Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About padrsri
padrsri
Explorer
Member since:
11-02-2022
03-09-2023
Community Statistics
| Posts | 8 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 11-02-2022 |
Activity Feed
- Posted Re: separate semicolon and create table on Splunk Enterprise. 03-09-2023 01:33 PM
- Posted Re: separate semicolon and create table on Splunk Enterprise. 03-08-2023 12:21 PM
- Posted How to separate semicolon and create table? on Splunk Enterprise. 03-08-2023 11:12 AM
- Posted Re: How to search results and present as a table of selected key vaule on Splunk Search. 11-03-2022 06:28 AM
- Posted Re: How to search results and present as a table of selected key vaule on Splunk Search. 11-03-2022 06:19 AM
- Posted Re: How to search results and present as a table of selected key vaule on Splunk Search. 11-02-2022 01:35 PM
- Posted Re: How to search results and present as a table of selected key vaule on Splunk Search. 11-02-2022 12:36 PM
- Karma Re: How to search results and present as a table of selected key vaule for richgalloway. 11-02-2022 12:17 PM
- Posted How to search results and present as a table of selected key vaule? on Splunk Search. 11-02-2022 10:36 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
03-09-2023
01:33 PM
Thank you for quick response. pairdelim, kvdelim is not working. Since we have multiple key, values , is there any way to create template or some other process?
... View more
03-08-2023
12:21 PM
Thank you for quick response. Since all key’s/values are separating with semicolon without any space (e.g., Key1=TestValue;Key1=TestValue2; is there any generic function. Thank you for your help. message sample Key1=TestValue;Key1=TestValue2;Key3=TestValue3;
... View more
03-08-2023
11:12 AM
The search table is empty other than _time for message. Can you please advise how to disable kay values in table.
Sample message
{ "timestamp": "2023-03-05 19:06:43,978+0000", "level": "INFO", "location": "request:201", "message": "CSSRequestId=12312311-sdgdgdbbsaas;ProcessingRegion=us-east-1;RequestStatus=Completed;Platform=;RequestId=12312311-869a-3932-97d1-sdgdgdbbsaas--123123;ResponseStatusCode=200;PlatformBuckets=['e1--application','e2-application'];DestKey=Dev/20/03/05/14/01-01-0-File.xml;Source=external;SourceKey=abcded/xyz/file.xml;", "service": "gwy", "cold_start": true, "function_name": "GWY-IB", "function_memory_size": "208", "function_arn": "arn:aws:us-east-3:ib", "function_request_id": "xxxxxxxxxxxxxx", "xray_trace_id": "1-xxxxxxxx" }
Search index:
index="text" RequestStatus RequestID | table RequestStatus, RequestID,PlatformBuckets,ResponseStatusCode _time
index="text" RequestStatus RequestID | rex "RequestStatus = (?<RequestStatus>\S+)" | rex "RequestID = ?[\S+](?<RequestID>[\S+]*)" | table RequestStatus, RequestID,PlatformBuckets,ResponseStatusCode _time
... View more
11-03-2022
06:28 AM
Thank you for all your help. The search is working fine now. Is it possible to display as report like ? Can you please advise Search index index="mw_ib_prf507" RequestStatus RequestID | rex "RequestStatus = (?<RequestStatus>\S+)" | rex "RequestI[Dd] = (?<RequestID>\S+)" | table RequestID, RequestStatus Request Id RequestStatus RequestStatusCount 11111111 Received,Completed 2 11111112 Received,Completed 2 11111113 Received,Completed 2 11111114 Received,Error 2 11111115 Received,Completed 2 11111115 Received 1
... View more
11-03-2022
06:19 AM
Thank you for all your help, it's is working as expected
... View more
11-02-2022
01:35 PM
Hello Richgalloway, Thank you for quick response. somehow, I'm not getting request ID for "RequestStatus = Received; EnvName = tst111; RequestId = abceesxs-e8cf-383a-81d6-78185430c323--HO1FQtsdshNVf80E;" .. do i need regex to excluded "EnvName = tst111;"? Thanks,
... View more
11-02-2022
12:36 PM
Thank you for quick response and the solutions helped us. Somehow, I’m not able to get Received request Id in search (sample log). Also is there any way to disable as report like below? RequestStatus status message: css_request_id = abceesxs-e8cf-383a-81d6-78185430c323; RequestStatus = Received; EnvName = tst111; RequestId = abceesxs-e8cf-383a-81d6-78185430c323--HO1FQtsdshNVf80E; bucket = testbucket; key = DATA.xml; attempts = 1; Completed status message: css_request_id = abceesxs-e8cf-383a-81d6-78185430c323; RequestStatus = Completed; RequestID = abceesxs-e8cf-383a-81d6-78185430c323--HO1FQtsdshNVf80E; responseStatusCode = True; platformBuckets = ['css-lpue1-platform-data-application', 'css-lpue2-platform-data-application']; key = DATA.xml; bucket = testbucket; sourceKey = 10497687_DATA.xml ; service: gwy-Inbound Search index index="gd" RequestStatus RequestID | rex "RequestStatus = (?<RequestStatus>\S+)" | rex "RequestID = ?[\S+](?<RequestID>[\S+]*)" | table RequestID, RequestStatus, _time Report like RequestID, RequestStatus , _time ------------------------------------------------- 11111111 Received,Completed 2022-11-02 17:01:21 11111112 Received,Completed 2022-11-02 17:01:21 11111113 Received,Completed 2022-11-02 17:01:21 11111114 Received,Error 2022-11-02 17:01:21 11111115 Received,Completed 2022-11-02 17:01:21 Thank you,
... View more
11-02-2022
10:36 AM
Hello All,
The log has empty space before and after equal with semicolon separation. I’m unable to get the table request status like index="gd" RequestStatus | table RequestStatus, _time
Would you please advise if anyone have suggestions
Log sample
{"timestamp":"2022-11-02 17:01:21,421+0000","level":"INFO","location":"request_process:171","message":"request_id = 5ac3565f-d964-31cd-90b1-e8b7b208e7df; RequestStatus = Completed; RequestID = 5ac3565f-d9a64-31cd-9021-e8b7b208e7df--70ivkG0Td8OBpvWk; S3SourceKey = 1049x7555.xml ; "function_request_id":"b61aa34-f22b-53bc-957e-142456b9b7a5","xray_id":"1-6482a25d-78459fbe07213ee14x4386bd"}
RequestStatus = Received
RequestStatus = Completed
RequestStatus = Error
... View more
Labels
- Labels:
-
table
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-09-2023
07:48 PM
|
