Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About delly_fofie
delly_fofie
Engager
Member since:
04-16-2022
11-01-2023
Community Statistics
| Posts | 5 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 04-16-2022 |
Activity Feed
- Posted Re: Clean Duplicates from Index on Getting Data In. 11-01-2023 06:29 AM
- Posted How to clean Duplicates from Index? on Getting Data In. 07-15-2022 12:28 AM
- Posted Handle Data Updates with SPLUNK DB Connect on Splunk Enterprise. 05-04-2022 10:45 AM
- Tagged Handle Data Updates with SPLUNK DB Connect on Splunk Enterprise. 05-04-2022 10:45 AM
- Posted Re: Multiple Time filters on a Dashboard on Splunk Search. 04-16-2022 01:39 PM
- Posted What is the best way to use multiple time filters on a dashboard? on Splunk Search. 04-16-2022 05:48 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
11-01-2023
06:29 AM
Hello @gcusello Lets assume I would go with your idea. But still if on the day 1 I manage to only get unique in the indexing, the next day I will have new entries and already existing entries in Splunk and will still create duplicate data in Splunk.
... View more
07-15-2022
12:28 AM
Hello,
We have a use case.
Using the Splunk DB Connect, we ingest data from the various systems especially from the ERP.
Every change on an article in the ERP is pushed into a temp DB which is monitored by the SPLUNK DB connect.
There a millions of data movements each day.
But in the end of the day, we just need to work with the latest unique data that are in the system for each article. Each event has some 10-30 fields.
What is the best way to getting rid of all the duplicates that are comming into the system ? Delete ? How ? skip ? Lookup ? Summary DB ? How ?
What are the ideas that you might have or maybe some ideas i'm missing ?
... View more
- Tags:
- duplicate
Labels
- Labels:
-
index
05-04-2022
10:45 AM
Hello Dear Community. For our Enterprise Splunk>, we were thinking about using the SPLUNK DB Connect to ingest structured Data (Comming from the ERP) in SPLUNK. What do you use as a strategy to handle: Data Updates Data Deletion Does the SPLUNK DB connect offers something like this out of the box, or should we think about another setup for that ?
... View more
- Tags:
- splunkdbconnect
Labels
- Labels:
-
using Splunk Enterprise
04-16-2022
01:39 PM
Hello @tscroggins Thanks for the answer. This seems to only work when a user selects a very clear date-range, As soon as the user selects some relatives the it doesn't seem to work anymore. E.g if the user selects All Time then the values are earliest=0 & latest= (Latest is not filled at all) Splunk version is the 8.2
... View more
04-16-2022
05:48 AM
Hello,
I have a dashboard with two different time filters.
The first time filter is used to filter the _time filter
The second time filter should be used to filter the results on a different field X.
I see in the dashboard URL form2.date2.earliest=<VALUE> & form2.date2.latest=<OPTIONAL_VALUE>
I would like in a where clause or something similar to filter my results based on that date2 input.
What is the best way to do it in Splunk>
I Hope without Code snippet the question is clear and understandable.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-01-2023
10:38 AM
|
