Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About chandankr
chandankr
Path Finder
Member since:
12-12-2022
03-01-2023
Community Statistics
| Posts | 22 |
| Solutions | 1 |
| Karma Given | 1 |
| Karma Received | 1 |
| Member Since | 12-12-2022 |
Activity Feed
- Posted How to search to show only alerts out of maintenance mode? on Deployment Architecture. 03-01-2023 09:45 AM
- Tagged How to search to show only alerts out of maintenance mode? on Deployment Architecture. 03-01-2023 09:45 AM
- Posted How we can create a dashboard like shown in the screenshot? on Dashboards & Visualizations. 01-23-2023 04:54 AM
- Posted Re: Please see the below, trying to calculate avgCpuUtilization maxCpuUtilization for differect DC on Splunk Enterprise. 01-20-2023 12:42 AM
- Posted Re: Please see the below, trying to calculate avgCpuUtilization maxCpuUtilization for differect DC on Splunk Enterprise. 01-20-2023 12:42 AM
- Posted qq on Splunk Enterprise. 01-19-2023 10:14 PM
- Tagged qq on Splunk Enterprise. 01-19-2023 10:14 PM
- Posted Re: sum of a value within a period of 15 min on Splunk Enterprise. 01-18-2023 10:32 PM
- Got Karma for Re: trying to sort month in chronical order. Not getting the desired output. 01-18-2023 05:51 AM
- Posted Re: sum of a value within a period of 15 min on Splunk Enterprise. 01-18-2023 03:50 AM
- Posted Re: trying to sort month in chronical order. Not getting the desired output on Splunk Enterprise. 01-18-2023 03:23 AM
- Posted How I can combine avgCpuUtilization and maxCpuUtilization with UK_DC? on Splunk Enterprise. 01-18-2023 03:21 AM
- Tagged How I can combine avgCpuUtilization and maxCpuUtilization with UK_DC? on Splunk Enterprise. 01-18-2023 03:21 AM
- Posted Re: sum of a value within a period of 15 min on Splunk Enterprise. 01-17-2023 07:31 PM
- Posted How to get sum of a value within a period of 15 min? on Splunk Enterprise. 01-17-2023 02:06 AM
- Tagged How to get sum of a value within a period of 15 min? on Splunk Enterprise. 01-17-2023 02:06 AM
- Posted Re: trying to sort month in chronical order. Not getting the desired output on Splunk Enterprise. 01-10-2023 09:02 AM
- Karma Re: trying to sort month in chronical order. Not getting the desired output for richgalloway. 01-10-2023 09:02 AM
- Posted Re: trying to sort month in chronical order. Not getting the desired output on Splunk Enterprise. 01-10-2023 08:39 AM
- Posted Re: trying to sort month in chronical order. Not getting the desired output on Splunk Enterprise. 01-10-2023 08:35 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
03-01-2023
09:45 AM
we have multiple site, site is n number, if any site fires 9251 that particular site should not be in the list as that site is in network Maintenace mode.any site can fires multiple alerts 9047 OR/AND 9251
now
9047 is fired from a b c d e 9251 is fired from c d
c d fired 9251 as this site or device is under maintenance
so A 9047 B 9047 C 9251 9047 D 9251 9047 E 9047
so my output contain only A 9047 B 9047 E 9047
how to write Splunk Queary for the same @
... View more
- Tags:
- splunk
Labels
- Labels:
-
search peer
01-20-2023
12:42 AM
request your help on this
... View more
01-20-2023
12:42 AM
thanks @ITWhisperer for your reply . i am trying to fetch data based on data_center and create four fields that is AvgCpuLoad-UKDC MaxCpuLoad-UKDC AvgCpuLoad-USDC MaxCpuLoad-USDC.
... View more
01-19-2023
10:14 PM
01-18-2023
03:23 AM
1 Karma
Finally got this done using below | eval month=strftime(_time,"%m") | eval month_name=date_month | eval monthyear=date_year | stats count by month,month_name,monthyear,AvgCPU,MaxCPU | sort num(monthyear), num(month) | table month_name,AvgCPU,MaxCPU
... View more
01-18-2023
03:21 AM
| rex field=_raw "measResults\W(?<avgCpuUtilization>\d{0,3})\s(?<maxCpuUtilization>\d{0,3})"
| rex field=_raw "PLMN-PLMN\W\w+-\d\W\w\w\w-\d{0,3}.\d{0,3}.\d{0,3}.\d{0,3}@(?<RB_OR_LVS_DC>\w+-\w+)"
| eventstats avg(avgCpuUtilization) as AvgCPU max(maxCpuUtilization) as MaxCPU count by UK_OR_USA_DC
| stats count by month,RB_OR_LVS_DC,month_name,monthyear,AvgCPU,MaxCPU
| table month_name,AvgCPU,MaxCPU,UK_OR_USA_DC UK_OR_USA_DC contain 2 values UK_DC and USA_DC, i want to calculate avgCpuUtilization and maxCpuUtilization for both UK_DC and USA_DC. so their will be having 4 values avgCpuUtilization_UK_DC, maxCpuUtilization_UK_DC, avgCpuUtilization_USA_DC , maxCpuUtilization_USA_DC, i am unable to fecth this , how i can combine avgCpuUtilization and maxCpuUtilization with UK_DC . request your help on this
... View more
- Tags:
- splunk
- splunk-search
Labels
- Labels:
-
splunk-assist
01-17-2023
02:06 AM
I have an input of value is like an odometer so it's cumulative. I collect a sample every 15 minutes. If I want to create a timechart that shows the total value of 15 min duration. how would I do that? See example below.
1/17/2023 0:01:00 value 6 1/17/2023 0:02:00 value 6 1/17/2023 0:03:00 value 6 1/17/2023 0:09:00 value 7 1/17/2023 0:10:00 value 6 1/17/2023 0:11:00 value 7 1/17/2023 0:12:00 value 8 1/17/2023 0:15:00 value 8
from 1 minute to 15 minute total value is 54
1/17/2023 0:16:00 value 5 1/17/2023 0:17:00 value 8 1/17/2023 0:18:00 value 5 1/17/2023 0:29:00 value 7 1/17/2023 0:30:00 value 5
from 16 minute to 30 minute total value is 30
... View more
- Tags:
- splunk
Labels
- Labels:
-
using Splunk Enterprise
01-10-2023
08:39 AM
still no luck
... View more
01-10-2023
08:35 AM
@richgalloway also i was going through eval case and show this eval error_msg = case(error == 404, "Not found", error == 500, "Internal Server Error", error == 200, "OK") eval command examples - Splunk Documentation so i tried the below Queary | eval date_month=upper(date_month) | eventstats avg(active_state) as Active_UEs avg(idle_state) as Idle_UEs by date_month | eval Active_UEs=round(Active_UEs,0), Idle_UEs=round(Idle_UEs,0) | eval Month=date_month | eval month_seq=case( Month == january, "1", Month == february, "2", Month == march, "3", Month == april, "4" , Month == may, "5" , Month == june, "6" , Month == july, "7" , Month == august, "8" , Month == september, "9" , Month == october, "10" , Month == november, "11" , Month == december, "12" ) | stats count, first(Month) by month_seq,Active_UEs,Idle_UEs | table Month,Active_UEs,Idle_UEs
... View more
01-10-2023
08:16 AM
this is not working in sort month in chronical order
... View more
01-10-2023
08:09 AM
@richgalloway tried that but no luck. Below is the screenshot for the same
... View more
01-10-2023
04:43 AM
was using this below Search,
***| rex field=_raw "<measResults>\d+\s\d+\s\d+\s\d+\s\d+\s\d+\s\d+\s\d+\s(?<active_state>\d{0,3})\s\d+\s(?<idle_state>\d{0,3})"
| eval date_month=upper(date_month)
| eventstats avg(active_state) as Active_UEs avg(idle_state) as Idle_UEs by date_month
| eval Active_UEs=round(Active_UEs,0), Idle_UEs=round(Idle_UEs,0)
| stats count by date_month,Active_UEs,Idle_UEs
| table date_month,Active_UEs,Idle_UEs
but now i was trying to sort month in chronological order i used the below Search
***| eventstats avg(active_state) as Active_UEs avg(idle_state) as Idle_UEs by date_month
| eval Active_UEs=round(Active_UEs,0), Idle_UEs=round(Idle_UEs,0)
| eval Month=date_month
| eval orden = if(Month="january",1,if(Month="february",2,if(Month="march",3,if(Month="april",4,if(Month="may",5,if(Month="june",6,if(Month="july",7,if(Month="august",8,if(Month="september",9,if(Month="october",10,if(Month="november",11,12)))))))))))
| sort num(Month)
| stats count by Month,Active_UEs,Idle_UEs
| table Month,Active_UEs,Idle_UEs
here also month are sorted in alphabetically order not in chronilogical order.
... View more
- Tags:
- splunk
Labels
- Labels:
-
using Splunk Enterprise
12-15-2022
02:55 AM
trying to fetch some values and apply this athematic to get some relevant info for dashboard. 100 * sum([M8020C3]) / sum([M8020C6] - [M8020C4]) using the below splunk query index=* "M8020C3" AND "M8020C6" AND "M8020C4" | rex field=_raw "<measResults>\d+\s\d+\s\d+\s+(?<cell_avl3>\d+)\s(?<cell_avl4>\d)\s\d+\s+(?<cell_avl6>\d+)" | stats sum(cell_avl3) as cell_avl3 sum(cell_avl6) as cell_avl6 sum(cell_avl4) as cell_acl4 | eval cell_avl5 = cell_avl6-cell_avl4 | eval cell_avl10=cell_avl3/cell_avl5 | eval cell_avl=100*cell_avl10 | stats count by date_month,cell_avl
... View more
12-13-2022
10:00 PM
12-12-2022
04:19 AM
i want to make a dashboard of last 3 month of avg cpu load and max cpu load
For example: dec= 320 dec=10 dec=40 dec=90 nov= 347 nov=150 nov=60 oct= 300 oct=320 and so on
for dec 320+10+40+90/31 same for nov and oct
So for that , need to calculate last 3 months count and last month count in same query. Please suggest.
... View more
- Tags:
- splunk
Labels
- Labels:
-
stats
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-01-2023
01:20 PM
|
