Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About sajbutler
sajbutler
Path Finder
Member since:
05-07-2010
06-05-2020
Community Statistics
| Posts | 34 |
| Solutions | 1 |
| Karma Given | 10 |
| Karma Received | 23 |
| Member Since | 05-07-2010 |
Activity Feed
- Got Karma for Using CIDR in a lookup table. 11-19-2020 03:11 PM
- Karma Re: Multi-Site Cluster: What would I configure for replication and search factor with 1 peer at each site? for mahamed_splunk. 06-05-2020 12:47 AM
- Got Karma for Re: how to calculate the percentage bandwidth utilization for both incoming and outgoing traffics from a switch/router?. 06-05-2020 12:47 AM
- Got Karma for Is It Possible To Use A Simple XML Form Input Name As A Token/Variable. 06-05-2020 12:47 AM
- Got Karma for Is It Possible To Use A Simple XML Form Input Name As A Token/Variable. 06-05-2020 12:47 AM
- Got Karma for Splunking OpenVPN Server Logs. 06-05-2020 12:47 AM
- Karma Re: event size limit for lguinn2. 06-05-2020 12:46 AM
- Karma Re: Day Of Month Field Without A Leading Zero for itinney. 06-05-2020 12:46 AM
- Karma Re: Parallel Coordinates in a simple XML form for nfilippi_splunk. 06-05-2020 12:46 AM
- Karma Re: Insert % sign for each result in a specific column for gfreitas. 06-05-2020 12:46 AM
- Karma Re: When does splunk add double quotation in outputcsv? for MuS. 06-05-2020 12:46 AM
- Got Karma for Re: BUG: searchTemplate in a form can not use report acceleration?. 06-05-2020 12:46 AM
- Got Karma for Re: BUG: searchTemplate in a form can not use report acceleration?. 06-05-2020 12:46 AM
- Got Karma for Splunk Search For Exact Word. 06-05-2020 12:46 AM
- Karma Re: How to convert second to HH:MM:SS format in the exported search result? for SK110176. 06-05-2020 12:45 AM
- Karma Re: How to use Splunk for root cause analysis for SAP application? for sapninja. 06-05-2020 12:45 AM
- Karma Re: How do I detect a gap in a sequence of items? for raoul. 06-05-2020 12:45 AM
- Karma Re: Right Align Table Cells for lukeh. 06-05-2020 12:45 AM
- Got Karma for Constant Horizontal Line On Line Chart. 06-05-2020 12:45 AM
- Got Karma for Constant Horizontal Line On Line Chart. 06-05-2020 12:45 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 2 | |||
| 1 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 5 | |||
| 9 | |||
| 0 |
11-18-2015
02:33 AM
DS runs 6.3, Forwarders run 6.2
... View more
11-16-2015
02:08 PM
Any resolution on this agarrison?
... View more
08-20-2015
04:07 PM
Getting a HTTP Status 403 error when clicking on the link
... View more
08-19-2015
02:29 PM
Sorry, I can't see the link below. Its a broken link for me
... View more
08-19-2015
05:09 AM
Hmmmm. The only other suggestion I can make (other than getting a sample of the data and the REGEX you are using and helping debug, which I am happy help with BTW) is to ask about where the extractions are being stored. Specifically, are they in the props.conf of the app in which you are executing the search?
... View more
08-19-2015
05:02 AM
Does the sourcetype name remain the same for events over time? That is, is the sourcename for events that occur today (when extraction is not working) the same as the sourcename of events that occur yesterdau (when extraction is working)
... View more
08-19-2015
04:55 AM
Do extractions work for events older than 24 hours? Or do they just not work at all for any event, no matter their timestamp?
... View more
08-18-2015
07:37 PM
Are you defining extractions against sourcetype or source? Are you able to provide the configuration you have defined in your props.conf?
... View more
08-18-2015
07:35 PM
1 Karma
Hi bidahor13
A couple of observations:
1. It looks like the transferedBitsIn and transferedBitsOut fields are calculating a per second value. If this the case, then using average would be more appropriate than sum in your timechart
2. If you want to calculate a percentage utilisation, then you need to divide bandwidth used by bandwidth total
It would be a good to get a sample of data so we can give more specific pointers
... View more
05-20-2015
08:33 PM
Hi
The current version (version 1) of Splunk Add-on for Microsoft SQL Server supports SQL Server 2008R2 and 2012. Is anyone able to give me an indication if and when SQL Server 2014 will be supported by this add on?
Thanks
SAJB
... View more
03-31-2015
02:28 PM
Any luck with this? I'm looking into Splunk-PRTG integration at the moment and was hoping not to have to re-invent the wheel if possible.
... View more
10-15-2014
10:27 PM
@yuwtennis Did you end up getting an answer for this?
... View more
10-13-2014
04:25 PM
Hi All
I have a requirement that a result set be exported in tab separated format (TSV) rather than comma separated format (CSV). Does anyone have any suggestions on how this could be done?
SAJB
... View more
09-17-2014
07:08 PM
Yep. I can confirm that the token_safe you specified in the XML makes it work. Thanks so much!
... View more
I have heard back from Splunk Support about this.
This issue has been identified as SPL-88017: Report acceleration will not be used when post process search is used in the dashboard.
This bug has been resolved in development and the fix will be released in version 6.1.4.
Not long to go!!!
Edit 1st Oct 2014: I have just downloaded 6.1.4 and can confirm that report acceleration does now work with search templates.
... View more
Hi @laserval and @alexiri, I'm also experiencing the same issue, did you ever get to the bottom of it?
... View more
07-29-2014
06:37 PM
2 Karma
Hi
I have a Simple XML dashboard with the following form input:
<input type="dropdown" token="stat" searchWhenChanged="true">
<label>Average Or Median:</label>
<choice value="avg">Average</choice>
<choice value="median">Median</choice>
<default>avg</default>
</input>
I would like to have a variable/token in a Chart Title so that the variable changes whenever someone selects something different in the form input. I can do it with the value - In the above case I could use $stat$ in the chart (i.e. avg or median). However, what I would like to know is whether it is possible to use the Name (i.e. Average or Median) as a variable/token.
Thanks
Shaun
... View more
- Tags:
- form-input
- simple-xml
07-14-2014
08:35 PM
1 Karma
Hi All
I've started ingest OpenVPN server logs. I've done a preliminary search on apps, answers and the Net at large and cannot find anything (field extractions, log structure). Has anyone had any experience in splunking/extracting openVPN logs that they would care to share with me?
... View more
- Tags:
- vpn
11-21-2012
03:04 PM
CCMS (and far more!!) data can be retrieved from SAP via the SAPninja data collection framework and then indexed into Splunk via RFC or direct file indexing. Please refer to this answer for further discussion
... View more
11-21-2012
02:59 PM
The good thing about SAP is that it logs a lot of information about internal activity and performance. Unfortunately, it is not readily accessible.
A Project was launched in late 2011 called SAPninja, which provides a way of harvesting SAP log and performance data and staging it in a way for ready ingestion by Splunk (and other applications). There's also a Splunk App launched at the same time called Splunk For SAP. Check out this thread for further discussion.
... View more
