×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
dbuddha2020
Engager
Member since: ‎03-03-2023
‎04-25-2024
Community Statistics
Posts 3
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎03-03-2023
View All

How to resolve the file extension error in splunk ...

by in Monitoring Splunk
‎04-24-2024 03:38 AM
‎04-24-2024 03:38 AM
We have integrated the AWS guard duty logs into Splunk through the S3 bucket.  Recently, we have noticed this error in our health check The file extension fileloaction.jsonl is not in a delimited file format.   Suggest me, how I can resolve this?   ... View more

Re: Splunk search query for identifing the list of...

by in Splunk Search
‎03-03-2023 08:49 AM
1 Karma
‎03-03-2023 08:49 AM
1 Karma
Do you have any start to a search you could post? In general, you could do something like: "index=<db_index> users=* NOT [| inputlookup Authorized_list.csv | fields users] | stats count by users" This is assuming "users" is a field in both your indexed data and a field in the CSV.  ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎04-25-2024 07:59 AM
Karma given to
View All