Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About Murali51
Murali51
Explorer
Member since:
02-28-2021
03-08-2021
Community Statistics
| Posts | 8 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 02-28-2021 |
Activity Feed
- Posted Re: Get different message Counts from the same field on Splunk Search. 03-08-2021 09:46 AM
- Posted Re: Get different message Counts from the same field on Splunk Search. 03-06-2021 10:26 PM
- Posted Get different message Counts from the same field on Splunk Search. 03-06-2021 10:14 PM
- Posted Re: How to get counts of same field with different info on Splunk Search. 03-06-2021 10:12 PM
- Posted Re: How to get counts of same field with different info on Splunk Search. 03-05-2021 04:06 PM
- Karma Re: How to get counts of same field with different info for richgalloway. 03-01-2021 12:26 PM
- Posted Re: How to get counts of same field with different info on Splunk Search. 03-01-2021 12:25 PM
- Posted Re: How to get counts of same field with different info on Splunk Search. 03-01-2021 09:44 AM
- Posted How to get counts of same field with different info on Splunk Search. 02-28-2021 09:56 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
03-08-2021
09:46 AM
Hi @richgalloway when you get a chance can you please look into my query, thanks.
... View more
03-06-2021
10:26 PM
I have tried below query and didn't work. index=main host=brprwbpa001 robotJobName=Parker ("System Exception" OR "To Report.") | eval Message=case(like(Message,"%Parker successfully%"), "Successful Count", like(Message, "Parker could not be processed, please work PK Renewal.%"), "Exception Count", like(Message, "System exception%"), "System exception Count", 1==1, Message)| stats count by Message| addcoltotals label="Total Count" labelfield=Message
... View more
03-06-2021
10:14 PM
Hello @richgalloway , I am asking your help again to get counts for below messages. I tried the same instruction but unable to get counts. From below messages get counts depends and message value. Your help would be highly appreciated. Consider message which ends with To Report. and get counts. message contains "Parker could not be processed" - Failure count message contains "Parker successfully issued" - Success Count message contains "System exception.Parker Exception Occurred " - System exception Count if message has Any other message : Partial Success get total count Total Count. PK11036791 : Parker successfully issued the 06/05/2021 renewal.,.To Report. PK11036918 : Parker successfully issued the 06/05/2021 renewal.,.To Report. PK11037082 : Parker successfully issued the 06/05/2021 renewal.,.To Report. PK01041601 : New activity on DRA for Michael Demiranda.,Please review new MVR information.,New PPA changes present.,Multiple Property policies present, please work HO.,.To Report. PK11032274 : Please review new MVR information.,.To Report. PK11036998 : Parker successfully issued the 06/05/2021 renewal.,.To Report. PK11041586 : New HO changes present.,Please review new MVR information.,New PPA changes present.,.To Report. PK11004163 : New HO changes present.,New PPA changes present.,.To Report. PK11014724 : New PPA changes present.,.To Report. PK11041665 : New HO changes present.,Please review new MVR information.,New PPA changes present.,.To Report. Parker could not be processed, please work PK Renewal. To Report. System exception.Parker Exception Occurred : Unable to extract Pending Renewal policy period for PK Policy. at Source: Invoke Workflow File: Get Data: Throw System exception.Parker Exception Occurred : Index and length must refer to a location within the string. Parameter name: length at Source: Invoke Workflow File: Make Decision: Throw
... View more
03-05-2021
04:06 PM
Hello @richgalloway , I am asking your help again to get counts for below messages. I tried the same instruction but unable to get counts. From below messages get counts depends and message value. Your help would be highly appreciated. Consider message which ends with To Report. and get counts. message contains "Parker could not be processed" - Failure count message contains "Parker successfully issued" - Success Count if message has Any other message : Partial Success get total count Total Count. PK11036791 : Parker successfully issued the 06/05/2021 renewal.,.To Report. PK11036918 : Parker successfully issued the 06/05/2021 renewal.,.To Report. PK11037082 : Parker successfully issued the 06/05/2021 renewal.,.To Report. PK01041601 : New activity on DRA for Michael Demiranda.,Please review new MVR information.,New PPA changes present.,Multiple Property policies present, please work HO.,.To Report. PK11032274 : Please review new MVR information.,.To Report. PK11036998 : Parker successfully issued the 06/05/2021 renewal.,.To Report. PK11041586 : New HO changes present.,Please review new MVR information.,New PPA changes present.,.To Report. PK11004163 : New HO changes present.,New PPA changes present.,.To Report. PK11014724 : New PPA changes present.,.To Report. PK11041665 : New HO changes present.,Please review new MVR information.,New PPA changes present.,.To Report. Parker could not be processed, please work PK Renewal. To Report. Parker could not be processed, please work PK Renewal. To Report.
... View more
03-01-2021
12:25 PM
Thanks you, its works prefect. I am having challenges using makeresults with Search. Below search returns all the events for the job from last 2 days. Now I need to count on the message field. index=main host=AIN001 robotJobName=Arya earliest=-2d@d latest=+2d@d receiving the below exception when I use the makeresults on the query. Error in 'makeresults' command: This command must be the first command of a search. Sorry I am beginner and still learning , your help would be much appreciated.
... View more
03-01-2021
09:44 AM
Thanks for the solution, I ran the Query in splunk, its returning no results.
... View more
02-28-2021
09:56 PM
Hello, We are logging various info during job level. Message filed carries all the info. I would like to get count of each message occurrence using multiple where clause. Message The job is successful for the user A System exception: failed job B System exception: failed job A Policy issued for the user A Policy issued for the user B Doc cleared for user D The job is successful for the user B Doc cleared for user A Doc cleared for user B Doc cleared for user C I need counts of each occurrence and total count. Policy Issued Count : 2 System exception Count : 2 Doc Clear Count : 4 Successful Count : 2 Total Count: 10 Any help would be much appreciated. Thanks.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-08-2021
07:16 PM
|
