cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
lazyturtle_
Explorer
Member since: ‎02-11-2021
‎02-12-2021
Community Statistics
Posts 5
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎02-11-2021
View All

Re: stats count for a text value associated with a...

by in Splunk Search
‎02-12-2021 06:02 PM
‎02-12-2021 06:02 PM
Hi @scelikok , thanks a lot, this worked 🙂 ... View more

Re: stats count for a text value associated with a...

by in Splunk Search
‎02-11-2021 10:07 PM
‎02-11-2021 10:07 PM
Hi @scelikok , the desired output should be like this: TrainId errorMsg Count 45732 The trxn could not been confirmed. Please try again. Cause:  3 12411 The trxn could not been confirmed. Please try again. Cause:  2 45732 There is a Stop sale for TrainId: 12411,  fromDate: 2021-02-12, toDate: 2021-02-22 1 12411 The trxn could not been confirmed. Please try again. Cause:  7 23765 There was one error in the communication with the reservation system 1 45732 There was one error in the communication with the reservation system 1 12411 There was one error in the communication with the reservation system 1 Thank you. ... View more

Re: stats count for a text value associated with a...

by in Splunk Search
‎02-11-2021 08:40 PM
‎02-11-2021 08:40 PM
ReservId=30010632019 billingCurrency=“INR”,Status=7000, Error='ReservationConfirmRS returned errors for TrainId 45732 and reference number null[The trxn could not been confirmed. Please try again. Cause: ]’,travelerType=3     ReservId=30010632020 billingCurrency=“INR”,Status=6000, Error='ReservationConfirmRS returned errors for TrainId 12411 and reference number null[There is a Stop sale for TrainId: 12411,  fromDate: 2021-02-12, toDate: 2021-02-22]',travelerType=2       ReservId=30010632021 billingCurrency=“INR”,Status=7000, Error='ReservationConfirmRS returned errors for TrainId 23765 and reference number null[[There was one error in the communication with the reservation system]',travelerType=3 ... View more

Re: stats count for a text value associated with a...

by in Splunk Search
‎02-11-2021 08:16 PM
‎02-11-2021 08:16 PM
hi @scelikok , I tried your solution but that didn't give me the desired out put, as I said in the error message the 'TrainId' and error string in the bracket could be different, some of the examples below: - ReservationConfirmRS returned errors for TrainId 12411 and reference number null[There is a Stop sale for TrainId: 12411,  fromDate: 2021-02-12, toDate: 2021-02-22] - ReservationConfirmRS returned errors for TrainId 12973 and reference number null[The trxn could not been confirmed. Please try again. Cause: ]' - ReservationConfirmRS returned errors for TrainId 23765 and reference number null[[There was one error in the communication with the reservation system]   ... View more

stats count for a text value associated with a num...

by in Splunk Search
‎02-11-2021 07:09 PM
‎02-11-2021 07:09 PM
Hi everyone, I am stuck in a situation where in my app logs there are two important values(one is a number and other is a text string) are being captured and I need to draw a stats count using these two values. so here is the base query: index=Myapp sourcetype=weblogic "ReservationConfirmRS returned errors for TrainId" | dedup requestId sortBy -_time | timechart count span=1d the log looks like below: ReservId=30010632019 billingCurrency=“INR”,Status=7000, Error='ReservationConfirmRS returned errors for TrainId 45732 and reference number null[The trxn could not been confirmed. Please try again. Cause: ]’,travelerType=3 so the 'TrainId' and text in bracket [text-string] would be different, and I need to draw a stats count for these two values. Please help! ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎02-12-2021 11:54 PM
Karma given to
View All