Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About VinodP_410
VinodP_410
Loves-to-Learn Lots
Member since:
05-02-2021
05-04-2021
Community Statistics
| Posts | 7 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 05-02-2021 |
Activity Feed
- Posted Re: <StartTime>****</StartTime> filed is missing for few transaction IDs in Splunk result on All Apps and Add-ons. 05-03-2021 09:07 PM
- Posted Re: <StartTime>****</StartTime> filed is missing for few transaction IDs in Splunk result on All Apps and Add-ons. 05-03-2021 02:44 AM
- Posted Re: <StartTime>****</StartTime> filed is missing for few transaction IDs in Splunk result on All Apps and Add-ons. 05-03-2021 02:29 AM
- Posted Re: <StartTime>****</StartTime> filed is missing for few transaction IDs in Splunk result on All Apps and Add-ons. 05-03-2021 02:23 AM
- Posted Re: <StartTime>****</StartTime> filed is missing for few transaction IDs in Splunk result on All Apps and Add-ons. 05-03-2021 12:52 AM
- Posted Re: <StartTime>****</StartTime> filed is missing for few transaction IDs in Splunk result on All Apps and Add-ons. 05-03-2021 12:33 AM
- Posted <StartTime>****</StartTime> filed is missing for few transaction IDs in Splunk result on All Apps and Add-ons. 05-02-2021 11:47 PM
- Tagged <StartTime>****</StartTime> filed is missing for few transaction IDs in Splunk result on All Apps and Add-ons. 05-02-2021 11:47 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 |
05-03-2021
09:07 PM
Team, Any help on below issue please?
... View more
05-03-2021
02:44 AM
Yes, I have shared the output of below query index="eai_prod" sourcetype="eai:tibco:webservices6.5" source="*appnodes/ShipmentOrderCreate*" ":ProcessExecutionStats>" | rex field=_raw "<CorrelationId>(?P<CorrelationId>.*?)<" | rex field=_raw "<CustomerNumber>(?P<CustomerNumber>.*?)<" | rex field=_raw "<TransactionStatus>(?P<TransactionStatus>.*?)<" | rex field=_raw "<JobId>(?P<JobId>.*?)<" | rex field=_raw "<CountryCode>(?P<CountryCode>.*?)<" | rex field=_raw "<StartTime>(?P<StartTime>.*?)<" | rex field=_raw "<EndTime>(?P<EndTime>.*?)<" | rex field=_raw "<ExecutionTimeInMs>(?P<ExecutionTimeInMs>.*?)<" | rename CorrelationId AS TransactionID CustomerNumber AS CustomerNumber TransactionStatus AS Status JobId AS JobId CountryCode AS CountryCode StartTime AS StartTime EndTime AS EndTime ExecutionTimeInMs AS ExecutionTime(ms) | search TransactionID=PDC7_689081105_2181_ORD
... View more
05-03-2021
02:29 AM
Hi @ITWhisperer Path : //splunkforwarder/etc/system/local cat props.conf [eai:tibco:webservices6.5] MAX_TIMESTAMP_LOOKAHEAD=25 NO_BINARY_CHECK=1 TIME_FORMAT=%Y-%m-%d %H:%M:%S.%3N TIME_PREFIX=^ TRUNCATE = 50000 Nothing has configured in "transforms.conf"
... View more
05-03-2021
02:23 AM
Yes , I do have access to check configuration files on server, May I know which configurations I need to check. Thanks!!
... View more
05-03-2021
12:52 AM
Hi @ITWhisperer , We are logging from TIBCO BW server to splunk, below is the BW server log, you can see StartTime filed. Whereas StartTime filed is not appear in Splunk UI. 2021-05-02 17:32:03.415 INFO [bwEngThread:In-Memory Process Worker-2] com.tibco.bw.palette.generalactivities.Log.SplunkEAILoggingLibrary.WriteExecutionStatsToLog - ProcessExecutionStats-Shi pmentOrderCreate_v1_0: <?xml version="1.0" encoding="UTF-8"?> <ansbw6:ProcessExecutionStats xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:ansbw6="/Processes/Common/ExecutionStatsFramework_v1_0.process/RenderExecutionStats" xmlns:tib="http://www.ti bco.com/bw/xslt/custom-functions"> <ServiceName>ShipmentOrderCreate_v1_0</ServiceName> <StartTime>2021-05-02T17:32:00.214-07:00</StartTime> <EndTime>2021-05-02T17:32:03.415-07:00</EndTime> <ExecutionTimeInMs>3201</ExecutionTimeInMs> <CorrelationId>PDC7_689081105_2181_ORD</CorrelationId> <JobId>bw0a10d19</JobId> <TransactionStatus>SUCCESS</TransactionStatus> <CountryCode>USA</CountryCode> <CustomerNumber>562545</CustomerNumber> <FailureType>NOTAPPLICABLE</FailureType> </ansbw6:ProcessExecutionStats>
... View more
05-03-2021
12:33 AM
Hi @ITWhisperer , here is the sample output events for one TransactionID. <EndTime>2021-05-02T17:32:03.415-07:00</EndTime> <ExecutionTimeInMs>3201</ExecutionTimeInMs> <CorrelationId>PDC7_689081105_2181_ORD</CorrelationId> <JobId>bw0a10d19</JobId> <TransactionStatus>SUCCESS</TransactionStatus> <CountryCode>USA</CountryCode> <CustomerNumber>562545</CustomerNumber> <FailureType>NOTAPPLICABLE</FailureType> </ansbw6:ProcessExecutionStats> TransactionID = PDC7_689081105_2181_ORD Thanks!
... View more
05-02-2021
11:47 PM
Hi Team, I am running below query in Splunk and not showing <StartTime> line for few "TransactionID". Expected output: ============ <StartTime>2021-05-01T16:24:00.9-07:00</StartTime> <EndTime>2021-05-01T16:24:03.129-07:00</EndTime> <ExecutionTimeInMs>2229</ExecutionTimeInMs> Result : ===== <EndTime>2021-05-01T16:24:03.129-07:00</EndTime> <ExecutionTimeInMs>2229</ExecutionTimeInMs> Query: ====== index="eai_prod" sourcetype="eai:tibco:webservices6.5" source="*appnodes/ShipmentOrderCreate*" ":ProcessExecutionStats>" | rex field=_raw "<CorrelationId>(?P<CorrelationId>.*?)<"| rex field=_raw "<CustomerNumber>(?P<CustomerNumber>.*?)<" | rex field=_raw "<TransactionStatus>(?P<TransactionStatus>.*?)<" | rex field=_raw "<JobId>(?P<JobId>.*?)<" | rex field=_raw "<CountryCode>(?P<CountryCode>.*?)<" | rex field=_raw "<StartTime>(?P<StartTime>.*?)<"| rex field=_raw "<EndTime>(?P<EndTime>.*?)<"| rex field=_raw "<ExecutionTimeInMs>(?P<ExecutionTimeInMs>.*?)<" | rename CorrelationId AS TransactionID CustomerNumber AS CustomerNumber TransactionStatus AS Status JobId AS JobId CountryCode AS CountryCode StartTime AS StartTime EndTime AS EndTime ExecutionTimeInMs AS ExecutionTime(ms) | table TransactionID CustomerNumber Status JobId CountryCode StartTime EndTime ExecutionTime(ms) | Sort -EndTime
... View more
- Tags:
- dashboard
Labels
- Labels:
-
search
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-04-2021
09:48 AM
|
