Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About sunket6006
sunket6006
Engager
Member since:
06-10-2021
06-15-2021
Community Statistics
| Posts | 13 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 06-10-2021 |
Activity Feed
- Posted Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 12:07 PM
- Posted Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 12:06 PM
- Posted Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 11:15 AM
- Tagged Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 11:15 AM
- Posted Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 10:53 AM
- Posted Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 10:03 AM
- Posted Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 09:50 AM
- Posted Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 09:31 AM
- Posted Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 08:46 AM
- Tagged Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 08:46 AM
- Posted Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 08:40 AM
- Posted Re: Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-15-2021 07:04 AM
- Posted Splunk Search Query which should match date format shown in logs. on Splunk Search. 06-14-2021 12:31 PM
- Posted Re: Splunk Query on Splunk Search. 06-10-2021 02:39 PM
- Posted Splunk Query on Splunk Search. 06-10-2021 02:37 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
06-15-2021
12:07 PM
You are not getting my question preoperly, can we talk on the phone?
... View more
06-15-2021
12:06 PM
You should not use the events which I have given, there are 100 of previous events like that
... View more
06-15-2021
11:15 AM
Below are the 2 events for example listed I apply search Query - index=securecode host IN (cjb4stl181) sourcetype=securecode:billing:txn_gft "Execution failure in Transferring Transaction Billing File ::" But I only want todays event that should match date "210614", I have tried your queries none of them working fine. Please help.
... View more
- Tags:
- @Splunk Query
06-15-2021
10:53 AM
not working , is it possible for you to see the logs I can show you.
... View more
06-15-2021
10:03 AM
what is _raw here?
... View more
06-15-2021
09:50 AM
I get no results.
... View more
06-15-2021
09:31 AM
I am sorry, not working as expected.
... View more
06-15-2021
08:46 AM
That one is also not working. I am able to match the sentence upto Execution failure in Transferring Transaction Billing File :: There are previous 10 events with the same statement but got different dates as below. But I want only want one event with the search matching yesterdays event which is 210614. Execution failure in Transferring Transaction Billing File :: 210614 Execution failure in Transferring Transaction Billing File :: 210613 Execution failure in Transferring Transaction Billing File :: 210611 Execution failure in Transferring Transaction Billing File :: 210610
... View more
- Tags:
- SPLUNK query
06-15-2021
08:40 AM
That one is also not working. I am able to match the sentence upto Execution failure in Transferring Transaction Billing File :: There are previous 10 events with the same statement but got different dates as below. But I want only want one event with the search matching yesterdays event.
... View more
06-15-2021
07:04 AM
Hi @venkatasri I want to filter the below line 21/06/14 12:00:49 [ERROR] - Execution failure in Transferring Transaction Billing File :: 210613 Search query should match only the above statement and filter it. There is only one event occurring everyday with the date of previous day. The query you suggested also showing few other events that I don't want. I am also trying the below query index=securecode host IN (cjb4stl181) sourcetype=securecode:billing:txn_gft "*Execution failure in Transferring Transaction Billing File :: " .strftime(relative_time(now(), "-1d@d"), "%y%m%d") . "*" which matches to - Execution failure in Transferring Transaction Billing File :: 210613 but that expression is not evaluating. Do you know why
... View more
06-14-2021
12:31 PM
From file =/apps_data_01/scds2/billing/processed/ICD_TXN2_210613.csv To node =snode=MCCDPVPN To user = To file =DTF.AR.R8D1.C.E0084977.D210614.T120015.C003 To permiss = To disp =rpl Xfer type =text Xfer late = DCB =RECFM=VB,LRECL=27994,BLKSIZE=27998 SPACE = sysopts =:datatype=text:strip.blanks=no: disp =disp=(rpl) dcbline =DCB=(RECFM=VB,LRECL=27994,BLKSIZE=27998) UC7 posting info =run task snode (pgm=U7SVC) sysopts="CL46'D=DTF.AR.R8D1.C.E0084977.D210614.T120015.C003'" volume ser info =/* mainframe volume info not needed */ unit info =UNIT=PROD status file =/sys_apps_01/cdunix/ndm/work/cjb4stl181/ process name =cd11547 return code =4 date/time =Mon Jun 14 12:00:49 CDT 2021 ===================================================================================== 21/06/14 12:00:49 [ERROR] - Execution failure in Transferring Transaction Billing File :: 210613 Collapse host = cjb4stl181 source = /apps_data_01/scds2/billing/processed/txn_billing_gft.log sourcetype = securecode:billing:txn_gft Above are the logs shown in splunk. Splunk query used for it is below. I need a query which should match the date -210613. Please help me. index=securecode host IN (cjb4stl181) sourcetype=securecode:billing:txn_gft "Execution failure in Transferring Transaction Billing File ::"
... View more
06-10-2021
02:39 PM
Actually I was trying to use this query, but it sis not working as expected. index=securecode host IN (cjb4stl181) sourcetype=securecode:billing:txn_gft "*Execution failure in Transferring Transaction Billing File :: " .strftime(relative_time(now(), "-1d@d"), "%y%m%d") . "*"
... View more
06-10-2021
02:37 PM
Hello, I am looking for a Splunk query that could match date as below. "*Execution failure in Transferring Transaction Billing File :: 210609*" This is the logs I get for a file transfer with yesterdays date, how can search that could replace the static date to dynamic. I want a query that could search for above texts and equivalent yesterdays everyday.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-15-2021
07:02 PM
|
