Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About MayankChandra
MayankChandra
Engager
Member since:
08-23-2021
09-15-2021
Community Statistics
| Posts | 15 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 08-23-2021 |
Activity Feed
- Posted Re: How to create a 30 day search for specific time range (21:00 - 06:00) where the time carries over into the next day on Other Usage. 09-15-2021 11:03 AM
- Posted Re: Search a particular time of day across multiple days on Splunk Search. 09-15-2021 10:42 AM
- Posted timewrap charts having timescale as the current week + 1/2/3 weeks before on Splunk Search. 08-30-2021 09:23 AM
- Posted Re: timewrap output on Splunk Search. 08-30-2021 08:26 AM
- Posted Re: timewrap output on Splunk Search. 08-29-2021 07:05 PM
- Posted Re: timewrap output on Splunk Search. 08-29-2021 06:46 PM
- Posted timewrap output on Splunk Search. 08-29-2021 06:45 PM
- Posted Re: want the current day of the week with now() then i want to use value to compare data for past 4 weeks for same DOW on Splunk Search. 08-23-2021 04:29 PM
- Posted Re: want the current day of the week with now() then i want to use value to compare data for past 4 weeks for same DOW on Splunk Search. 08-23-2021 03:46 PM
- Posted Re: want the current day of the week with now() then i want to use value to compare data for past 4 weeks for same DOW on Splunk Search. 08-23-2021 03:43 PM
- Posted Re: How do we specify same day last week on Getting Data In. 08-23-2021 03:25 PM
- Posted Re: want the current day of the week with now() then i want to use value to compare data for past 4 weeks for same DOW on Splunk Search. 08-23-2021 03:12 PM
- Posted Re: want the current day of the week with now() then i want to use value to compare data for past 4 weeks for same DOW on Splunk Search. 08-23-2021 02:37 PM
- Posted want the current day of the week with now() then i want to use value to compare data for past 4 weeks for same DOW on Splunk Search. 08-23-2021 02:36 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
09-15-2021
11:03 AM
@aweitzman i want to achieve the same thing in current splunk . the query above is not yielding any results.
... View more
09-15-2021
10:42 AM
Hi All, I need daily counts of events between 9PM (lets say yesterday) to 5 AM (today), this pattern i need for last 30 days. Could you please let me know what should be my search. I am trying this but it returns nothing: eventtype=eks_prd_logs sourcetype="kube:container:*crs-maint" earliest=-31@d latest=-1@d (date_hour > 21 AND date_hour < 5) Can someone help asap.
... View more
08-30-2021
09:23 AM
I am using timewrap function to compare data for a particular day of the week with same day of the week for last 4 weeks. i.e comparing current wednesday to last 4 wednesdays. when i see the graph it gives current week's wednesday as timescale on x axis, also when i hover the charts for previous wednesdays it mentions current wednesday (date) + 2 week's before or 1 week before or 3 weeks before. Is this splunk's limitation or is there a way that previous wednesday's data should show exact date of those previous 4 wednesdays.
... View more
Labels
- Labels:
-
chart
08-29-2021
07:05 PM
@ITWhisperer Could you please help here? or Anyone who knows the answer.
... View more
08-29-2021
06:45 PM
I am using timewrap to compare data for a particular day of the week with same day of the week for last 4 weeks. i.e comparing wednesday to last 4 wednesday's. when i see the graph it gives current week's wednesday as timescale on x axis, also when i hover the charts for previous wednesday it still mentions current wednesday + 2 week's before. Is this splunk's limitation or is there a way that previous wednesday's data should show exact date of those previous 4 wednesdays.
... View more
08-23-2021
04:29 PM
@ITWhisperer For yesterday or a day before the current day would the below be correct? | eval yesterday = strftime(relative_time(now(), "-1d@d"), "%w")| eval eventdow=strftime(_time,"%w")| where yesterday=eventdow
... View more
08-23-2021
03:46 PM
@ITWhisperer One more question. If i want to evaluate yesterday and then perform the comparisons with same day of week (which yesterday evaluates to) with previous weeks what would be the query?
... View more
08-23-2021
03:43 PM
@ITWhisperer Thanks a ton!!
... View more
08-23-2021
03:25 PM
@kristian_kolb Suppose we want splunk to evaluate yesterday's day on its own and we dont mention specific day of the week like "Wednesday" and then use yesterday's day of week to compare data with same day of week for last 2 weeks, how we can achieve that?
... View more
08-23-2021
03:12 PM
sample queries for Compare a day of the week to the same day of the previous weeks
... View more
08-23-2021
02:37 PM
Can someone provide some examples?
... View more
08-23-2021
02:36 PM
Need help : I have a splunk query where i want to evaluate today (day of week) using now() and then use it to compare data for past 4 weeks for same day of week. if today is MOnday, i want to compare data for past 4 mondays with today.
... View more
Labels
- Labels:
-
eval
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-15-2021
05:20 PM
|
