Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About Teemanny
Teemanny
Engager
Member since:
07-17-2023
07-26-2023
Community Statistics
| Posts | 15 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 07-17-2023 |
Activity Feed
- Posted Re: How can I compare Todays result with yesterdays? on Splunk Search. 07-26-2023 10:20 AM
- Posted Re: How can I compare Todays result with yesterdays? on Splunk Search. 07-26-2023 08:01 AM
- Posted Re: Compare Todays result with yesterdays on Splunk Search. 07-25-2023 06:35 AM
- Posted Re: Compare Todays result with yesterdays on Splunk Search. 07-25-2023 06:06 AM
- Posted How can I compare Todays result with yesterdays? on Splunk Search. 07-25-2023 05:29 AM
- Posted Re: Splunk dashboard search parameter on Dashboards & Visualizations. 07-21-2023 05:16 AM
- Posted Re: Splunk dashboard search parameter on Dashboards & Visualizations. 07-20-2023 08:20 AM
- Posted Re: Splunk dashboard search parameter on Dashboards & Visualizations. 07-20-2023 07:34 AM
- Posted Re: Splunk dashboard search parameter on Dashboards & Visualizations. 07-20-2023 05:54 AM
- Posted Re: Splunk dashboard search parameter on Dashboards & Visualizations. 07-19-2023 08:17 AM
- Posted Re: Splunk dashboard search parameter on Dashboards & Visualizations. 07-19-2023 07:39 AM
- Posted Re: Splunk dashboard search parameter on Dashboards & Visualizations. 07-19-2023 05:24 AM
- Posted Re: Splunk dashboard search parameter on Dashboards & Visualizations. 07-18-2023 10:54 AM
- Posted Re: Splunk dashboard search parameter on Dashboards & Visualizations. 07-17-2023 06:01 AM
- Posted Splunk dashboard search parameter- How to get exact date? on Dashboards & Visualizations. 07-17-2023 05:31 AM
Topics I've Started
07-26-2023
10:20 AM
This did the trick.
... View more
07-26-2023
08:01 AM
Can you please help with time range for 15mins ago in comparison to 15m last week ago.
... View more
07-25-2023
06:06 AM
It summed up the counts, I want all the several count wrt the API names which are over 100. something like the screenshot above
... View more
07-25-2023
05:29 AM
I have the code below and I need to get the statuses yesterday and today with respect to API value. My current search is below.
index="l7" earliest=-1d@d latest=now
| eval status=case(response_status<400 AND severity="Audit", "Success_count", response_status>=400 and response_status<500, "Backend_4XX",response_status>=500, "Backend_5XX",response_status==0 AND severity="Exception", "L7_Error")
| eval Day=if(_time<relative_time(now(),"@d"),"Yesterday","Today")
I need my data to be grouped separately or side by side. I need your help in achieving this.
... View more
Labels
- Labels:
-
count
07-21-2023
05:16 AM
No. I didn't...it reverted to the data I had previously, not showing the data for last week
... View more
07-20-2023
08:20 AM
I didn't get the values for last week
... View more
07-20-2023
07:34 AM
The API name should remain same while other values have an append of today and last week and it should produce more than one result. The idea is I'm trying to get the APIs called this moment and show the total,success_count,success_rate..... for today and exact same data for this time last week.
... View more
07-20-2023
05:54 AM
Thank you for your help. I want the API field to remain same while the other field changes. The current display API last week and times out after a few minutes
... View more
07-19-2023
08:17 AM
index="l7" | rename service_resolutionUri as API | stats count(eval(in(response_status, "200", "201", "202","203","204","205","206","207","208","226","300","301","302","303","304","305","306","307","308", "0") and severity="Audit")) AS Success_count, count(eval(in(response_status,"400","401","402","403","404","405","406","407","408","409","410","411","412","413","414","415","416","417","418","421","422","423","424","425","426","426","428","429","431","451"))) AS Backend_4XX, count(eval(in(response_status, "0") and severity="Exception")) AS L7_Error, count(eval(in(response_status, "500","501","502","503","504","505","506","507","508","510","511"))) AS Backend_5XX BY API | eval Total = Success_count + (Backend_4XX + Backend_5XX + L7_Error), Success_Rate=round(Success_count/Total*100,2) | table API Total Success_count L7_Error Backend_4XX Backend_5XX Success_Rate
... View more
07-19-2023
07:39 AM
It failed to display a result, plus I want the result to show in the table below beside the current valuesas Success_count lastweek L7_Errorlastweek and others. P.S: The screenshot currently shows the data I get now
... View more
07-19-2023
05:24 AM
I currently use the default time element in the Splunk search but figured that won't work. I am currently trying to use the Splunk search to get the success rate for today and last week. I have been stuck on getting this done for a few days. How do I incorporate the _time and get the data for this week and last week in the same data table. I want to have Success_count and Success_count_lastweek in the same table.
... View more
07-18-2023
10:54 AM
Thank you for the response. So, I want to have data for this week and the same set of data for the exact time last week, how do I get the add the field for last week
... View more
07-17-2023
06:01 AM
I am new to Splunk and kind of need help in getting this done. How do I add the time command?
... View more
07-17-2023
05:31 AM
I have a dashboard that shows the APIs called over a particular period and get the success rate based on the response status, but I need to also get the success rate of that API over the past two weeks (last week, last two weeks) on the exact date, but I've been having issues getting that. This is my current search parameter. Any help on how to get this will be appreciated.
Index="Main" | stats count(eval(in(response_status, "200", "201", "202","203","204","205",....,"307","308", "0") and severity="Audit")) AS Success_count, count(eval(in(response_status,"400",...,"451"))) AS Backend_4XX, count(eval(in(response_status, "0") and severity="Exception")) AS L7_Error, count(eval(in(response_status, "500",...,"511"))) AS Backend_5XX BY API | eval Total = Success_count + (Backend_4XX + Backend_5XX + L7_Error), Success_Rate=round(Success_count/Total*100,2) | Table API Total Success_count L7_Error Backend_4XX Backend_5XX Success_Rate | sort API | search Success_Rate=*
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-26-2023
03:20 PM
|
