×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
viksvig
Loves-to-Learn Lots
Member since: ‎11-11-2021
‎06-12-2025
Community Statistics
Posts 10
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎11-11-2021
Activity Feed
View All

Re: Email from Splunk

by in Splunk Search
‎12-01-2021 10:57 AM
‎12-01-2021 10:57 AM
  ... View more

Re: Email from Splunk

by in Splunk Search
‎12-01-2021 10:56 AM
‎12-01-2021 10:56 AM
This is the search and I am getting the desired result here. But when Email is sent the Message field blanks out   ... View more

Re: Splunk Regex help

by in Splunk Search
‎11-29-2021 11:31 AM
‎11-29-2021 11:31 AM
@richgalloway @manishchoudhary @bhargavi  any idea why  I have splunk search - index=cloud EventName: "Error Occurred" XChangeToSalesForce | rename message as "Message" _time as Time | table Time,Message When i search on splunk search, i get the below response 1637759064  Multiple Terms found for the same agency. Agency code:  But when the email is sent, i get nothing on the message field . It is set as inline Time Message 1637759064   ... View more

Re: Email from Splunk

by in Splunk Search
‎11-29-2021 11:27 AM
‎11-29-2021 11:27 AM
@johnhuang  any idea why it is skipping the Messages ... View more

Re: Email from Splunk

by in Splunk Search
‎11-24-2021 01:39 PM
‎11-24-2021 01:39 PM
@johnhuang  it is formatted as inline table, i tried inline raw as well ... View more

Email from Splunk

by in Splunk Search
‎11-24-2021 12:45 PM
‎11-24-2021 12:45 PM
I have splunk search - index=cloud EventName: "Error Occurred" XChangeToSalesForce | rename message as "Message" _time as Time | table Time,Message When i search on splunk search, i get the below response 1637759064  Multiple Terms found for the same agency. Agency code:  But when the email is sent, i get nothing on the message field Time Message 1637759064     ... View more
Labels

Re: Splunk Regex help

by in Splunk Search
‎11-23-2021 08:40 AM
‎11-23-2021 08:40 AM
It works in the search , but when it sends it as email alert, it only has the dates and the message field is empty ... View more

Re: Splunk Regex help

by in Splunk Search
‎11-23-2021 08:39 AM
‎11-23-2021 08:39 AM
It works in the search , but when it sends it as email alert, it only has the dates and the messagews are empty ... View more

Re: Splunk Regex help

by in Splunk Search
‎11-12-2021 08:00 AM
‎11-12-2021 08:00 AM
@richgalloway  Getting an error for the 1st search | rex "(?<Message>Message: \\\"[^\\\\"]+\\\")" Error in 'SearchParser': Missing a search command before '^'. Error at position '81' of search query 'search index=cloud EventName: "Error Occurred" | ...{snipped} {errorcontext = Message>"[^\\\\"]+)"}'. Getting error for  | rex "Message: \\\"(?<Message>"[^\\\\"]+)" Mismatched ']'. ... View more

Splunk Regex help

by in Splunk Search
‎11-11-2021 01:05 PM
‎11-11-2021 01:05 PM
Hi, I have the search returning the event  Nov 10 23:45:3 8888888 Tra[9100]: { EventName: "Error Occurred", BatchId: 095cehcx-87ee-43f6-9663-c2fb833677a978, CorrelationId: 5fghja26b9-fe73-78cb-342b-5123f2ec167896, Payload: BusinessLogicException { Message: "Lead 0000000001VII6N00AX has an agency code that is not 7 digits.", Data: [], InnerException: null, TargetSite: Void Validate(uya.QueryModels.Lead), StackTrace: " at uyu.Models.Lead.Validate(Lead queriedLead)   How do i extract only the content on the Message Message: "Lead 0000000001VII6N00AX has an agency code that is not 7 digits.:" ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎06-12-2025 09:29 PM