Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About kimmyb
kimmyb
Loves-to-Learn
Member since:
09-23-2022
09-26-2022
Community Statistics
| Posts | 9 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 09-23-2022 |
Activity Feed
- Posted Re: if no events on Getting Data In. 09-25-2022 11:47 PM
- Posted Re: if no events on Getting Data In. 09-25-2022 11:43 PM
- Posted Re: if no events on Getting Data In. 09-25-2022 11:41 PM
- Posted if no events on Getting Data In. 09-25-2022 11:26 PM
- Posted Masternode vs peernode- If i want to create a peernode , is iT mandatory to have a masternode, or is masternode optional on Deployment Architecture. 09-24-2022 03:52 AM
- Posted Re: If i want to create a macro, do i use ' ' or dollar signs? on Splunk Search. 09-23-2022 09:42 PM
- Posted Re: difference between maxspan and timelimit on Splunk Search. 09-23-2022 09:40 PM
- Posted If i want to create a macro, do i use ' ' or dollar signs? on Splunk Search. 09-23-2022 07:25 AM
- Posted What is the difference between maxspan and timelimit? on Splunk Search. 09-23-2022 06:53 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-25-2022
11:47 PM
indeed 😞 all the theory seperate look ok but putting it in large picture without test env indeed is difficult
... View more
09-25-2022
11:43 PM
problem is , i cant install on my work pc, no admin rights so for me i can t put theory into practise 😞 So thats why im following all sorts of learnings on splunk in order to get to now more about it.
... View more
09-25-2022
11:26 PM
when i was learning splunk i encountered following question: analyze following SPL query * | outputlookup my dummy.cvs if no events were generated for the query, choose the appropriate option available answers : a.at least one event needs to be created to add results to mydummy b.my dummy .cvs will be created but the file will be empty c.outputlook cannot be used for queries which generate 0 results d. my dummy.cvs should be created before events can be added e. my dummy.cvs will be created im doubting between C or D , or am i totally wrong ?
... View more
09-24-2022
03:52 AM
If i want to create a peernode , is iT mandatory to have a masternode, or is masternode optional. I learned how to create both, but i dont get if one nerds THE other
... View more
09-23-2022
09:42 PM
Creatieve new query with a macro, So for macro we use dollar signs, correct?
... View more
09-23-2022
09:40 PM
And if you can only chose maxspan, timelimit , time , or nothing? In my exercise i could only take those? Where 3 are wrong
... View more
09-23-2022
07:25 AM
when i was studying about macro i sometimes see that we put our arguments between ' ' and sometimes between $ $ does anyone know which we have to use brackets or dollar signs
... View more
- Tags:
- macro
- splunk-search
09-23-2022
06:53 AM
the transaction is identified as jsessionid .the spl query to find all transactions which lasted less than 5 sec :
should i take :
*|transaction jsessionid maxspan=5
or
*|transaction jsessionid timelimit=5
im finding it hard to see the different between them
or
we dont add maxspan or timelimit since it is less than 5 sec
... View more
- Tags:
- splunk-search
Labels
- Labels:
-
transaction
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-26-2022
03:08 AM
|
