×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
systematics78
Loves-to-Learn
Member since: ‎01-19-2021
‎01-20-2021
Community Statistics
Posts 6
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎01-19-2021
Activity Feed
View All

Re: Dynamic source selection based on search

by in Dashboards & Visualizations
‎01-20-2021 03:38 AM
‎01-20-2021 03:38 AM
Yes.. I know it.. I'm not so good on Splunk side.. that why I'm asking.. As I told i have more that 100+ such files as a source - some of them from different environment.. And I need just create dashboard and visualize users activities regarding with the environment.. I can construct this tables on segregated source. ... View more

Re: Dynamic source selection based on search

by in Dashboards & Visualizations
‎01-20-2021 03:00 AM
‎01-20-2021 03:00 AM
Actually the fields not the same.. for example log: [I 2021-01-20 10:50:14.071 JupyterHub log:174] 302 GET / -> /jhub-test/hub/ (@10.161.10.174) 1.30ms log: [I 2021-01-19 08:05:10.633 JupyterHub login:43] User logged out: systematics   This is from the same source - So based on first row I can decide that user logged off from app in QA environment..       ... View more

Re: Dynamic source selection based on search

by in Dashboards & Visualizations
‎01-20-2021 02:45 AM
‎01-20-2021 02:45 AM
I just want to construct a table for example: Environment                   User Activity               Username DEV                                        Logged IN                       systematics78   And I have sources from this environment but exactly with the same configuration For example from Dev Environment I have log file with several rows like this I log:187 10.161.2.165  some info I log:587 Logged-In systematics78 For sandbox environment I log:187 10.161.1.175  some info I log:587 Logged-In systematics78 The logs name generated randomly on daily basis.. So I have just one info - ip address - based on that I can decide that User activity is related with for example DEV or Sandbox environment So the main guest ion How I can create such report ... View more

Re: Dynamic source selection based on search

by in Dashboards & Visualizations
‎01-20-2021 02:36 AM
‎01-20-2021 02:36 AM
Can I have more explanation what you exactly mean? ... View more

Re: Dynamic source selection based on search

by in Dashboards & Visualizations
‎01-19-2021 10:59 PM
‎01-19-2021 10:59 PM
I have source from multiply environments - for example SandBox, Dev, QA etc.. with exact same configuration and need to segregate by environment - so need to filter source by searching ip address to identify the source relationship with environment and after use just that source with some events.. ... View more

Dynamic source selection based on search

by in Dashboards & Visualizations
‎01-19-2021 08:11 AM
‎01-19-2021 08:11 AM
Hi.. I have in splunk logs comes from different sources.. and different events. For example, one type of events contains user information without server name: Logged-in user {'kind': 'user', 'name': 'XXXXXX', 'admin': False, 'groups': [], 'server': '/jhub-test/user/XXXXXX/', 'pending': None, 'created': '2020-12-27T03:29:41.850432Z', 'last_activity': '2021-01-16T05:18:16.822564Z', 'servers': None}   and other have server ip on that..   So I need to construct query were I can select the source based on server ip search and after search the specific action - for example user logon events.   so I want to write some query like this: if source=* contain ip address when source="the actual source name which contain ip address"  |search "*Logged*" ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎01-20-2021 05:10 PM