Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About riposans
riposans
Explorer
Member since:
10-24-2023
7 hours ago
Community Statistics
| Posts | 8 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 1 |
| Member Since | 10-24-2023 |
Activity Feed
- Posted Cannot break event by log from syslog on Splunk Enterprise. 06-20-2024 09:02 PM
- Tagged Cannot break event by log from syslog on Splunk Enterprise. 06-20-2024 09:02 PM
- Karma Re: How do you parse and chart fields in a JSON array? for renjith_nair. 04-25-2024 09:17 PM
- Posted mutiple search on Splunk Search. 03-20-2024 08:39 PM
- Posted maxmind cannot updated on All Apps and Add-ons. 11-28-2023 07:59 PM
- Posted Re: There was an error processing your request. It has been logged (ID xxxxxxX) on Getting Data In. 11-28-2023 06:33 PM
- Tagged Re: There was an error processing your request. It has been logged (ID xxxxxxX) on Getting Data In. 11-28-2023 06:33 PM
- Got Karma for There was an error processing your request. It has been logged (ID xxxxxxX). 11-28-2023 09:22 AM
- Posted There was an error processing your request. It has been logged (ID xxxxxxX) on Getting Data In. 11-27-2023 11:33 PM
- Posted Re: Truncate Log on Splunk Search. 10-31-2023 03:49 AM
- Posted Truncate Log on Splunk Search. 10-29-2023 07:54 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 |
06-20-2024
09:02 PM
Dear Everyone can help me for this, i have log from syslog but cannot break event by lines. {"@timestamp":"2000-01-21T00:58:39.372418529Z","event":{},"@version":"1","type":"prod","filtered_message":"[ABC]|Type=ABC|logDate=2000-01-21 00:58:39|ABC1=ABC2|ABC12=ABC23|ABC34=ABC35|ABC45=ABC46"}{"@timestamp":"2000-02-21T00:58:39.372418529Z","event":{},"@version":"1","type":"prod","filtered_message":"[ABC]|Type=ABC|logDate=2000-02-21 00:58:39|ABC1=ABC5|ABC13=ABC24|ABC35=ABC36|ABC46=ABC47"} i need break this log from props.conf, i already used this: [ABC] LINE_BREAKER = ([\r\n]+) SHOULD_LINEMERGE = false but not works, please tell me how to extract event log by lines
... View more
- Tags:
- props
Labels
- Labels:
-
configuration
-
troubleshooting
03-20-2024
08:39 PM
Hello everyone, i need solution for this. my data : userID=text123 , login_time="2024-03-21 08:04:42.201000", ip_addr=12.3.3.21 userID=text123, login_time="2024-03-21 08:00:00.001000", ip_addr=12.3.3.45 userID=text123, login_time="2024-03-21 08:02:12.201000", ip_addr=12.3.3.21 userID=text123, login_time="2024-03-21 07:02:42.201000", ip_addr=12.3.3.34 i want get data, userID="text123 " AND in the last 5 minutes AND if mutiple ip i used join,map,append but not solved.please help for SPL this
... View more
Labels
- Labels:
-
join
11-28-2023
07:59 PM
hello everyone i check in log maxmind tracker get this error "Could not download MaxMind GeoIP MD5, exiting." how can i solve this ? thankyou
... View more
Labels
- Labels:
-
configuration
11-28-2023
06:33 PM
i checked error this ERROR io.dropwizard.jersey.errors.LoggingExceptionMapper - Error handling a request: xxxxxxxx java.lang.NoClassDefFoundError: Could not initialize class java.awt.GraphicsEnvironment how i can solve this?
... View more
- Tags:
- db_connect
11-27-2023
11:33 PM
1 Karma
im getting this error from connection in DB connect "There was an error processing your request. It has been logged (ID xxxx)" . I've done manually copy query in db_inputs.conf but doesnt worxs. can help me?
... View more
Labels
- Labels:
-
using Splunk Enterprise
10-29-2023
07:54 PM
I'm confused how to truncate from this log. how do I do it from props.conf or from the SPL command? Can anyone provide a solution to this?
<11>1 2021-03-18T15:05:30.501Z abcdefghi-jajaj-b1bc07001-xb0k7.abcdefghi-user - - - [Originator@7776 kubernetes__container_name="abcdefghi-jajaj" docker__container_id="a1bbddc80312d8501f1b1ac015d525722f105a71d6521be0728e8b057066eda1" kubernetes__pod_name="abcdefghi-jajaj-b1bc07001-xb0k7" bosh_index="0" stream="stbcd" kubernetes__namespace_name="abcdefghi-develop" bosh_id="e0700d15-ca5a-1f35-8e01-bd83d3eb705a" bosh_deployment="service-instance_f08cb851-fa53-1206-0a6b-705f3fa0f301" docker_id="a1bbddc80312d" tag="kubernetes.var.log.containers.abcdefghi-user-b1bc07001-xb0k7_abcdefghi-develop_abcdefghi-user-a1bbddc80312d8501f1b1ac015d525722f105a71d6521be0728e8b057066eda1.log" instance_type="werkir"] 2021-03-18 22:05:00.210 INFO [abcdefghi-jajaj,3010acf256f7c7e0,717ea36c0d67f3da,true] 6 --- [nio-0020-exec-1] c.id.bankabcde.common.util.SplunkUtil : [LOGIN_abc]|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|uobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|sessionID=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|appVersion=ABC123|mobilePhone=ABC123|custGroup=ABC123
i want to cut it to something like this:
[LOGIN_abc]|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|uobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|sessionID=ABC123|mobilePhone=ABC123|mobilePhone=ABC123|appVersion=ABC123|mobilePhone=ABC123|custGroup=ABC123
THANKYOU
... View more
Labels
- Labels:
-
regex
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
7 hours ago
|
