Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Miky
Miky
Explorer
Member since:
08-02-2022
08-17-2022
Community Statistics
| Posts | 13 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 08-02-2022 |
Activity Feed
- Posted Re: How to update the blackout for three hosts(mep1,mep2,mep3) among the 30 hosts I have? on Splunk Cloud Platform. 08-17-2022 01:54 PM
- Posted How to update the blackout for three hosts(mep1,mep2,mep3) among the 30 hosts I have? on Splunk Cloud Platform. 08-17-2022 11:54 AM
- Karma Re: How to set up an Alert trigger to block traffic for IP addresses? for richgalloway. 08-16-2022 11:33 AM
- Posted Re: How to set up an Alert trigger to block traffic for IP addresses? on Alerting. 08-15-2022 10:48 AM
- Posted How to set up an alert trigger to block traffic for IP addresses? on Alerting. 08-15-2022 08:51 AM
- Posted Re: Could someone help with building this alert? on Alerting. 08-12-2022 11:19 AM
- Posted Re: Could someone help with building this alert? on Alerting. 08-12-2022 10:40 AM
- Posted Re: Could someone help with building this alert? on Alerting. 08-12-2022 06:19 AM
- Posted Could someone help with building this alert? on Alerting. 08-11-2022 06:48 AM
- Posted Re: How to add additional columns? on Deployment Architecture. 08-03-2022 12:28 PM
- Posted Re: How to add additional columns? on Deployment Architecture. 08-03-2022 07:43 AM
- Posted Re: How to add additional columns? on Deployment Architecture. 08-03-2022 07:17 AM
- Posted How to add additional columns? on Deployment Architecture. 08-02-2022 01:02 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
08-17-2022
01:54 PM
Thanks rich as always, How would the SPL looks like to do the changes. I'm stuck implementing that SPL language. Thanks!
... View more
08-17-2022
11:54 AM
Hi Guys,
I have a host_blackout.csv, and I want to update the blackout for three hosts(mep1,mep2,mep3) among the 30 hosts I have:
1) the new end_time should be updated to end of next week("08/28/202 11:00").
My output looks like this:
end_time
host
notes
start_time
08/18/2022 09:00
mep1
INC000006
08/14/2022 23:00
08/11/2022 09:00
mep2
INC000002
08/11/2022 20:15
08/12/2022 10:00
mep3
INC000003
08/10/2022 12:00
08/10/2022 09:00
mep4
INC000004
08/06/2022 23:00
08/05/2022 09:00
mep5
INC0000012
10/27/2018 00:00
08/05/2022 09:00
mep6
INC00000123
08/03/2022 23:00
08/05/2022 09:00
mep7
INC000002537
10/27/2018 00:00
08/05/2022 09:00
mep8
INC0000011
11/20/2018 00:00
08/05/2022 09:00
mep9
Can you help please?
... View more
Labels
- Labels:
-
other
08-15-2022
10:48 AM
The result I'm getting is 0 what I want to do is just to set up the range of IP addresses to be blocked whenever one of them used. Thanks
... View more
08-15-2022
08:51 AM
Hi Splunkers,
I'm trying to set an alert condition to block traffic for IP addresses from 13.108.0.0 to13.111.255.255 and from 66.231.70.0 to 66.231.85.255, but I'm really stuck is there anybody can help please?
My query below:
| tstats count values(All_Traffic.app) AS app values(All_Traffic.dvc) AS devicename values(All_Traffic.src_zone) AS src_zone values(All_Traffic.dest_zone) AS dest_zone from datamodel=Network_Traffic where All_Traffic.action=blocked All_Traffic.src_ip IN (*) All_Traffic.dest IN (13.108.0.0 13.111.255.255 OR 66.231.80.0 66.231.95.255) All_Traffic.dest_port IN (*) by _time,All_Traffic.action,All_Traffic.src_ip, All_Traffic.dest ,All_Traffic.dest_port ,All_Traffic.transport,All_Traffic.rule,sourcetype | rename All_Traffic.* AS * | sort - _time limit=0 | fields - count | rename rule as policy,src_ip AS src | eval action=case(action="teardown","drop",1=1,action)
... View more
Labels
- Labels:
-
alert action
08-12-2022
11:19 AM
Index="a" source="b" AND "Instantiation of bean failed;" AND "nested exception is framework" | stats values(host) | table _time, host, source
... View more
08-12-2022
10:40 AM
Thanks again Taruchit, So I tried using Table command to display time, host and source, but I'm not getting any result. Any hint how to do it, please.
... View more
08-12-2022
06:19 AM
Hi Taruchit, Thanks for help! Will this alert trigger if any of the event occur? How can I trigger this in a table format in email with _time host source errormessage. Thanks,
... View more
08-11-2022
06:48 AM
Hi All,
Can somebody help me start building this alert:
Alert on PW Startup Critical Failure
Alert should trigger if any events with the following error message are seen. The impacted hosts should be listed in the alert email.
Base Search: index=app_v source=*System.log "Instantiation of bean failed; nested exception is org.springwork.beans.BeanInstantiationException: Could not instantiate bean class [iv.ws.report.pw.ipg.cache.SchedulerJob]: Constructor threw exception"
The PW application has not started up successfully following a code deployment or server start.
... View more
Labels
- Labels:
-
alert action
08-03-2022
12:28 PM
gcusello it works, the problem is that I'm getting only priority1 not priority2 and priority3. Just to be specific, under priority field I have 1,2,and3, but I'm getting only priority1.
... View more
08-03-2022
07:43 AM
It gives Error in lookup command: can not find the source field 'job' in the lookup table 'pw_job_map.csv.
... View more
08-02-2022
01:02 PM
Hi folks,
Just started using splunk lately and I'm stuck with this alert that I want to create, I've been told to add priority ( P1,P2,P3 column) and job alias from pw_job_mopping lookup be added to this alert that already exist as additional columns.
Any help will be appreciated 🙏.
... View more
Labels
- Labels:
-
other
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-17-2022
02:25 PM
|
