Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About vijaysubramania
vijaysubramania
Path Finder
Member since:
04-13-2020
05-10-2021
Community Statistics
| Posts | 26 |
| Solutions | 1 |
| Karma Given | 9 |
| Karma Received | 1 |
| Member Since | 04-13-2020 |
Activity Feed
- Posted use input lookup table to calculate success% on Getting Data In. 05-10-2021 12:58 AM
- Tagged use input lookup table to calculate success% on Getting Data In. 05-10-2021 12:58 AM
- Tagged use input lookup table to calculate success% on Getting Data In. 05-10-2021 12:58 AM
- Posted Re: Write to Output lookup on Getting Data In. 05-03-2021 10:28 PM
- Posted Re: Write to Output lookup on Getting Data In. 04-28-2021 04:06 PM
- Posted Re: Write to Output lookup on Getting Data In. 04-14-2021 12:37 PM
- Posted Write to Output lookup on Getting Data In. 04-14-2021 11:12 AM
- Tagged Write to Output lookup on Getting Data In. 04-14-2021 11:12 AM
- Posted Re: How to use INPUTLOOKUP command in splunk on Splunk Search. 03-17-2021 03:05 PM
- Posted How to create a custom alert when count of responseStatus>20? on Alerting. 08-06-2020 10:36 AM
- Tagged How to create a custom alert when count of responseStatus>20? on Alerting. 08-06-2020 10:36 AM
- Karma Re: Count the total no of values in multivalue field - json response for to4kawa. 08-04-2020 01:50 PM
- Posted Re: Count the total no of values in multivalue field - json response on Splunk Search. 08-04-2020 12:02 PM
- Karma Re: Count the total no of values in multivalue field - json response for thambisetty. 08-04-2020 11:58 AM
- Posted Re: Count the total no of values in multivalue field - json response on Splunk Search. 08-04-2020 12:35 AM
- Tagged Re: Count the total no of values in multivalue field - json response on Splunk Search. 08-04-2020 12:35 AM
- Tagged Re: Count the total no of values in multivalue field - json response on Splunk Search. 08-04-2020 12:35 AM
- Posted Re: How to convert epoch time to human readable format in search query? on Splunk Search. 08-04-2020 12:30 AM
- Karma Re: How to convert epoch time to human readable format in search query? for bowesmana. 08-04-2020 12:28 AM
- Posted Re: How to convert epoch time to human readable format in search query? on Splunk Search. 08-03-2020 11:36 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
05-10-2021
12:58 AM
Hi Team, I have created the lookupfile which i created with Status count of each status codes, Application Name and day. I want to calculate the success % from the data I saved without performing any transpose as I am capturing all the http status codes each day. The purpose is as the volume of data is too high, I am using lookup table to reduce the load and faster response | inputlookup MC_V2_DAILY.csv
... View more
04-28-2021
04:06 PM
Thanks @aasabatini . I actually tried other way too using timechart and look up the statstics gives the data in the format i need. But, will this data can be saved in the outputlookup file. I want to use this outputlookup file to plot the charts for multiple services reporting "my search" | dedup requestId | timechart span=1h count by responseStatus limit=0 your query "my search" | dedup requestId | stats count by responseStatus limit=0 | transpose header_field=responseStatus outputlookup "mysearch" | | dedup requestId | stats count by responseStatus limit=0 | transpose header_field=responseStatus | outputlookup "ecpstats.csv" append=true
... View more
04-14-2021
12:37 PM
Thanks for the inputs. But, I want to see the data count in horizontal format with count. 200 201 202 203 204 Total Application Date Day Time RequestURL 1 2 4 5 8 20 ECP 04/14/21 Wed 14:00 Entitlements
... View more
04-14-2021
11:12 AM
HI Team, Need one help, I want to run a schedule for the below search events every 1 hr and capture the inportant fields like responseStatus, requestMethod, requestURL, servicePath, Total request, hour, day, etc. and write to outputfile in csv. So that I can use this report for my dashboards. The idea behind this is becase, our application logs millions of events per day and if we want to look for the historical data for reports, it takes long time to run and load the dashboard. I want to run this every hour and append the data it in the existing csv file. I tried the lookup but didn't work for me. Any solutions welcome time=2021-04-14T17:57:07+00:00 requestId=751411798490203 traceId=751411798490203 servicePath="/ecp/" remoteAddr=71.74.45.8 clientIp=24.161.128.196 clientAppVersion=NOT_AVAILABLE app_version=- apiKey=72c07648-ea14-34f2-abed-e38263580b5c oauth_leg=2-legged authMethod=oauth apiAuth=true apiAuthPath=/ecp/ oauth_version=1.0 target_bg=default requestHost=api.spectrum.net requestPort=8080 requestMethod=GET requestURL="/ecp/entitlements/v2/entitlements?divisionId=NEW.004&accountNumber=28290420" requestSize=560 responseStatus=200 responseSize=8422 responseTime=0.025 userAgent="IPVS" mapTEnabled="F" charterClientIp="V-1|IP-24.161.128.196|SourcePort-|TrafficOriginID-24.161.128.196" sourcePort="" oauth_consumer_key="72c27648-ea14-44f2-abed-e38263580b5c" x_pi_auth_failure="-" pi_log="pi_ngxgw_access"
... View more
- Tags:
- lookup
Labels
- Labels:
-
field extraction
03-17-2021
03:05 PM
Hi, If i want to count the no of responseStatus, how do you achieve that. For exaple I want to update the file with No of 200, 201, 203, 204, every 10 mins. I want to use this data in future to plot my Charts
... View more
08-06-2020
10:36 AM
My custom alert is triggering mails for zero events. Not sure why it's printing for 0 when responseStatus > 399
I have created the alert with condition responseStatus 499>20 ..Trigger an email. But it's printing zero record as well for every minute and triggering mail. Is it because of running the query in timechart instead of using stats count or we should not create with stats count
(responseStatus>399)| dedup requestId | stats count by responseStatus
How to set custom alert for this?
... View more
- Tags:
- custom alert
Labels
- Labels:
-
alert condition
08-04-2020
12:02 PM
@thambisetty Thanks Buddy, I got an idea from your query and rewrote it. It works perfect now 😊. I couldn't execute the last 3 lines of query ( | mvexpand packages | stats count, sum(packages) as sum| table count, sum) So, I rewrote it. | rex "packages\":\[(?<packages>[^\]]+)" | rex mode=sed field=packages "s/\"//g" | eval NoOfPackages=mvcount(packages) | eval NoOfPackages=mvcount(split(packages,",")) | table NoOfPackages packages
... View more
08-04-2020
12:35 AM
This value is dynamic. I just need to split and count the no of channels present within the packages
... View more
08-04-2020
12:30 AM
@bowesmana Works like a charm. I didn't think of applying basic math skills 🙂 |eval start=strftime(viewingPeriodStart/1000,"%a,%d %b %Y %H:%M:%S") |eval end=strftime(viewingPeriodEnd/1000,"%a,%d %b %Y %H:%M:%S") |eval diff=viewingPeriodEnd/1000-viewingPeriodStart/1000 |eval hours=floor(diff/3600) |eval minutes=floor((diff % 3600)/60) |eval seconds=diff % 60
... View more
08-03-2020
11:36 PM
Thats Correct. |eval start=strftime(viewingPeriodStart/1000,"%a,%d %b %Y %H:%M:%S") |eval end=strftime(viewingPeriodEnd/1000,"%a,%d %b %Y %H:%M:%S") Also, How do i find difference between 2 times in hrs?
... View more
08-03-2020
11:34 PM
This Works. How do I calculate if I want to see the difference between 2 epoch times and displayed in hrs
... View more
07-31-2020
09:46 AM
Thanks Rich. But, this is dynamic data within the body and it varies for each customer. Will this work?
... View more
07-31-2020
01:09 AM
HI, I need to get the count of all the packages from the json body and display the total no of packages available for that transaction ["143","144","172","205","241","350","364","365","385","449","486","683","764","1043","1220","1241","1287","1309","1381","1432","1456","1509","1578","1641","1727","1753","2835","3299","3309","3566","3626","3897","4127","4349","4456","4805","4835","4870","4872","4890","4954","5254","5485","5486","5487","5488","5489","5490","5491","5492","5493","5494","5495","5496"] Log: [2020-07-31 07:58:47,906] [INFO ] [http-nio-8080-exec-31] [txnId=1596182327895-1558302899] [clientIp=172.27.159.170] [accountNumber=] [charterId=] [sessionHashCode=] [methodPath=/services/v2/entitlements/packages/{macAddress}:GET] TxnLogging - [txnmarker=TXNEnd] [timestamp=Fri Jul 31 07:58:47 UTC 2020] [application=/lrmmiddle/] [methodPath=/services/v2/entitlements/packages/{macAddress}:GET] [duration=11] [clientIp=172.27.159.170] [entity=Response Status:200] [txnId=1596182327895-1558302899] [status=200] [responseJson={"macAddress":"3438B79C5638","blockAll":false,"packages":["143","144","172","205","241","350","364","365","385","449","486","683","764","1043","1220","1241","1287","1309","1381","1432","1456","1509","1578","1641","1727","1753","2835","3299","3309","3566","3626","3897","4127","4349","4456","4805","4835","4870","4872","4890","4954","5254","5485","5486","5487","5488","5489","5490","5491","5492","5493","5494","5495","5496"],"statusCode":null,"header":{"status":"SUCCESS","transaction":{"statusMessage":"0","returnCode":"0","returnMessage":"0","exception":null,"id":"1596182327895-1558302899","dateTime":"2020-07-31T07:58:47.906Z","duration":11,"hostname":"lrmmiddle-f56fd7d48-s2r4l"},"sourceTransaction":null}}]
... View more
- Tags:
- json
Labels
- Labels:
-
count
06-25-2020
03:56 PM
Got it..Thank you very much Rich and Yeahnah 🙂
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-10-2021
05:44 AM
|
Karma given to
