Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About vijaysubramania
vijaysubramania
Path Finder
Member since:
04-13-2020
Friday
Community Statistics
| Posts | 20 |
| Solutions | 0 |
| Karma Given | 9 |
| Karma Received | 1 |
| Member Since | 04-13-2020 |
Activity Feed
- Posted How to create a custom alert when count of responseStatus>20? on Alerting. Thursday
- Tagged How to create a custom alert when count of responseStatus>20? on Alerting. Thursday
- Karma Re: Count the total no of values in multivalue field - json response for to4kawa. Tuesday
- Posted Re: Count the total no of values in multivalue field - json response on Splunk Search. Tuesday
- Karma Re: Count the total no of values in multivalue field - json response for thambisetty. Tuesday
- Posted Re: Count the total no of values in multivalue field - json response on Splunk Search. a week ago
- Tagged Re: Count the total no of values in multivalue field - json response on Splunk Search. a week ago
- Tagged Re: Count the total no of values in multivalue field - json response on Splunk Search. a week ago
- Posted Re: How to convert epoch time to human readable format in search query? on Splunk Search. a week ago
- Karma Re: How to convert epoch time to human readable format in search query? for bowesmana. a week ago
- Posted Re: How to convert epoch time to human readable format in search query? on Splunk Search. a week ago
- Karma Re: How to convert epoch time to human readable format in search query? for Dev_Choudhary. a week ago
- Karma Re: How to convert epoch time to human readable format in search query? for nick405060. a week ago
- Posted Re: How to convert epoch time to human readable format in search query? on Splunk Search. a week ago
- Karma Re: How to convert epoch time to human readable format in search query? for mmensch. a week ago
- Posted Re: Count the total no of values in multivalue field - json response on Splunk Search. 2 weeks ago
- Posted Count the total no of values in multivalue field - json response on Splunk Search. 2 weeks ago
- Posted Re: I need to split the requestPath eliminating the data on Splunk Search. 06-25-2020 03:56 PM
- Karma Re: I need to split the requestPath eliminating the data for yeahnah. 06-25-2020 03:56 PM
- Karma Re: I need to split the requestPath eliminating the data for richgalloway. 06-25-2020 03:55 PM
Thursday
My custom alert is triggering mails for zero events. Not sure why it's printing for 0 when responseStatus > 399
I have created the alert with condition responseStatus 499>20 ..Trigger an email. But it's printing zero record as well for every minute and triggering mail. Is it because of running the query in timechart instead of using stats count or we should not create with stats count
(responseStatus>399)| dedup requestId | stats count by responseStatus
How to set custom alert for this?
... View more
- Tags:
- custom alert
Labels
Tuesday
@thambisetty Thanks Buddy, I got an idea from your query and rewrote it. It works perfect now 😊 . I couldn't execute the last 3 lines of query ( | mvexpand packages | stats count, sum(packages) as sum| table count, sum) So, I rewrote it. | rex "packages\":\[(?<packages>[^\]]+)" | rex mode=sed field=packages "s/\"//g" | eval NoOfPackages=mvcount(packages) | eval NoOfPackages=mvcount(split(packages,",")) | table NoOfPackages packages
... View more
a week ago
This value is dynamic. I just need to split and count the no of channels present within the packages
... View more
a week ago
@bowesmana Works like a charm. I didn't think of applying basic math skills 🙂 |eval start=strftime(viewingPeriodStart/1000,"%a,%d %b %Y %H:%M:%S") |eval end=strftime(viewingPeriodEnd/1000,"%a,%d %b %Y %H:%M:%S") |eval diff=viewingPeriodEnd/1000-viewingPeriodStart/1000 |eval hours=floor(diff/3600) |eval minutes=floor((diff % 3600)/60) |eval seconds=diff % 60
... View more
a week ago
Thats Correct. |eval start=strftime(viewingPeriodStart/1000,"%a,%d %b %Y %H:%M:%S") |eval end=strftime(viewingPeriodEnd/1000,"%a,%d %b %Y %H:%M:%S") Also, How do i find difference between 2 times in hrs?
... View more
a week ago
This Works. How do I calculate if I want to see the difference between 2 epoch times and displayed in hrs
... View more
2 weeks ago
Thanks Rich. But, this is dynamic data within the body and it varies for each customer. Will this work?
... View more
2 weeks ago
HI, I need to get the count of all the packages from the json body and display the total no of packages available for that transaction [" 143 "," 144 "," 172 "," 205 "," 241 "," 350 "," 364 "," 365 "," 385 "," 449 "," 486 "," 683 "," 764 "," 1043 "," 1220 "," 1241 "," 1287 "," 1309 "," 1381 "," 1432 "," 1456 "," 1509 "," 1578 "," 1641 "," 1727 "," 1753 "," 2835 "," 3299 "," 3309 "," 3566 "," 3626 "," 3897 "," 4127 "," 4349 "," 4456 "," 4805 "," 4835 "," 4870 "," 4872 "," 4890 "," 4954 "," 5254 "," 5485 "," 5486 "," 5487 "," 5488 "," 5489 "," 5490 "," 5491 "," 5492 "," 5493 "," 5494 "," 5495 "," 5496 "] Log: [ 2020-07-31 07:58:47 , 906 ] [ INFO ] [ http-nio-8080-exec-31 ] [ txnId=1596182327895-1558302899 ] [ clientIp=172.27.159.170 ] [ accountNumber= ] [ charterId= ] [ sessionHashCode= ] [ methodPath=/services/v2/entitlements/packages/ { macAddress } :GET ] TxnLogging - [ txnmarker=TXNEnd ] [ timestamp=Fri Jul 31 07:58:47 UTC 2020 ] [ application=/lrmmiddle/ ] [ methodPath=/services/v2/entitlements/packages/ { macAddress } :GET ] [ duration=11 ] [ clientIp=172.27.159.170 ] [ entity=Response Status:200 ] [ txnId=1596182327895-1558302899 ] [ status=200 ] [ responseJson= {" macAddress " : " 3438B79C5638 "," blockAll " :false ," packages " : [" 143 "," 144 "," 172 "," 205 "," 241 "," 350 "," 364 "," 365 "," 385 "," 449 "," 486 "," 683 "," 764 "," 1043 "," 1220 "," 1241 "," 1287 "," 1309 "," 1381 "," 1432 "," 1456 "," 1509 "," 1578 "," 1641 "," 1727 "," 1753 "," 2835 "," 3299 "," 3309 "," 3566 "," 3626 "," 3897 "," 4127 "," 4349 "," 4456 "," 4805 "," 4835 "," 4870 "," 4872 "," 4890 "," 4954 "," 5254 "," 5485 "," 5486 "," 5487 "," 5488 "," 5489 "," 5490 "," 5491 "," 5492 "," 5493 "," 5494 "," 5495 "," 5496 "]," statusCode " :null ," header " : {" status " : " SUCCESS "," transaction " : {" statusMessage " : " 0 "," returnCode " : " 0 "," returnMessage " : " 0 "," exception " :null ," id " : " 1596182327895-1558302899 "," dateTime " : " 2020-07-31T07:58:47.906Z "," duration " :11 ," hostname " : " lrmmiddle-f56fd7d48-s2r4l "}," sourceTransaction " :null }}]
... View more
- Tags:
- json
Labels
06-25-2020
03:56 PM
Got it..Thank you very much Rich and Yeahnah 🙂
... View more
06-24-2020
10:38 PM
Thanks Rich..I tried the option you gave me. but it's didn't display the request Path nor trimmed it. My Search "requestPath":"/ecp/stream/v1/purchase*" | rex "requestPath":"(?<reqPath>(?:\/[^\/]+){4})" | stats count by reqPath. I can see the events but it's not extracting
... View more
06-24-2020
10:47 AM
Hi, Need one Help. I have the below mentioned requestPath where I am able to capture the whole path..But can't take a count if there is different Div ID and Account No. I just to extract only "/ecp/stream/v1/purchase/" and make a count of it. so that I can get the different response status "requestPath":"/ecp/stream/v1/purchase/NTX.8160/8260180902213447","responseStatus":204,"responseSize":0,"responseContent":"","responseTime":27} Show syntax highlighted rex field=_raw "requestPath":"(?<reqPath>[^?|^\s|^"]+)"
... View more
- Tags:
- field extraction
Labels
06-22-2020
11:05 AM
Thanks. I am able to get that in milliseconds but I want to convert the response time to Percent as well for reporting and compare it with earlier week, How to achieve that?
... View more
05-20-2020
10:46 AM
Thanks maityayan. This works,
I did it in other way around but only problem is printing in 6 decimals
|stats count(eval(responseStatus=200)) as Success, count as Total by time
|eval Percent=round((Success/Total)*100,2), Failure=Total-Success |eval Date =strftime(time, "%m/%d/%y")
|timechart avg(Percent) AS Successrate%, avg(Failure) AS Failed-Session-Count
94.680000 617.000000
... View more
05-20-2020
10:31 AM
Thanks Dwaddle!
... View more
05-18-2020
03:37 PM
Hi,
I need to write a search that shows both the success percentage and failure count in a dual axis combo chart.
I am able to do it independently, but unable to do it in a combo chart, which is only showing the trend for the last 7 days (y-axis) while failure events will give the overall count for the day (x-axis).
"requestMethod=POST AND "/customerentitlementsservice/v1/ces/account*" responseStatus"
Success trend:
|dedup requestId
|eval FailureCount=if((responseStatus != 200) OR like(Status,"%,%"),1,0)
|bin _time span=1d
|stats count as Total, sum(FailureCount) as Fail by _time
|eval successrate=Round(((Total-Fail)*100)/Total,2 )
|eval Date =strftime(_time, "%m/%d/%y")
|chart values(successrate) AS Successrate% by Date
... View more
04-15-2020
08:59 AM
Will check and let you know. Thank you.
... View more
04-14-2020
02:16 PM
Thanks. Tried the option but getting the below response for all search
Error in 'rex' command: Encountered the following error while compiling the regex 'divisionID\"\s:\s\"(?[^]+)': Regex: missing terminating ] for character class.
Could not load lookup=lookup_severity
... View more
04-14-2020
02:14 PM
Thanks Rich. I tried your query but giving the below mentioned error for all search
| rex "divisionID\\"\s:\s\\"(?[^\]+)"
| rex "accountNumber\\"\s:\s\\"(?[^\]+)"
| rex "accountStatus\\"\s:\s\\"(?[^\]+)"
| rex "ppvCreditLimit\\"\s:\s(?[^\]+)"
| rex "ppvRemainingCreditLimit\\"\s:\s(?[^\]+)" | table ppvCreditLimit ppvRemainingCreditLimit divisionID accountNumber accountStatus
Error in 'rex' command: Encountered the following error while compiling the regex 'divisionID\"\s:\s\"(?[^]+)': Regex: missing terminating ] for character class.
Could not load lookup=lookup_severity
... View more
04-14-2020
08:47 AM
Hi,
Need help in extracting the values from the below mentioned tags
divisionID - Value: ABC.202
accountNumber Value: 111122222
accountStatus Value: Active
ppvCreditLimit Value: 0.00
ppvRemainingCreditLimit Value: 0.00
":"{
\n\"getAccountResponse\" : {\n \"account\" : {\n \"divisionID\" : \"ABC.202\",\n \"accountNumber\" : \"111122222\",\n \"customerNumber\" : \"19118902\",\n \"locationNumber\" : \"191189\",\n \"billingStationLevel0Code\" : \"202\",\n \"billingStationLevel1Code\" : \"50\",\n \"billingStationLevel2Code\" : \"05\",\n \"sourceFTACode\" : \"005\",\n \"accountType\" : {\n \"billerCode\" : \"R\",\n \"enterpriseCode\" : \"RESIDENTIAL\",\n \"description\" : \"Residential\",\n \"longDescription\" : null\n },\n \"accountStatus\" : \"Active\",\n \"billerAccountStatus\" : \"A\",\n \"connectDate\" : \"2019-10-31\",\n \"classification\" : \"SFU\",\n \"name\" : {\n \"last\" : \"raft\",\n \"first\" : \"xxx\"\n },\n \"serviceAddress\" : {\n \"line1\" : \" SAGE ST\",\n \"city\" : \"COL\",\n \"state\" : \"SC\",\n \"postalCode\" : \"211051132\"\n },\n \"phone\" : [ {\n \"number\" : \"9999999999\",\n \"type\" : \"Home\"\n } ],\n \"lineOfBusinessDetail\" : [ {\n \"type\" : {\n \"billerCode\" : \"C\",\n \"enterpriseCode\" : \"VIDEO\",\n \"description\" : \"Video\",\n \"longDescription\" : \"Video\"\n },\n \"status\" : {\n \"billerCode\" : \"1\",\n \"enterpriseCode\" : \"LOBCONNECTED\",\n \"description\" : \"LOB Connected\",\n \"longDescription\" : \"LOB Connected\"\n }\n }, {\n \"type\" : {\n \"billerCode\" : \"D\",\n \"enterpriseCode\" : \"HSD\",\n \"description\" : \"HSD\",\n \"longDescription\" : \"HSD\"\n },\n \"status\" : {\n \"billerCode\" : \"1\",\n \"enterpriseCode\" : \"LOBCONNECTED\",\n \"description\" : \"LOB Connected\",\n \"longDescription\" : \"LOB Connected\"\n }\n } ],\n \"experianPin\" : \"xxxxx140299\",\n \"accountDetail\" : {\n \"totalCurrentBalance\" : 212.31,\n \"totalPendingAmount\" : 0.00,\n \"totalLastPayment\" : -27.00,\n \"totalAmountDue\" : 312.31,\n \"ppvCreditLimit\" : 0.00,\n \"ppvRemainingCreditLimit\" : 0.00,\n \"language\" : {\n \"billerCode\" : \"ENGL\",\n \"enterpriseCode\" : \"ENGLISH\",\n \"description\" : \"English\",\n \"longDescription\" : \"English\"\n },\n \"auditCreationDate\" : \"2019-10-31\",\n \"locationType\" : {\n \"billerCode\" : \"J\",\n \"enterpriseCode\" : \"RSSINFAM\",\n \"description\" : \"Single Family Home\",\n \"longDescription\" : \"Single Family Home\"\n },\n \"bulkFlag\" : \"N\",\n \"vipCode\" : {\n \"billerCode\" : \"1\",\n \"enterpriseCode\" : \"OWNER\",\n \"description\" : \"Owner\",\n \"longDescription\" : \"Owner\"\n },\n \"billingDetails\" : [ {\n \"currentStatementId\" : \"151441\",\n \"statementCode\" : \"1\",\n \"cycleDay\" : \"1\",\n \"fromDate\" : \"2020-04-01\",\n \"thruDate\" : \"2019-04-30\",\n \"amountDue\" : 312.31,\n \"frequency\" : {\n \"billerCode\" : \"M\",\n \"enterpriseCode\" : \"MONTHLY\",\n \"description\" : \"Monthly Billing\",\n \"longDescription\" : \"Monthly Billing\"\n },\n \"dunningGroup\" : \"0\",\n \"futureDatedFlag\" : \"N\",\n \"paperlessFlag\" : \"N\",\n \"currentBalance\" : 312.31,\n \"lastPaymentDate\" : \"2020-03-09\",\n \"lastPaymentAmount\" : -27.00,\n \"paymentDueDate\" : \"2020-04-18\",\n \"pendingPayment\" : 0.00,\n \"cycle1Amount\" : 156.08,\n \"cycle2Amount\" : 0.00,\n \"cycle3Amount\" : 0.00,\n \"delinquencyAmount\" : 156.08,\n \"delinquencyStatus\" : {\n \"billerCode\" : \"_\",\n \"enterpriseCode\" : \"NORMAL\",\n \"description\" : \"Normal\",\n \"longDescription\" : \"Normal\"\n },\n \"daysDelinquent\" : 44,\n \"billToName\" : {\n \"first\" : \"xxx raft\"\n },\n \"billToAddress\" : {\n \"line1\" : \"SAGE ST\",\n \"city\" : \"COL\",\n \"state\" : \"SC\",\n \"postalCode\" : \"211051132\"\n },\n \"statementHold\" : {\n \"billerCode\" : \"P\",\n \"enterpriseCode\" : \"PAPERONLY\",\n \"description\" : \"Paper Bill Only\",\n \"longDescription\" : \"Paper Bill Only\"\n },\n \"promiseAmount\" : 0.00,\n \"promiseActivityCode\" : \"41\",\n \"billingCurrentBalance\" : 312.31,\n \"statementBalance\" : 312.31,\n \"electronicFlag\" : \"N\",\n \"adjustedDelinquencyAmount\" : 156.08\n } ]\n },\n \"accountCategory\" : \"Re\",\n \"accountSegment\" : \"Re\"\n },\n \"sourceSystemTimeZone\" : \"-04:00\"\n }\n}",
"responseTime": 551
}
... View more
04-13-2020
10:11 PM
Hi,
I need to extract the values for the below-mentioned keys from the below-mentioned log.
I used spath but it's not working. Please assist in the same.
divisionID
accountNumber
ppvCreditLimit
ppvRemainingCreditLimit
accountStatus
Note: some of the data has been masked for security
":"{
\n\"getAccountResponse\" : {\n \"account\" : {\n \"divisionID\" : \"ABC.202\",\n \"accountNumber\" : \"111122222\",\n \"customerNumber\" : \"19118902\",\n \"locationNumber\" : \"191189\",\n \"billingStationLevel0Code\" : \"202\",\n \"billingStationLevel1Code\" : \"50\",\n \"billingStationLevel2Code\" : \"05\",\n \"sourceFTACode\" : \"005\",\n \"accountType\" : {\n \"billerCode\" : \"R\",\n \"enterpriseCode\" : \"RESIDENTIAL\",\n \"description\" : \"Residential\",\n \"longDescription\" : null\n },\n \"accountStatus\" : \"Active\",\n \"billerAccountStatus\" : \"A\",\n \"connectDate\" : \"2019-10-31\",\n \"classification\" : \"SFU\",\n \"name\" : {\n \"last\" : \"raft\",\n \"first\" : \"xxx\"\n },\n \"serviceAddress\" : {\n \"line1\" : \" SAGE ST\",\n \"city\" : \"COL\",\n \"state\" : \"SC\",\n \"postalCode\" : \"211051132\"\n },\n \"phone\" : [ {\n \"number\" : \"9999999999\",\n \"type\" : \"Home\"\n } ],\n \"lineOfBusinessDetail\" : [ {\n \"type\" : {\n \"billerCode\" : \"C\",\n \"enterpriseCode\" : \"VIDEO\",\n \"description\" : \"Video\",\n \"longDescription\" : \"Video\"\n },\n \"status\" : {\n \"billerCode\" : \"1\",\n \"enterpriseCode\" : \"LOBCONNECTED\",\n \"description\" : \"LOB Connected\",\n \"longDescription\" : \"LOB Connected\"\n }\n }, {\n \"type\" : {\n \"billerCode\" : \"D\",\n \"enterpriseCode\" : \"HSD\",\n \"description\" : \"HSD\",\n \"longDescription\" : \"HSD\"\n },\n \"status\" : {\n \"billerCode\" : \"1\",\n \"enterpriseCode\" : \"LOBCONNECTED\",\n \"description\" : \"LOB Connected\",\n \"longDescription\" : \"LOB Connected\"\n }\n } ],\n \"experianPin\" : \"xxxxx140299\",\n \"accountDetail\" : {\n \"totalCurrentBalance\" : 212.31,\n \"totalPendingAmount\" : 0.00,\n \"totalLastPayment\" : -27.00,\n \"totalAmountDue\" : 312.31,\n \"ppvCreditLimit\" : 0.00,\n \"ppvRemainingCreditLimit\" : 0.00,\n \"language\" : {\n \"billerCode\" : \"ENGL\",\n \"enterpriseCode\" : \"ENGLISH\",\n \"description\" : \"English\",\n \"longDescription\" : \"English\"\n },\n \"auditCreationDate\" : \"2019-10-31\",\n \"locationType\" : {\n \"billerCode\" : \"J\",\n \"enterpriseCode\" : \"RSSINFAM\",\n \"description\" : \"Single Family Home\",\n \"longDescription\" : \"Single Family Home\"\n },\n \"bulkFlag\" : \"N\",\n \"vipCode\" : {\n \"billerCode\" : \"1\",\n \"enterpriseCode\" : \"OWNER\",\n \"description\" : \"Owner\",\n \"longDescription\" : \"Owner\"\n },\n \"billingDetails\" : [ {\n \"currentStatementId\" : \"151441\",\n \"statementCode\" : \"1\",\n \"cycleDay\" : \"1\",\n \"fromDate\" : \"2020-04-01\",\n \"thruDate\" : \"2019-04-30\",\n \"amountDue\" : 312.31,\n \"frequency\" : {\n \"billerCode\" : \"M\",\n \"enterpriseCode\" : \"MONTHLY\",\n \"description\" : \"Monthly Billing\",\n \"longDescription\" : \"Monthly Billing\"\n },\n \"dunningGroup\" : \"0\",\n \"futureDatedFlag\" : \"N\",\n \"paperlessFlag\" : \"N\",\n \"currentBalance\" : 312.31,\n \"lastPaymentDate\" : \"2020-03-09\",\n \"lastPaymentAmount\" : -27.00,\n \"paymentDueDate\" : \"2020-04-18\",\n \"pendingPayment\" : 0.00,\n \"cycle1Amount\" : 156.08,\n \"cycle2Amount\" : 0.00,\n \"cycle3Amount\" : 0.00,\n \"delinquencyAmount\" : 156.08,\n \"delinquencyStatus\" : {\n \"billerCode\" : \"_\",\n \"enterpriseCode\" : \"NORMAL\",\n \"description\" : \"Normal\",\n \"longDescription\" : \"Normal\"\n },\n \"daysDelinquent\" : 44,\n \"billToName\" : {\n \"first\" : \"xxx raft\"\n },\n \"billToAddress\" : {\n \"line1\" : \"SAGE ST\",\n \"city\" : \"COL\",\n \"state\" : \"SC\",\n \"postalCode\" : \"211051132\"\n },\n \"statementHold\" : {\n \"billerCode\" : \"P\",\n \"enterpriseCode\" : \"PAPERONLY\",\n \"description\" : \"Paper Bill Only\",\n \"longDescription\" : \"Paper Bill Only\"\n },\n \"promiseAmount\" : 0.00,\n \"promiseActivityCode\" : \"41\",\n \"billingCurrentBalance\" : 312.31,\n \"statementBalance\" : 312.31,\n \"electronicFlag\" : \"N\",\n \"adjustedDelinquencyAmount\" : 156.08\n } ]\n },\n \"accountCategory\" : \"Re\",\n \"accountSegment\" : \"Re\"\n },\n \"sourceSystemTimeZone\" : \"-04:00\"\n }\n}",
"responseTime": 551
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Friday
|
Karma given to
