×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
kp2
Loves-to-Learn Lots
Member since: ‎06-30-2023
‎07-12-2023
Community Statistics
Posts 3
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎06-30-2023
View All

Re: Excluding logs with specific keywords from das...

by in Splunk Search
‎07-12-2023 06:38 AM
‎07-12-2023 06:38 AM
I know that I must search for "returned 1" but I don't know how to do it. To sum up, I must check if some jobId have "returned 0" and the same jobId not "returned 1". But I don't know how to do it. ... View more

Re: Excluding logs with specific keywords from das...

by in Splunk Search
‎07-12-2023 05:50 AM
‎07-12-2023 05:50 AM
Yes, I  want a count of jobs which have only ever returned 0 and never returned 1.  There is no possibility to return 1 and next return 0. There is only case, when I have several jobs with 0 and eventually returned 1 as the last one. So I think, that time frame is unnecessary. ... View more

Excluding logs with specific keywords from dashboa...

by in Splunk Search
‎07-12-2023 05:23 AM
‎07-12-2023 05:23 AM
Hello,  I have application which ends specific kind of log. Every log have a jobId field and additional information" returned: 1" or "returned: 0". For one jobId program can return a lot of "returned: 1" and only one "returned: 0" logs. I want to get dashboard for daily count of jobId, but I want to exclude jobId number, when one of logs contain "returned: 1". I write something like that: $env$ $project$ "jobId" AND NOT "returned: 0" | timechart span=24h dc(jobId) but this only exclude logs, where is only "returned : 0" for one jobId. Is there possibility to get this dashboard? ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎07-12-2023 10:22 AM