Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About jokovitch
jokovitch
Explorer
Member since:
08-05-2021
08-22-2021
Community Statistics
| Posts | 17 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 08-05-2021 |
Activity Feed
- Posted Re: Edit data In Splunk on Splunk Search. 08-22-2021 05:29 AM
- Posted Re: Edit data In Splunk on Splunk Search. 08-15-2021 12:37 AM
- Posted Re: Edit data In Splunk on Splunk Search. 08-12-2021 06:31 AM
- Posted Edit data In Splunk on Splunk Search. 08-12-2021 06:08 AM
- Posted Re: Find all fileds by file list on Splunk Search. 08-10-2021 09:03 AM
- Posted Re: Find all fileds by file list on Splunk Search. 08-10-2021 08:34 AM
- Posted Re: Find all fileds by file list on Splunk Search. 08-10-2021 04:12 AM
- Posted Upload json file to Index on Splunk Search. 08-09-2021 04:12 AM
- Posted Re: Find all fileds by file list on Splunk Search. 08-09-2021 01:01 AM
- Posted Re: Find all fileds by file list on Splunk Search. 08-08-2021 10:22 PM
- Posted Re: Find all fileds by file list on Splunk Search. 08-08-2021 09:46 PM
- Posted Re: Prevent " in Drilldown Onclick on Splunk Search. 08-08-2021 09:23 PM
- Posted Prevent " in Drilldown Onclick on Splunk Search. 08-08-2021 05:22 AM
- Posted Re: Find all fileds by file list on Splunk Search. 08-05-2021 05:53 AM
- Posted Re: Find all fileds by file list on Splunk Search. 08-05-2021 05:42 AM
- Posted Find all fileds by file list on Splunk Search. 08-05-2021 05:23 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
08-15-2021
12:37 AM
You need to change index="main" | eval Phone= case(like(Fname, "%fname1%", "123") to index="main" | eval Phone= case(like(Fname, "%fname1%"), "123") That still not change the data Do I need to put this query in another place then New Search screen ? Or maybe is there place that I need to mark to commit this data?
... View more
08-12-2021
06:31 AM
index="main" |eval Phone= case(Fname="fname1", "123") I have tried this command , but nothing changed
... View more
08-12-2021
06:08 AM
I have a data in Splunk like index="main" Fname Country fname1 USA fname1 USA fname3 USA I want to add and change some data where Fname="fname1" I want to edit that Country = UK and add field of Phone =123 The final data will be Fname Phone Country fname1 123 UK fname1 123 UK fname3 USA How can I do that?
... View more
Labels
- Labels:
-
search job inspector
08-10-2021
08:34 AM
I tried your query but I got no results... When I run index= main Fname="fname1" I got good result
... View more
08-10-2021
04:12 AM
((Name="name1") OR (Name="name2") ) ........ I want to search in my index where Name in CSV equal to Fname or Lname in my index
... View more
08-09-2021
04:12 AM
I have JSON file around 6 GB Can I upload this file to specific Index instead of send it with POST object by object?
... View more
Labels
- Labels:
-
join
08-09-2021
01:01 AM
The csv file is in /opt/splunk/bin/etc/system/lookups Then I run | inputlookup MyFile.csv | fields Name I got all the name in csv Then I tried index=main [| inputlookup MyFile.csv | fields Name | format | fields search] it's take few seconds and them I got "no results" Where in that query should my choose to field for compare into my index?
... View more
08-08-2021
10:22 PM
Name Address Country Jhone ADDR1 USA Bill ADDR2 USA Tramp ADDR13 USA For example : index="main" Name="Bill" Name Address Country Bill ADDR2 USA MyFile.csv: Name name1 name2 Tramp The result need to be Name Address Country Tramp ADDR13 USA
... View more
08-08-2021
09:46 PM
my csv looks like: Name name1 name2 name3 I use this query index=MyIndex [| inputlookup MyFile.csv | format] I see that Splunk is think (If I write a filename that not exist that return immediately) . How do I need to fix that query ? index=MyIndex [| inputlookup MyFile.csv | IP] I didn't success
... View more
08-08-2021
09:23 PM
That didn't help. Because it's add " in the beginning and in the end of Test . so now it's open the search Windows with this query index="main"|where Test=""Dog"" So i got an error : Error in where command: the operator at Dog"" is invalid
... View more
08-08-2021
05:22 AM
I have Drilldown that show me some Test and this is Onclick: index=main |where Test="$click.value$" The problem is when $click.value$ contains Double quote (") And then I got an error in Search screen "Unbalanced quotes" How to fix it ?
... View more
Labels
- Labels:
-
search job inspector
08-05-2021
05:53 AM
index=MyIndex work index=MyIndex [| inputlookup MyFile.csv | format] return my no results (blank) And after I will load it how can I show only lines that contains Name into MyFile.csv? thanks!
... View more
08-05-2021
05:42 AM
I want to show the results of this compare in Splunk, not export it to file. Note the I want to import data from file and compare it to data in Splunk
... View more
08-05-2021
05:23 AM
I have a data in Splunk like Fname Lname Country fname1 lname1 USA fname2 lname2 USA fname3 lname3 USA And I have file in Splunk server that contains in each line a name: MyFile.csv: Name fname1 lname3 fname123 I want to present only the lines that in the Name into CSV if equal to Fname or Lname in my index In my example the result need to be Fname Lname Country fname1 lname1 USA fname3 lname3 USA How can I do that?
... View more
Labels
- Labels:
-
search job inspector
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-22-2021
04:11 PM
|
