Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About sphiwee
sphiwee
Communicator
Member since:
07-06-2020
05-08-2022
Community Statistics
| Posts | 90 |
| Solutions | 0 |
| Karma Given | 63 |
| Karma Received | 5 |
| Member Since | 07-06-2020 |
Activity Feed
- Posted How to write a regex to get the text in red as "ErrorType"? on Dashboards & Visualizations. 05-08-2022 01:59 PM
- Tagged How to write a regex to get the text in red as "ErrorType"? on Dashboards & Visualizations. 05-08-2022 01:59 PM
- Posted Re: Regex to extract suitable fields on Dashboards & Visualizations. 04-05-2022 11:33 AM
- Karma Re: Regex to extract suitable fields for ITWhisperer. 04-05-2022 11:31 AM
- Karma Re: Regex to extract suitable fields for gcusello. 04-05-2022 11:31 AM
- Posted Could someone help me with Regex to extract suitable fields? on Dashboards & Visualizations. 04-05-2022 05:27 AM
- Tagged Could someone help me with Regex to extract suitable fields? on Dashboards & Visualizations. 04-05-2022 05:27 AM
- Tagged Could someone help me with Regex to extract suitable fields? on Dashboards & Visualizations. 04-05-2022 05:27 AM
- Posted Is it possible to send screenshot of my table to a Microsoft teams channel? and how? on Reporting. 03-07-2022 02:01 AM
- Tagged Is it possible to send screenshot of my table to a Microsoft teams channel? and how? on Reporting. 03-07-2022 02:01 AM
- Posted Why is my alert report only showing the first result of every row? on Splunk Search. 03-02-2022 09:53 AM
- Karma Re: regex help for ITWhisperer. 03-02-2022 09:14 AM
- Karma Re: How to show only non-null values in a table for ITWhisperer. 02-09-2022 11:04 PM
- Posted Re: regex help on Splunk Search. 02-09-2022 10:40 PM
- Karma Re: regex help for gcusello. 02-09-2022 10:40 PM
- Posted How to extract the following fields? on Splunk Search. 02-09-2022 03:12 AM
- Tagged How to extract the following fields? on Splunk Search. 02-09-2022 03:12 AM
- Posted Alerting via MS TEAMS from Splunk on Alerting. 11-14-2021 06:12 PM
- Tagged Alerting via MS TEAMS from Splunk on Alerting. 11-14-2021 06:12 PM
- Posted Re: field extraction on Alerting. 09-15-2021 10:42 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
05-08-2022
01:59 PM
2022-05-08 19:55:05 [ machine-run-433303-hit-7496951-step-5389 ] [ ATMX Logs Request/Extraction/Attach 2.5.2 ] [ Business Process-Fraud Logs Card v2.5.2 ( ATMXLogAttach )] [ C806968 ] MachineTask [ ERROR ] UnsupportedCommandException: unknown command: Cannot call non W3C standard command while in W3C mode 2022-05-08 19:55:03 [ machine-run-333503-hit-7496951-step-5389 ] [ ATMX Logs Request/Extraction/Attach 2.5.2 ] [ Business Process-Fraud Logs Card v2.5.2 ( ATMXLogAttach )] [ C806968 ] UiRobotCapabilities [ ERROR ] JavascriptException: javascript error: Unexpected identifier ( Session info: chrome=94.0.4606.71) 2022-05-08 19:35:37 [ machine-run-43333-hit-7496952-step-5389 ] [ ATMX Logs Request/Extraction/Attach 2.5.2 ] [ Business Process-Fraud Logs Card v2.5.2 ( ATMXLogAttach )] [ C806966 ] MachineTask [ ERROR ] TimeoutException: Expected condition failed: waiting for element to be clickable: [ unknown locator ] ( tried for 60 second ( s ) with 500 MILLISECONDS interval) I have above extract from our logs I would like to write a regex to get the text in red as "ErrorType"
... View more
- Tags:
- regex
04-05-2022
11:33 AM
Thanks this works, how can I also extract the words after the error? So i can identify the error that I received
... View more
- Tags:
- is
04-05-2022
05:27 AM
I have the below log and I'm using the following regex to extract these fields "date", "process" ,"step", "user", "log level" rex "^(?<Date>\d+-\d+-\d+\s+\d+:\d+:\d+)\s+\[[^\]]*\]\s+\[(?<Process>\[[^\]]+\][^\]]+)\]\s+\[(?<Step>[^\]]+)\]\s+\[(?<User>[^\]]+)\]\s+[^\[]+\[(?<Log_level>[^\]]+) When the log is like the first entry data is extracted without an issue, but once it's like the last three entries nothing is extracted, how can I solve this. 2021-09-28 10:20:27 [machine-run-76416-hit-644640-step-12470] [Business Process Name][Business Process Step Name][Bot Users] MetadataStorage [ ERROR ] Boot failed 2022-04-04 23:30:16 [http-nio-127.0.0.1-7080-exec-3] [] [] [] DataBaseChecker [DEBUG] Checking MySQL ... 2022-04-04 23:30:16 [http-nio-127.0.0.1-7080-exec-3] [] [] [] DatabaseVersionChecker [INFO] Database is up to date. 2022-04-04 23:30:16 [http-nio-127.0.0.1-7080-exec-3] [] [] [] DataBaseChecker [DEBUG] Checking PostgreSQL ... 2022-04-04 23:30:16 [http-nio-127.0.0.1-7080-exec-3] [] [] [] OcrHealthChecker [DEBUG] Checking OCR ...
... View more
03-07-2022
02:01 AM
Is it possible to send screenshot of my table to a microsoft teams channel? and how?
... View more
Labels
- Labels:
-
Other
-
PDF
-
report acceleration
-
saved search
03-02-2022
09:53 AM
I have this table and I'm trying to send it as a report/alert every morning to our teams chat group
This is how it's getting sent out, its only showing the first result of every row
heres the Query | webping http://CTXSDC1CVDI041.za.sbicdirectory.com:4444/grid/console | append [ webping http://CTXSDC1CVDI042.za.sbicdirectory.com:4444/grid/console ] | append [ webping http://CTXSDC1CVDI043.za.sbicdirectory.com:4444/grid/console ] | append [ webping http://CTXSDC1CVDI044.za.sbicdirectory.com:4444/grid/console ] | append [ webping http://CTXSDC1CVDI045.za.sbicdirectory.com:4444/grid/console ] | append [ webping http://CTXSDC1CVDI046.za.sbicdirectory.com:4444/grid/console ] | append [ webping http://CTXSDC1CVDI047.za.sbicdirectory.com:4444/grid/console ] | append [ webping http://CTXSDC1CVDI048.za.sbicdirectory.com:4444/grid/console ]| append [ webping http://ctxsdc1cvdi013.za.sbicdirectory.com:4444/grid/console ] | append [ webping http://CTXSDC1CVDI049.za.sbicdirectory.com:4444/grid/console ]| append [ webping http://CTXSDC1CVDI050.za.sbicdirectory.com:4444/grid/console ] | eval timed_out = case(timed_out=="False", "Machine On", timed_out=="True", "Machine Off")
| eval response_code=if(response_code==200, "Hub and Node Up", "Hub and Node Down")
| rex field=url "http:\/\/(?<host_name>[^:\/]+)"
| table host_name response_code timed_out total_time
... View more
02-09-2022
03:12 AM
2022-02-03 12:07:12 [ machine-run-00000-hit-000000-step-00000 ] [[ Card Onboarding ] CCC Capture - Logging Framework ] [ Card Onboarding business process v3.0.0_logging ( CardOnboardingCPSCapture )] [ CC00 ] CardOnboardingCPSCaptureRobot [ ERROR ] Error CPS NOT AVAILABLE on CPS screen UNKNOWN
Need to extract the above highlighted fields please 2022-02-03 12:07:12 - Date
[ Card Onboarding ] CCC Capture - Logging Framework - Process
Card Onboarding business process v3.0.0_logging ( CardOnboardingCPSCapture ) - Step
CC00 - User
ERROR - Log_Level
... View more
- Tags:
- regex
Labels
11-14-2021
06:12 PM
Good day, I am trying to get alerts via teams channel.. I followed the instructions on splunk docs on how to get webhook and to add to alert, but still the alert is triggering via telegram and not via Teams, what should I look at?
... View more
Labels
- Labels:
-
alert action
-
alert condition
-
email
09-15-2021
10:42 AM
!!! --- HUB ctxsdc1cvdi013.za.sbicdirectory.com:443 is unavailable --- !!! user='molefe_user' password='molefe' quota='user' host='002329bvpc123cw.branches.sbicdirectory.com' port='443' count='1' !!! --- HUB 002329bvpc123cw.branches.sbicdirectory.com:443 is unavailable --- !!! host='005558bvpc5ce4w.za.sbicdirectory.com' port='443' count='1' !!! --- HUB 005558bvpc5ce4w.za.sbicdirectory.com:443 is unavailable --- !!! host='41360jnbpbb758w.za.sbicdirectory.com' port='443' count='1' !!! --- HUB 41360jnbpbb758w.za.sbicdirectory.com:443 is unavailable --- !!! host='48149jnbpbb041w.za.sbicdirectory.com' port='443' count='1' !!! --- HUB 48149jnbpbb041w.za.sbicdirectory.com:443 is unavailable --- !!! user='pips_lvl_one_user' password='pips_lvl_one' quota='user'" The text highlighted red, first one as "Workstation", second one as "Quota" , third one as "status"
... View more
09-15-2021
10:06 AM
| makeresults | eval _raw="!!! --- HUB ctxsdc1cvdi013.za.sbicdirectory.com:443 is unavailable --- !!! user='molefe_user' password='molefe' quota='user' host='002329bvpc123cw.branches.sbicdirectory.com' port='443' count='1' !!! --- HUB 002329bvpc123cw.branches.sbicdirectory.com:443 is unavailable --- !!! host='005558bvpc5ce4w.za.sbicdirectory.com' port='443' count='1' !!! --- HUB 005558bvpc5ce4w.za.sbicdirectory.com:443 is unavailable --- !!! host='41360jnbpbb758w.za.sbicdirectory.com' port='443' count='1' !!! --- HUB 41360jnbpbb758w.za.sbicdirectory.com:443 is unavailable --- !!! host='48149jnbpbb041w.za.sbicdirectory.com' port='443' count='1' !!! --- HUB 48149jnbpbb041w.za.sbicdirectory.com:443 is unavailable --- !!! user='pips_lvl_one_user' password='pips_lvl_one' quota='user'" | rex "!!! --- HUB (?[^:]*):\d+\s(?[^-]*).*?password='(?[^']*)" I'm running above rex command on splunk, it works when using it with "makeresults" command but when Im using it in my search it doesnt bring back any results
... View more
Labels
- Labels:
-
Other
09-15-2021
12:18 AM
Hi the port will always be the same, however when I run this regex command in my search it doesnt extract anything Quota I think it was extracted automatically and its wrong hence I wanted the regex way
... View more
09-14-2021
03:37 PM
I have the following log !!! -- - HUB ctxsdc1cvdi013.za.sbicdirectory.com:443 is unavailable -- - !!! user= ' molefe_user ' password= ' molefe ' quota= ' user ' host= ' 002329bvpc123cw.branches.sbicdirectory.com ' port= ' 443 ' count= ' 1 ' !!! -- - HUB 002329bvpc123cw.branches.sbicdirectory.com:443 is unavailable -- - !!! host= ' 005558bvpc5ce4w.za.sbicdirectory .com ' port= ' 443 ' count= ' 1 ' !!! -- - HUB 005558bvpc5ce4w.za.sbicdirectory.com:443 is unavailable -- - !!! host= ' 41360jnbpbb758w.za.sbicdirectory.com ' port= ' 443 ' count= ' 1 ' !!! -- - HUB 41360jnbpbb758w.za.sbicdirectory.com:443 is unavailable -- - !!! host= ' 48149jnbpbb041w.za.sbicdirectory.com ' port= ' 443 ' count= ' 1 ' !!! -- - HUB 48149jnbpbb041w.za.sbicdirectory.com:443 is unavailable -- - !!! user= ' pips_lvl_one_user ' password= ' pips_lvl_one ' quota= ' user ' I have above log and I'm struggling to extract the colored items ctxsdc1cvdi013.za.sbicdirectory.com = as workstation ID is unavailable = as status molefe = as quota
... View more
- Tags:
- extraction
- fields
Labels
- Labels:
-
Other
08-03-2021
12:40 PM
Yes the script is sending results to splunk, I want the visualization like the one below
... View more
- Tags:
- scr
08-03-2021
08:49 AM
Currently running a script on server querying a servers availability, the result of the script is "200" or other codes if the environment is not available.. How can I create a visualization that shows that percentage of the environments availability of 30 days ?
... View more
07-01-2021
09:28 AM
I have the below column whereby im pinging the url in the column, but for a nicer view I only want to display the pc name eg "03131bipc142w" is this possible?
... View more
Labels
- Labels:
-
field extraction
-
fields
-
lookup
06-21-2021
07:02 AM
index="acoe_np_spa_metrics"
| search Project="*" AND Volume="*"
| timechart span=1mon count(eval(D_Status="F")) as success_count
count(eval(D_Status="S")) as failure_count count as Total
| eval STP=(success_count/Total)*100
| fields - Total Good day, I have the above SPL query it gives me the count of "F"s and "S"s but I need the sum of Volumes where D_Status = F and sum of Volume where D_Status = S
... View more
06-21-2021
03:18 AM
Thanks it works, but seems I actually had to get the sum of the volume where D_status = F and sum of volume where D_Status = S... How can I achieve this?
... View more
06-20-2021
11:02 AM
here's the spl query index="acoe_np_spa_metrics"| search Project="*" AND Volume="*" |bin _time span=1month | stats count(eval(D_Status="F")) as success_count count(eval(D_Status="S")) as failure_count | eval TOTAL_COUNT=(success_count + failure_count) | eval STP=(success_count/TOTAL_COUNT)*100 | timechart STP
... View more
- Tags:
- the
06-20-2021
11:00 AM
How can I get STP as a bar chart ? im getting error when i try to do it like this i want to display STP for each month
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-08-2022
06:10 PM
|
Karma given to
