About sintjm

sintjm · ‎07-26-2024

Helped a lot, thanks.

sintjm · ‎07-26-2024

thanks, I used a correlation key to correlate the events and it worked.

sintjm · ‎07-25-2024

Hi thanks but the problem is they are not from the same events as they are separate

sintjm · ‎07-25-2024

I extracted 2 fields called 'Resp_time' and 'Req_time'...Both these fields are integers. I also changed the values to epoch How do I display the difference between the Resp_time and req_time?

sintjm · ‎07-25-2024

hey a little years late but I'm just wondering if you changed the timestamp into epoch time before using the transaction command?

sintjm · ‎07-25-2024

hey a little years late but I'm just wondering if you changed the timestamp into epoch time before using the transaction command

sintjm · ‎07-18-2024

hi have you tried mvexpand list(RelativeTargetName)

sintjm · ‎07-18-2024

Don't mention

sintjm · ‎07-17-2024

hi, try | makeresults | eval date="Nov 16 10:00:57 2024" | eval epoch_time=strptime(date, "%b %d %H:%M:%S %Y") | fields epoch_time regards, Abraham

sintjm · ‎07-16-2024

I just checked out my number formatting on the table and changed the precision to 0 exactly

sintjm · ‎07-16-2024

how do i get the values in days_to_eol to just show without the .00 decimal. I even rounded the result to the nearest whole number with my query

sintjm · ‎07-12-2024

The search log

sintjm · ‎07-11-2024

I tried using | table data but there is still no data when searching the index. With the spath removed and the _time field added there are still no events in the index and the search log can be seen below. There is still data coming through the search.

sintjm · ‎07-11-2024

Because i don't see the events in from searching the index I created, I can't tell the timestamp. I added | eval _time=now() to the query so that it would put the recent time when the endpoint was reached

sintjm · ‎07-11-2024

so there is a field in the log named data and that's where i need my log from. I also removed spath command from the query. Removing the collect command still shows the log curled from the endpoint.

sintjm · ‎07-11-2024

sintjm · ‎07-11-2024

There was no logs showing after i searched the index, sorry

sintjm · ‎07-11-2024

yes please, I did as such

sintjm · ‎07-11-2024

i have a search in my query where i spool data from an API but then the collect command does not allow me to save the search into my index. Any ideas?

sintjm · ‎06-19-2024

trial

sintjm · ‎05-06-2024

The first one that shows" in data.initiate_state[].path[] And yes, the other array elements are not as meaningful as the first element.

sintjm · ‎05-06-2024

I just realized why I got more values because there are nested objects below with the same fields but i only want the first one that shows

sintjm · ‎05-06-2024

I want to get the values from the path field but I can't extract this alone as data.initial_state.path would output extra values

Posts	23
Solutions	1
Karma Given	4
Karma Received	1
Member Since	‎05-06-2024

Online Status	Offline
Date Last Visited	3 weeks ago

Subtracting two fields

removing decimal value in table

collect command wouldn't save to an index

trial

How to get the nested objects from my JSON data fi...

Re: Subtracting two fields

Re: Subtracting two fields

Re: Subtracting two fields

Subtracting two fields

Re: How to subtract two fields?

Re: How to subtract two fields?

Re: Display only events that fulfill all IN condit...

Re: How to convert date time to epoc time.

Re: How to convert date time to epoc time.

Re: removing decimal value in table

removing decimal value in table

Re: collect command wouldn't save to an index

Re: collect command wouldn't save to an index

Re: collect command wouldn't save to an index

Re: collect command wouldn't save to an index

Re: collect command wouldn't save to an index

Re: collect command wouldn't save to an index

Re: collect command wouldn't save to an index

collect command wouldn't save to an index

trial

Re: How to get the nested objects from my JSON dat...

Re: How to get the nested objects from my JSON dat...

How to get the nested objects from my JSON data fi...

Are you a member of the Splunk Community?