About Sishad

Sishad · ‎10-13-2024

Version is Splunk Cloud 9.1.2312 I am looking for only these values day wise may be in last 7 days.

Sishad · ‎10-13-2024

Hi Splunk Experts, Can you please let me know how we can calculate the max and avg TPS for a time period of last 3 months along with the exact time of occurrence. I came up with below query, but it is showing me error as the count of event is greater than 50000. Can anyone please help or guide me on how to overcome this issue. index=XXX "attrs"=traffic NOT metas | timechart span=1s count AS TPS | eventstats max(TPS) as MAX_TPS | eval Peak_Time=if(MAX_TPS==TPS,_time,null()) | stats avg(TPS) as AVG_TPS first(MAX_TPS) as MAX_TPS first(Peak_Time) as Peak_Time | fieldformat Peak_Time=strftime(Peak_Time,"%x %X")

Sishad · ‎08-14-2024

Thanks @ITWhisperer for your suggestion.😊 I was able to do produce the requested data via this command.

Sishad · ‎08-13-2024

But I was looking to can show these 3 timeline values as a chart/table. So that I can create a report on this and send out email to my team. Can this be achieved ?

Sishad · ‎08-13-2024

Hi Splunk experts, I want to compare the response code of our API for last 4 hours with last 2 days data over the same time. And if possible I would need results in a chart/table format where it shows the data as below. <Reponse Codes | Last 4 Hours | Yesterday | Day before Yesterday> As of now i am getting results in hours wise. Can we achieve this one in Splunk ? Can you guys please guide me in the right direction to achieve this.

Sishad · ‎05-30-2024

Yes I have added it. Please find below the complete source code. { "type": "ds.search", "options": { "query": "index = index host=hostname source=\"/var/log/history-*.log\" servername | table Websphere GUI \n| eval Websphere=if(Websphere=\"0\",\"UP\",\"DOWN\")\n| eval GUI=if(GUI=\"0\",\"UP\",\"DOWN\")", "queryParameters": { "earliest": "-10m@m", "latest": "now" }, "refresh": "10m", "refreshType": "delay" }, "options": { "columnFormat": { "Websphere": { "rowBackgroundColors": "> table | seriesByName(\"Websphere\") | matchValue(WebsphereColumnFormatConfig)" } } }, "context": { "WebsphereColumnFormatConfig": [ { "match": "DOWN", "value": "#FF0000" }, { "match": "UP", "value": "#00FF00" }, ] } "name": "DC Web Server _ search" }

Sishad · ‎05-30-2024

No luck as it throws an error saying "must NOT have additional properties" in JSON.

Sishad · ‎05-29-2024

Hi Splunk experts, I have made a dashboard which show my App's service status in Dashboard Studio and I want to display color based on value as show below. This was achieved in Dashboard classic by editing the source and appending the format as below. </format> <format type="color" field="Requester"> <colorPalette type="expression">case (match(value,"DOWN"), "#E34234",match(value,"NA"), "#F8BE34",match(value,"UP"),"#4F7942")</colorPalette> <format type="color" field="Stripping"> <colorPalette type="expression">case (match(value,"DOWN"), "#E34234",match(value,"NA"), "#F8BE34",match(value,"UP"),"#4F7942")</colorPalette> </format> Can the same be achieved in Dashboard studio as well ? If so how it can be done. Can you guys please help me out on this.TIA

Sishad · ‎03-18-2024

Hi Splunk experts, I am looking to display status as Green/Red in Splunk dashboard after comparing the values of Up & Configured in the below screenshot of log entries. If both are equal it should be green else Red. Can anyone please guide me how to achieve that.

Sishad · ‎02-02-2024

I don't have access to Splunk Indexer and have access only to target servers. That's why I am asking for a way to build dashboard from target server shell script output data.

Sishad · ‎02-01-2024

Hi Splunk Experts, I am trying to make a health check dashboard for our application.First thing in the list is to monitor status of Linux process. What I am planning is to execute a shell script in the server and write output of process status as 0 and 1. Where 0 is running and 1 is down. Then this is written to a log and this logs is being pushed to Splunk. Now my requirement is to create a dashboard which display Service Name and then status as Green or Red. Just wanted to know whether this is right approach or is there any alternative way to achieve the same more efficiently ?

Sishad · ‎11-27-2023

Thanks @ITWhisperer It worked. I used |eval NewField=trim(OldField) to remove the whitespaces.

Sishad · ‎11-27-2023

Hi Splunk Enthusiasts, I have created a table using Splunk Dashboard Studio. In that a column contains results like 0 and some other number. 0 is displayed on left where as all other values displays is aligned right. Can you please help me to make it all align left. TIA !! PFB screenshot for your reference.

Posts	13
Solutions	0
Karma Given	3
Karma Received	0
Member Since	‎11-27-2023

Online Status	Offline
Date Last Visited	‎10-13-2024 01:27 PM

Query to calculate max TPS over period of time (3 ...

Wants to compare last 4 hours data with last 2 day...

Dashboard Studio : Representing Row in Colors as p...

Need help in displaying process status in Dashboar...

Help Needed - Process status Dashboard

Splunk Cloud v 9 - Splunk Dashboard Studio table c...

Re: Query to calculate max TPS over period of time...

Query to calculate max TPS over period of time (3 ...

Re: Wants to compare last 4 hours data with last 2...