Hi Team  How to convert millsec value to seconds  index=testing | timechart max("event.Properties.duration") Can anyone helps to with spl query search converting value  millsec value to seconds        ... View more

Hi  I am not sure about this value risk score.  How do i create dashboard tile for this fields   ... View more

Hi Team Can anyone help me with Splunk search query to split the successful login from invalid?  Ex - I want to exclude OK from the search, want to see only the locket out, invalid, invalid parameter   Thanks      ... View more

Hi  Can anyone help me with below query  I have created a pie chart based on the error message, however i am not sure how to add country along  index=test | iplocation Properties.ip | dedup Properties.ip | stats count by event.Properties.errMessage         ... View more

Hi  Can anyoine suggest me how to create Avg & Std Dev graph from the fields     ... View more

Hi All  Anyone can confirm is there any prebuilt dashboard available for SAP - customer data cloud.  If no pre-built dashboard, then how would i like to pull all the logs from the SAP  system to monitor infrastructure metrics in splunk dashboard    Note - Currently i have enabled all the logs are sent via connector, however i cant see end point logs     ... View more

Hi Team  I tried the below search but not getting any result,  index=aws component=Metrics group=per_index_thruput earliest=-1w@d latest=-0d@d | timechart span=1d sum(kb) as Usage by series | foreach * [eval <<FIELD>>=round('<<FIELD>>'/1024/1024, 3)]       ... View more

How do i edit the below append command into my real time environment  The below source are obtain from Splunk Dasboard Studio   | makeresults count=50 | eval app="Web Server" | eval type="User" | append [ makeresults count=28 | eval app="Web Server" | eval type="System" ] | append [ makeresults count=22 | eval app="Web Server" | eval type="Idle" ] | append [makeresults count=22 | eval app="Network" | eval type="User" ] | append [ makeresults count=48 | eval app="Network" | eval type="System" ]| append [ makeresults count=30 | eval app="Network" | eval type="Idle" ] | append [makeresults count=65 | eval app="Load Balancer" | eval type="User" ] | append [ makeresults count=17 | eval app="Load Balancer" | eval type="System" ] | append [ makeresults count=18 | eval app="Load Balancer" | eval type="Idle" ] | append [makeresults count=50 | eval app="Storage" | eval type="User" ] | append [ makeresults count=27 | eval app="Storage" | eval type="System" ] | append [ makeresults count=23 | eval app="Storage" | eval type="Idle" ] | append [makeresults count=18 | eval app="Database" | eval type="User" ] | append [ makeresults count=60 | eval app="Database" | eval type="System" ] | append [ makeresults count=22 | eval app="Database" | eval type="Idle" ] | append [makeresults count=50 | eval app="Security" | eval type="User" ] | append [ makeresults count=12 | eval app="Security" | eval type="System" ] | append [ makeresults count=38 | eval app="Security" | eval type="Idle" ] | append [makeresults count=45 | eval app="Auth Server" | eval type="User" ] | append [ makeresults count=32 | eval app="Auth Server" | eval type="System" ] | append [ makeresults count=23 | eval app="Auth Server" | eval type="Idle" ] | append [makeresults count=50 | eval app="CDN" | eval type="User" ] | append [ makeresults count=28 | eval app="CDN" | eval type="System" ] | append [ makeresults count=22 | eval app="CDN" | eval type="Idle" ] | chart count by app, type | eval sort_field=case(app=="Login",1,app=="Search",2,app=="Cart",3,app=="Pricing",4,app=="Checkout",5,app=="Order Management",6,app=="Gifting",7,app=="Chat",8) | sort sort_field | table app, User, System, Idle   My current splunk  index=sample  x_host_header=www.sample.com | eval Device = if(match(useragent,"SM-"),"Android", if(match(useragent,"Windows"),"Windows",if(match(useragent,"Mac"),"Mac",if(match(useragent,"CPH"),"Android",if(match(useragent,"Nokia"),"Android",if(match(cs_user_agent,"Pixel"),"Android",if(match(useragent,"TB-"),"Android",if(match(useragent,"VFD"),"Android",if(match(useragent,"HP%20Pro%20Slate"),"Android",if(match(cs_user_agent,"VOG-L09"),"Android",if(match(useragent,"YAL-L21"),"Android",if(match(useragent,"ATU-L22"),"Android",if(match(useragent,"MAR-LX1A"),"Android",if(match(useragent,"RNE-L22"),"Android",if(match(useragent,"INE-LX2"),"Android",if(match(useragent,"AMN-LX2"),"Android",if(match(useragent,"LYO-LO2"),"Android",if(match(useragent,"DRA-LX9"),"Android",if(match(useragent,"LYA-L29"),"Android",if(match(useragent,"ANE-LX2J"),"Android",if(match(useragent,"STK-L22"),"Android",if(match(useragent,"EML-AL00"),"Android",if(match(useragent,"BLA-L29"),"Android",if(match(useragent,"X11"),"Linux",if(match(useragent,"LDN-LX2"),"Android",if(match(useragent,"TB3-"),"Android",if(match(useragent,"5033T"),"Android",if(match(useragent,"5028D"),"Android",if(match(useragent,"5002X"),"Android",if(match(useragent,"COR-"),"Android",if(match(useragent,"MI%20MAX"),"Android",if(match(useragent,"WAS-LX2"),"Android",if(match(useragent,"vivo"),"Android",if(match(useragent,"EML-L29"),"Android",if(match(useragent ent,"Moto"),"Android",if(match(useragent,"MMB"),"Android", OTHER")))))))))))))))))))))))))) ... View more