12:04 PM
We have an object like below. { "mirId": "Mule-111", "appVersion": "v1", "businessGroup": "MARKETING", "compress": false, "appName": "dev-sys-netsuite-int-v1", "relational_correlationId": "c96563d1-acb3-11ea-9d9b-0654f1d3f281", "tracePointDescription": "Capture payload", "threadName": "[MuleRuntime].cpuLight.13: [adaptive-logger-test].adaptive-loggerFlow.CPU_LITE @6dbce5f9", "content": { "exception": "", "payload": "https://s3.console.aws.amazon.com/s3/object/unilever-ai-operationalframework/LEVEREDGE/prod/dispatchAdvice/c96d4fa0-a5fb-11ea-95a5-0281bc7d1468ERROR-2020-06-04T00:39:25.154Z1591231167.txt?region=us-east-2&tab=overview", "businessFields": [ { "key": "File_Name", "value": "ASN_200622170087026.xml" }, { "key": "IDOC_NAME", "value": "0000001408187026" } ], "category": "org.unilever.apps.adaptiveloggertest" }, "environment": "TJ-MARKETING-Dev", "LogMessage": "Test-TJ-SCHED", "correlationId": "c98f8110-acb3-11ea-9d9b-0654f1d3f281", "interfaceName": "netsuite-salesapi", "tracePoint": "START", "timestamp": "2020-12-06T13:59:21.133Z" } Now we need to create a regex for matching the key & value from businessFields array. And the values of "key" , "value" should be stored as multi-value fields. we need to use this regex in transforms.conf for creating indexed-fields.
... View more
Labels
- Labels:
-
configuration
-
development
06-17-2020
12:44 AM
1.) How to create a custom indexed field and configure.? 2.) Does it needs to link in the inputs.conf? if needs how can we provide linking between the both indexed fields config files and inputs.conf config file? Best answers will be appreciated!!
... View more
Labels
- Labels:
-
configuration
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-15-2020
06:27 AM
|
