Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About Nagalakshmi
Nagalakshmi
Path Finder
Member since:
07-20-2023
11-27-2024
Community Statistics
| Posts | 16 |
| Solutions | 1 |
| Karma Given | 7 |
| Karma Received | 0 |
| Member Since | 07-20-2023 |
Activity Feed
- Posted Episode is generating 2 episodes with different severities on Splunk ITSI. 11-25-2024 10:03 AM
- Tagged Episode is generating 2 episodes with different severities on Splunk ITSI. 11-25-2024 10:03 AM
- Tagged Episode is generating 2 episodes with different severities on Splunk ITSI. 11-25-2024 10:03 AM
- Karma Re: Splunk ITSI certification for KendallW. 03-26-2024 03:24 AM
- Posted Splunk ITSI certification on Training + Certification Discussions. 03-25-2024 07:56 AM
- Tagged Splunk ITSI certification on Training + Certification Discussions. 03-25-2024 07:56 AM
- Posted Re: Time range panel issue on Splunk Search. 03-05-2024 03:13 AM
- Tagged Time range panel issue on Splunk Search. 03-04-2024 12:02 PM
- Posted Time range panel issue on Splunk Search. 03-04-2024 10:49 AM
- Karma Re: Not getting results to lookup command for richgalloway. 03-04-2024 10:44 AM
- Posted Re: Not getting results to lookup command on Splunk Search. 02-29-2024 11:19 AM
- Posted Not getting results to lookup command on Splunk Search. 02-29-2024 07:43 AM
- Tagged Not getting results to lookup command on Splunk Search. 02-29-2024 07:43 AM
- Posted Re: Unable to get the lookup values on the search queries on Splunk Search. 12-27-2023 09:56 AM
- Karma Re: Unable to get the lookup values on the search queries for gcusello. 12-27-2023 09:56 AM
- Posted Unable to get the lookup values on the search queries on Splunk Search. 12-27-2023 09:20 AM
- Tagged Unable to get the lookup values on the search queries on Splunk Search. 12-27-2023 09:20 AM
- Posted Re: How to showcase the count of devices and userlogged in? on Splunk Search. 08-28-2023 03:39 AM
- Posted Re: How to showcase the count of devices and userlogged in? on Splunk Search. 08-24-2023 11:47 AM
- Posted Re: How to showcase the count of devices and userlogged in? on Splunk Search. 08-24-2023 11:03 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
11-25-2024
10:03 AM
HI Team, 2 episodes are generating for the same host and same description for different severities. One is for high and other one is for info. When I checked the correlation search, we have given only high and checked the Neap policy as well. under episode information found the severity we had given the same as the first event. Can someone please guide how to avoid the info episode and how to find the path to configure for info severity Regards, Nagalakshmi
... View more
Labels
- Labels:
-
using ITSI
03-25-2024
07:56 AM
Hi, Currently working in Splunk ITSI, Can I do the Splunk IT Service Intelligence Certified Admin certification without completing the previous certifications like Splunk Core Certified Power User , Splunk Enterprise Certified Admin etc. Regards, Nagalakshmi A
... View more
- Tags:
- certification
Labels
- Labels:
-
Certification
-
Training
03-05-2024
03:13 AM
Hi @bowesmana , It is a classic dashboard, and time range is one of panel in the dashboard. I just used the below query for panel. Customer has access to the dashboard but only timerange panel is showing error. <panel ref="TimeRangePanel"></panel> Below is the error
... View more
03-04-2024
10:49 AM
Hi, I have created the dashboard with multiple panels. I have created the time range panel to be reflected as last 4 hours from my end . it is perfectly working. When customer is trying to use the dashboard it is showing as TimeRangepanel not found. Please assist me
... View more
- Tags:
- search
Labels
- Labels:
-
search job inspector
02-29-2024
11:19 AM
Hi @richgalloway , I used the above query, it is showing 0 events
... View more
02-29-2024
07:43 AM
Hi, Need your assistance below We have created new csv lookup and we are using the below query but we are getting all the data from the index & sourcetype . we need to get the events only for the hosts which mentioned on the lookup is the requirement Lookup name : Win_inventory.CSV used only one column called Server_name
index=Nagio sourcetype=nagios:core:hard
|lookup Win_inventory.CSV Server_name as host_name OUTPUTNEW Server_name.
Server_name is not an existing interesting field
... View more
- Tags:
- lookup
Labels
- Labels:
-
lookup
12-27-2023
09:56 AM
Hi @gcusello , Yes, Hostname field is already exists in the event. Thank you for quick response! Mentioned query is a perfect solution for this issue. Regards, Nagalakshmi A
... View more
12-27-2023
09:20 AM
Hi Team, Need your assistant for below We have created new csv lookup and we are using the below query but we are getting all the data from the index & sourcetype . we need to get the events only for the hosts which mentioned on the lookup is the requirement Lookup name : Palo_devices.csv, used only one column called Hostname index=security host=abc sourcetype = Palo |lookup Palo_devices.CSV Hostname OUTPUT Hostname Regards, Nagalakshmi
... View more
- Tags:
- lookup
Labels
- Labels:
-
lookup
08-28-2023
03:39 AM
Thanks for your suggestions!!
... View more
08-24-2023
11:47 AM
Hi @bowesmana for example index=M365 type=logged in | stats count(username) as usernamecount by username,hostname. by this query we are getting expected results such as username,hostname. however we need a field where system count can be shown for the userloggedIn. By trying below command, we are getting the number of times users logged in to the systems, but we require system count a user logged in index=M365 type=logged in | stats count(username) as usernamecount by username,hostname | where usernamecount>1
... View more
08-24-2023
11:03 AM
Hi, for example index=M365 type=logged in | stats count(username) as usernamecount by username,hostname. by this query we are getting expected results such as username,hostname. however we need a field where system count can be shown for the userloggedIn. By trying below command, we are getting the number of times users logged in to the systems, but we require system count a user logged in index=M365 type=logged in | stats count(username) as usernamecount by username,hostname | where usernamecount>1
... View more
08-23-2023
11:53 AM
Hi Team,
We have users logging in multiple devices. So, we need to showcase the count of devices and user logged in. Can you please advise the query for same.
Regards,
Nagalakshmi A
... View more
- Tags:
- splunk search
Labels
- Labels:
-
stats
08-23-2023
05:20 AM
Hi @isoutamo , Thank you for your help! We got the expected output by using the below mentioned command.
... View more
08-22-2023
11:04 AM
Hi Team, We are trying to extract the hostname from the logs . but unable to get the exact output ( we need hostname as sample-987) . Please find the logs and tried command. Please assist us on high priority. Thanks logs:- Symptom: type DD Alert Sample-987: CRITICAL: DiskFailure: HardwareFailure Our Command:- | rex field=_raw "DD\s\Alert\s(?<HostName>\w+-\d+)" Regards, Lakshmi
... View more
Labels
- Labels:
-
dashboard
07-20-2023
11:01 AM
Hi @gcusello , Thanks for the quick response! The above query is perfectly working
... View more
07-20-2023
08:02 AM
Hi Team, we are trying to add new field as a display name into interesting field from below raw event DisplayName: sample-Hostname We tried the below query but it is not working | rex field=_raw \"DisplayName", "Value":\s(?<DisplayName>\w+). And also please suggest us how to create a query if the user logged in one or more devices. Thanks in advance!
... View more
- Tags:
- rex
Labels
- Labels:
-
field extraction
-
rex
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-27-2024
12:04 PM
|
