cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
nathbe01
Explorer
Member since: ‎03-03-2020
‎06-12-2020
Community Statistics
Posts 4
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎03-03-2020
Activity Feed
View All

Re: Need help with REX, PLEASE

by in Splunk Search
‎06-12-2020 10:15 AM
‎06-12-2020 10:15 AM
That worked, Thank you ... View more

Need help with REX, PLEASE

by in Splunk Search
‎06-12-2020 09:43 AM
‎06-12-2020 09:43 AM
Hello, I am new to using REX wich is I believe is what I need. I have a field that has data that looks like this... 10.231.247.162--WTLDNDAA001--Can't ping DSLAM 10.44.69.250--TCSUAZMS--VisibilityOnly--Can't ping DSLAM  10.44.69.250--TCSUAZMS--Can't ping DSLAM--VisibilityOnly  172.31.247.148--CLSPCO32H01.2--Can't ping DSLAM  172.31.166.155--RSBGORBU--Can't ping DSLAM  I want my table to ONLY show whats between the hyphens Example I want to get  WTLDNDAA-001 TCSUAZMS CLSPCO32H01.2 RSBGORBU Can anybody help me with creating a rex that removes everything not between the the 2 sets of hyphens. Would be greatly appreciated!! ... View more
Labels

Re: Search 2 date fields and find amount of days m...

by in Splunk Search
‎03-03-2020 08:46 PM
‎03-03-2020 08:46 PM
I should add, I have to go by START_TIME and END_TIME as the standard _Time for the event will not be accurate as these events update every 15 minutes so only the START_TIME and END_TIME fields give accurate times ... View more

Search 2 date fields and find amount of days minus...

by in Splunk Search
‎03-03-2020 08:45 PM
‎03-03-2020 08:45 PM
Hello, I need to formulate a search there I have 2 date fields one is START_TIME 2020-02-28 19:19:58.0 other field is END_TIME 2020-03-03 19:19:58.0. What I need to do is find out is the START_TIME is before the weekend and the END_TIME is after the weekend. And chart my results based on that including other fields. I only want results where the START_TIME is before the weekend and the END_TIME is after the weekend. Events where the START_TIME and the END_TIME and before or during the weekends can be excluded. For examples START_TIME is 2020-02-28 19:19:58.0 but END_TIME is 2020-02-2919:19:58.0 would not count as it was started and ended during the weekend. I only want events started before and ended after the weekend to count. Any help would be appreciated ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-12-2020 10:50 AM
Karma given to
View All