Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About kanamarlapudive
kanamarlapudive
New Member
Member since:
12-04-2019
06-05-2020
Community Statistics
| Posts | 17 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 12-04-2019 |
Activity Feed
- Posted Re: How to merge two search queries of same source and get the difference using splunk ? on Getting Data In. 12-12-2019 06:21 AM
- Posted Re: How to merge two search queries of same source and get the difference using splunk ? on Getting Data In. 12-09-2019 12:56 AM
- Posted Re: How to merge two search queries of same source and get the difference using splunk ? on Getting Data In. 12-08-2019 10:16 PM
- Posted How to merge two search queries of same source and get the difference using splunk ? on Getting Data In. 12-08-2019 10:13 PM
- Tagged How to merge two search queries of same source and get the difference using splunk ? on Getting Data In. 12-08-2019 10:13 PM
- Tagged How to merge two search queries of same source and get the difference using splunk ? on Getting Data In. 12-08-2019 10:13 PM
- Tagged How to merge two search queries of same source and get the difference using splunk ? on Getting Data In. 12-08-2019 10:13 PM
- Tagged How to merge two search queries of same source and get the difference using splunk ? on Getting Data In. 12-08-2019 10:13 PM
- Tagged How to merge two search queries of same source and get the difference using splunk ? on Getting Data In. 12-08-2019 10:13 PM
- Posted Re: transaction query providing wrong log events in splunk on Splunk Search. 12-08-2019 10:10 PM
- Posted Re: transaction query providing wrong log events in splunk on Splunk Search. 12-08-2019 11:25 AM
- Posted Re: transaction query providing wrong log events in splunk on Splunk Search. 12-08-2019 10:13 AM
- Posted Re: transaction query providing wrong log events in splunk on Splunk Search. 12-08-2019 10:09 AM
- Posted Re: transaction query providing wrong log events in splunk on Splunk Search. 12-08-2019 09:12 AM
- Posted Re: transaction query providing wrong log events in splunk on Splunk Search. 12-08-2019 07:50 AM
- Posted Re: transaction query providing wrong log events in splunk on Splunk Search. 12-08-2019 06:56 AM
- Posted Re: transaction query providing wrong log events in splunk on Splunk Search. 12-08-2019 02:36 AM
- Posted Re: transaction query providing wrong log events in splunk on Splunk Search. 12-07-2019 10:46 AM
- Posted Re: transaction query providing wrong log events in splunk on Splunk Search. 12-05-2019 11:48 PM
- Posted Re: Split the URL by using splunk for getting count for the URL's with out special characters on Getting Data In. 12-05-2019 09:56 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
12-12-2019
06:21 AM
Hi renjith,
I found the partial solution for my problem.
index=A ("StringA" OR "StringB")
|stats count(eval(searchmatch("StringA"))) as CountA ,count(eval(searchmatch("StringB"))) as CountB by commonID
with this i am able to achieve the data in below format.
Common ID Count A Count B
I am not getting Difference as another column, can you please tell how to get the difference as a separate column in results.
... View more
12-09-2019
12:56 AM
Hi Renjith,
it is not working, i have updated my question.
index=A Search String A| rex field=_raw command=(?CommonID\w+) | stats count as CountA by CommonID
index=A Search String B | rex field=_raw command=(? CommonID\w+) | stats count as CountB by CommonID
Common ID i am getting through rex command.
I am looking for the below output in columns format.
Common ID Count A Count B Difference ( i.e. Count A - Count B)
Kindly suggest on this any approach, i have tried subsearch and joins. Unable to get the result.
... View more
12-08-2019
10:16 PM
Hi team,
I have corrected the statements for everyone understanding.
Hi team,
I have two below queries, can you please suggest how to merge and get difference of counts in separate column.
index=A Search String A| rex field=_raw command=(?Common ID\w+) | stats count as CountA by CommonID
index=A search string B | rex field=_raw command=(? Common ID\w+) | stats count as CountB by CommonID
Common ID i am getting through rex command.
I am looking for the below output in columns format.
Common ID Count A Count B Difference ( i.e. Count A - Count B)
Kindly suggest on this any approach, i have tried subsearch and joins. Unable to get the result.
... View more
12-08-2019
10:13 PM
Hi team,
I have two below queries, can you please suggest how to merge and get difference of counts in separate column.
index=A | rex field=_raw command=(?Common ID\w+) | stats count by CountA
And
index=A | rex field=_raw command=(? Common ID\w+) | stats count by CountB
The Common ID i am getting through rex command.
I am looking for the below output in columns format.
Common ID Count A Count B Difference ( i.e. Count A - Count B)
Kindly suggest on this any approach, i have tried subsearch and join and am unable to get the result.
... View more
12-08-2019
10:10 PM
Hi Woodcock,
Arjun helped regarding this query, it is working fine. I am looking for another solution. Which i will raise as a separate request.
... View more
12-08-2019
11:25 AM
Hi Arjun,
Thank you for your patience for answering my questions.
I have two below queries, can you please suggest how to merge and get difference of counts in separate column.
index=A | rex field=_raw command=(?\w+) | stats count by CountA
index=A | rex field=_raw command=(?\w+) | stats count by CountB
Common ID i am getting through rex command.
I am looking for the below output,
Common ID Count A Count B Difference ( i.e. Count A - Count B)
Kindly suggest on this any approach, i have tried subsearch and joins. Unable to get the result.
... View more
12-08-2019
10:13 AM
Hi Arjun,
POST is not available in both events, it is available in start event only. I can't add this to base search.
... View more
12-08-2019
10:09 AM
Hi Arjun,
I did this , but i am getting null values of start and end of trace also including in this count, which i am looking to include both start and end not null case count.
... View more
12-08-2019
09:12 AM
Hi Arjun,
Can you provide how to calculate count for the same criteria, which either start or end is not null ( i.e. Start and end consider as one event).
If you can provide the query for this it will be very helpful.
... View more
12-08-2019
07:50 AM
Hi Arjun,
Thanks for quick reply, i am able to convert the timestamp.
The below event log is my sample raw data. if i give "security gate check" i am able to see the start time , if i give " Security gate check POST" it is not working. I am giving post because some other requests has PATCH to avoid that event logs.
"2019-12-05 08:03:25.348 INFO [price:promotion:rrt-0c8dfd466053d7c3c-b-de-18025-17252943-6,4c5c49909b36f6f3,4c5c49909b36f6f3] 23 xxxxx : Security gate check : requestURI : /promotions/async : HttpMethod : POST
... View more
12-08-2019
06:56 AM
hi Arjun,
Thanks for quick reply.
Even the events available in the selected time range ( i.e 7 days), I am getting as a null for start time. For end time i am able to see end time in Unix timestamp format. How to get the actual timestamp instead of unix epoch format.
Kindly suggest on the same.
... View more
12-08-2019
02:36 AM
Hi Arjun,
I am unable to receive with this query start time. Can you explain the query for understanding my requirement.
... View more
12-07-2019
10:46 AM
Hi Woodcock,
Thanks for your reply.
Both log events are from same request only, one is related to one layer and second one is related to another layer of same request. We are trying to find the each layer wise response time. in both statements only one common trace id is only available. the given query is not resulting any results.
Kindly provide alternative solution for my requirement.
... View more
12-05-2019
11:48 PM
Hi team,
I am looking for in the given splunk query, if start event is available and end event is not avaialble it should not pick the wrong event as a end event. In such cases it should not consider it as a successful transaction, i would like to showcase it as a failed transaction or incomplete transaction.
How can we achieve the expected result, kindly suggest on the same.
... View more
12-05-2019
09:56 PM
Hi Mathias Lindblom,
thanks for the update.
... View more
12-05-2019
06:45 PM
Hi team,
I have two log events as mentioned below, i am trying to find out response time difference based on timestamp in both events
duration using unique trace.
|rex field=_raw "(?[\w+,\w+,\w+])" | transaction trace startswith="Security gate check " endswith="found valid consumer for Identity" | stats avg(duration) as Average_response_Time
Here i am using trace in transaction. My question is in both log events trace should be same, but here it is not picking like that.
output log events
1st one :
2019-12-05 08:03:25.348 INFO [price:promotion:rrt-0c8dfd466053d7c3c-b-de-18025-17252943-6,4c5c49909b36f6f3,4c5c49909b36f6f3] 23 xxxxx : Security gate check : requestURI : /promotions/async : HttpMethod : POST
2019-12-05 08:03:26.965 INFO [price:promotion:rrt-0c8dfd466053d7c3c-b-de-18025-17252943-6,4c5c49909b36f6f3,4c5c49909b36f6f3] 23 --- : MSG=found valid consumer for Identity
Wrong output event :
2019-12-05 05:56:43.143 INFO [demo-23-01,bcc040a4340dd02e,bcc040a4340dd02e] 23 --- [qtp700631078-191] c.t.a.p.a.s.u.SecurityContextRepository : Security gate check : requestURI : /promotions/async : HttpMethod : POST
2019-12-05 05:57:36.967 INFO [testTraceId,a4d364b8545e7228,4d099a62c112f025] 23 --- : MSG=found valid consumer for Identity
in transaction why log events are not picking based on trace. Kindly suggest any changes required in my query.
Regards,
Vinay
... View more
12-04-2019
03:11 AM
how to split URL's like below mentioned into one URL, how to do it in splunk sample URL
https://google.co.in/v4/locations/dfdfd
https://google.co.in/v4/locations/dfad
I would like to see https://google.co.in/v4/locations/ as 2
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:03 AM
|
