About kmhanson

kmhanson · ‎04-17-2023

I did play and get it to work. A big help. Thanks so much to both of you for the help.

kmhanson · ‎04-13-2023

rex field=user mode=sed and then the expression?

kmhanson · ‎04-13-2023

I have hundreds of thousands of logs. I can put it in excel but would rather get it done in sprint so the rest of the team can run the same command. It is more important to get that ip address, the COSID isn't so important

kmhanson · ‎04-13-2023

so is the full command: | rex field=port mode=sed fromhost=(?<fromhost>[^:]+)

kmhanson · ‎04-13-2023

If I just want the IP address and not the COSID, what do I cut out? Turns out COSID isn't always there

kmhanson · ‎04-13-2023

I am new to Regex expressions and trying to figure them out. I am trying to extract two sections of the following log field: 5002:fromhost=999.99.99.99:fromport=3299:sid=92ac3498-d95d-11ed-af19-92eb6037d638:respcode=OK:resptime=7:node=999999ss03:nodePort=5002:cosId=asasasa I want the IP address that shows after fromhost and the COSID value asasasa at the end of the field and not having much luck

kmhanson · ‎12-16-2022

I see this in the doc but not sure how to add it to my query align (left | center | right ) > table | type() | matchValue(tableAlignByType) Alignment for each cell in the table. Is it

kmhanson · ‎12-16-2022

query is index=xx_xxx auth.lxxx error | stats count by remoteaddr | sort by count desc

kmhanson · ‎12-16-2022

My count field is right justified and so far from the description. Is it possible to either left justify the content or right justify the count field in a table?

kmhanson · ‎12-13-2022

Ok - took a few tries but I got it to work with the field command. Thanks.

kmhanson · ‎12-13-2022

I am new to splunk. Creating a report to count the successful and error logins to my system. The report shows the two columns but when I put the report on my dashboard, it adds two columns, span and span_days. I can't figure out how to remove those two extra columns. Any advice?

Posts	11
Solutions	1
Karma Given	0
Karma Received	1
Member Since	‎12-13-2022

Online Status	Offline
Date Last Visited	2 weeks ago

How to extract two fields from a group?

Is it possible to have left / right justification ...

Why does report on dashboard show extra fields?

Re: How to extract two fields from a group

Re: How to extract two fields from a group

Re: How to extract two fields from a group

Re: How to extract two fields from a group

Re: How to extract two fields from a group

How to extract two fields from a group?

Re: Left / right justification in tables - is it p...

Re: Left / right justification in tables - is it p...

Is it possible to have left / right justification ...

Re: report on dashboard showing extra fields

Why does report on dashboard show extra fields?