Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Vin
Vin
Engager
Member since:
01-28-2022
a week ago
Community Statistics
| Posts | 10 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 01-28-2022 |
Activity Feed
- Posted Splunk Query to extract id's from a event and display the ID's on Splunk Search. a week ago
- Posted The TCP output processor has paused the data flow on Monitoring Splunk. 3 weeks ago
- Posted Re: Create a Splunk alert when a file size is below 10 bytes from a log file. on Alerting. 03-30-2022 07:45 AM
- Posted Re: Create a Splunk alert when a file size is below 10 bytes from a log file. on Alerting. 03-29-2022 06:04 PM
- Posted Re: Create a Splunk alert when a file size is below 10 bytes from a log file. on Alerting. 03-29-2022 05:46 PM
- Posted Re: Create a Splunk alert when a file size is below 10 bytes from a log file. on Alerting. 03-29-2022 05:35 PM
- Posted Re: Create a Splunk alert when a file size is below 10 bytes from a log file. on Alerting. 03-29-2022 05:08 PM
- Karma Re: I'm new to splunk queries and how to create an alert using Linux commands on Splunk? for richgalloway. 03-29-2022 02:45 PM
- Posted How to create a Splunk alert when a file size is below 10 bytes from a log file? on Alerting. 03-29-2022 02:44 PM
- Posted I'm new to splunk queries and how to create an alert using Linux commands on Splunk? on Splunk Search. 01-28-2022 11:29 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
a week ago
Below is the search and I need to extract the ID's shown in the below event and there are also many other ID's. Please help me in writing a query to extract the ID's which starts with "Duplicate Id's that needs to be displayed ::::::[6523409, 6529865]" in the log file. index="*" source ="*" "Duplicate Id's that needs to be displayed ::::::[6523409, 6529865]
... View more
Labels
- Labels:
-
eval
-
field extraction
-
regex
-
rex
3 weeks ago
We recently installed Splunk Universal forwarder 9.3.2 on Windows 2019 server. After starting the forwarder I see below error in the splunkd.log. Tried uninstalling and installing the UF but still the same error. Please let me know how to fix it. Error : 02-25-2025 14:52:06.747 -0600 WARN TcpOutputProc [12132 parsing] - The TCP output processor has paused the data flow. Forwarding to host_dest=(ip of indexer) inside output group splunkcloud_ from host_src=(ip folder source) has been blocked for blocked_seconds=5600. This can stall the data flow towards indexing and other network outputs. Review the receiving system's health in the Splunk Monitoring Console. It is probably not accepting data.
... View more
Labels
- Labels:
-
forwarder
03-30-2022
07:45 AM
@venkatasri Hope you got my requirement? Any suggestions on how to write the query? Please advise.
... View more
03-29-2022
06:04 PM
I think I conveyed the scenario wrongly. So on the Linux server we have the log location opt/apps/file.log. From the file.log we need to look for name which have .imp extension and which are below 10 bytes. Hope I didn’t confuse you this time.
... View more
03-29-2022
05:46 PM
It's the regular java server output log. Sorry I cannot post them. In file.log, we need to look for Name: CONFIRM.LLPC2345.imp Path: /opt/apps/log.root/file.log/ If the .imp file is less than 10 bytes then we need to get an alert.
... View more
03-29-2022
05:35 PM
This is the query I tried and got zero results. From the file.log, I need to search for .imp files which are below 10 bytes and give us the output. index="servers" source="/opt/apps/log.root/file.log" | stats sum(kb) as total_kbytes | where (total_kbytes*1000) < 10
... View more
03-29-2022
05:08 PM
Thanks Venkatasri..But I need to pull the size using file name *.imp extension from the logs. How to add the file name .imp in the query and get the output?
... View more
03-29-2022
02:44 PM
I'm trying to write a Splunk query to find out a file size below 10 bytes from a log file. I have the index and log location but unable to find the exact query. Please help me out in a writing a query and creating an alert out of it.
... View more
- Tags:
- splunk-alert
Labels
- Labels:
-
alert condition
01-28-2022
11:29 AM
I need to write a Splunk alert to check number of connections on a server. Using below Linux command I can get the results on the server. But help me out in creating an alert on Splunk with the command. ps -ef | grep '[s]shd' | grep -v ^root | grep -i file* | wc -l
... View more
Labels
- Labels:
-
stats
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
a week ago
|
