×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
rudal_0205
Observer
Member since: ‎02-29-2024
‎03-04-2024
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎02-29-2024
Activity Feed
View All

Re: Unable to run my query and get correct results...

by in Alerting
‎03-03-2024 10:09 PM
‎03-03-2024 10:09 PM
I nees a solution from scratch , if someone could help here? ... View more

Re: Unable to run my query and get correct results...

by in Alerting
‎03-01-2024 01:27 AM
‎03-01-2024 01:27 AM
Actually i am looking a query on a scenario where there are few istances on my hosts and it went down.Eventually the there were no logs within 2 hrs ..but we find after 2 hrs the logs are captured.So if we find no logs coming from server past 30 min, it should trigger an alert. ... View more

Re: Unable to run my query and get correct results...

by in Alerting
‎02-29-2024 11:48 PM
‎02-29-2024 11:48 PM
Actually i am looking a query on a scenario where there are few istances on my hosts and it went down.Eventually the there were no logs within 2 hrs ..but we find after 2 hrs the logs are captured.So if we find no logs coming from server past 30 min, it should trigger an alert. ... View more

Unable to run my query and get correct results.

by in Alerting
‎02-29-2024 11:12 PM
‎02-29-2024 11:12 PM
Hi All, i want a query to check and fire an alert when , there are no logs from a server past 30 min. For example we have different isnatnce running on a host and i want an alert when there are no logs coming from serevr in past 30 min(because server instances are not running) .So we we dont see any logs from server past 30 min and alert shoul notfiy that server instances are stopped.Please help. Logs below event. 3/1/24 12:26:07.000 PM   www 89589 0 0.0 00:00:02 0.1 51784 2151496 ? S 35:31 httpd -d_/sys_apps_01/apache/server20Cent/versions/server2.4.56_-f_/sys_apps_01/apache/server20Cent/conf/MTF.AEM.conf host = www2stl52 source = ps sourcetype = ps ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎03-04-2024 01:31 AM