Hi Ninja's,   I have created the alert with the cron expression for Scheduled Alert from 6pm to 6am for every 15mints & Sunday to Thursday. Cron Expression: */15 18-6 **7-4  But I am getting the error in Cron Expression. I have written similar one (*/15 1-13 **7-4 ) which is working as expected. Can someone please help me with the expression. Thank you. ... View more

I have result like this,  parameter compliance non-compliance 64bit 43 22 Bios 24 41 Error 0 65 Inter 64 1 OS 61 4   And I want Error to be displayed in the last column, Like below: parameter compliance non-compliance 64bit 43 22 Bios 24 41 Inter 64 1 OS 61 4 Error 0 65   is it something possible in Splunk without CSS or JS.  ... View more

I've been poking around Splunk Answers for a while today and can't quite match the scenario I've got. I have a 100 hosts in lookup And in splunk index, mostly reports 100 hosts but sometime few servers will miss reporting. I want to have a table with date and "ServersNotReporting" | inputlookup HostDetails.csv | table Host country datacenter  | search NOT [search index=_internal sourcetype="test.log" | stats dc(Host) AS host span=1d ] | eval Time = strftime(_time, "%Y-%d-%m") | fields - _time | table Time ServersNotReporting Probably my approach is wrong, but I don't know how to do this. Please help.. Thanks in Advance. ... View more

Hi Guys, I need a help in sort the date,   Month_Value 27-Aug-20 17-jul-20 4-sep-20 30-jul-20 16-jul-20 I have sort then in sorting order as mentioned in the below, Month_Value 16-jul-20 17-jul-20 30-jul-20 27-Aug-20 4-sep-20. Can someone please help me here. I have check some solutions and tried, but nothing seems to works. Thank you in advance ... View more

Hi Splunk Guys, Please help me with the query. My requirement is, I need search server count in here based on the version for 3 different time stamps. REsult as shown in the below Version Type 30 days 60 Days 90 Days 1.1.1.00 7 9 18 2.1.3.4 8 10 14 3.1.4.6 10 15 18 Index=_internal sourcetype=servers_list earlist=-30d | stats count(Parameter) as ServersCount_Last30Days by Value  The above query gives me last 30 days result.  ... View more

I have results in the table, As shown the below: Name Time Settingname value OEK 09-16-2019 PWD.length 8 ELC 09-16-2019 timeout 400 CMG 09-16-2019 PWmaxAttemts 3 --> I need Eval function ( for PWD.length, value is 😎 , whole row should be green. if other than value 8, whole row is Red --> For the timeout ( for timeout, value is 400), whole row should be green. if other than value 400, whole row is Red No Javascript or CSS. Can someone please help me here? Thanks in Advance. ... View more

Hi All, how can I get the splunk report name include both date and time in the subject of the Email with an pdf attached to the Email? I can't have access to the backend to edit sendmail.py, Since I am the Power User. Please do let me know if there is any solution I can do it on UI. Thank you. ... View more