Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About raviteja029
raviteja029
Explorer
Member since:
07-27-2017
06-05-2020
Community Statistics
| Posts | 15 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 07-27-2017 |
Activity Feed
- Got Karma for Re: How to merge and make one result out of multiple results. 06-05-2020 12:49 AM
- Posted Re: How to merge and make one result out of multiple results on Splunk Search. 01-10-2018 10:09 AM
- Posted Re: How to merge and make one result out of multiple results on Splunk Search. 01-07-2018 09:21 AM
- Posted Re: How to merge and make one result out of multiple results on Splunk Search. 01-07-2018 08:55 AM
- Posted Re: How to merge and make one result out of multiple results on Splunk Search. 01-07-2018 12:09 AM
- Posted Re: How to merge and make one result out of multiple results on Splunk Search. 01-05-2018 12:32 PM
- Posted How to merge and make one result out of multiple results on Splunk Search. 01-05-2018 12:24 PM
- Tagged How to merge and make one result out of multiple results on Splunk Search. 01-05-2018 12:24 PM
- Tagged How to merge and make one result out of multiple results on Splunk Search. 01-05-2018 12:24 PM
- Tagged How to merge and make one result out of multiple results on Splunk Search. 01-05-2018 12:24 PM
- Tagged How to merge and make one result out of multiple results on Splunk Search. 01-05-2018 12:24 PM
- Tagged How to merge and make one result out of multiple results on Splunk Search. 01-05-2018 12:24 PM
- Posted Re: How to create a summary table with number of calls and percentage on Knowledge Management. 12-13-2017 01:48 PM
- Posted Re: How to create a summary table with number of calls and percentage on Knowledge Management. 12-13-2017 11:37 AM
- Posted Re: How to create a summary table with number of calls and percentage on Knowledge Management. 12-12-2017 08:22 PM
- Posted How to create a summary table with number of calls and percentage on Knowledge Management. 12-12-2017 05:22 PM
- Tagged How to create a summary table with number of calls and percentage on Knowledge Management. 12-12-2017 05:22 PM
- Tagged How to create a summary table with number of calls and percentage on Knowledge Management. 12-12-2017 05:22 PM
- Tagged How to create a summary table with number of calls and percentage on Knowledge Management. 12-12-2017 05:22 PM
- Tagged How to create a summary table with number of calls and percentage on Knowledge Management. 12-12-2017 05:22 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
01-10-2018
10:09 AM
1 Karma
@niketnilay thank you for the response.
I was able to get the answer by using the below search, your answers helped me get there.
index=cap host=prod |
eval product=case(URI like "/credit/%","Credit",
URI like "/credit/%","Transactions",1==1, "Others")|
stats count by product
... View more
01-07-2018
09:21 AM
With the updated search it's not showing any result.
... View more
01-07-2018
08:55 AM
@aniketnilay Thank you for your response.
My actual query should go search the 3 URI's in the entire set of results which are
Credit, Bank, Transactions in the URI and the URI's of each something looks like below,
Bank - https://api-sandbox.****.com/bank/deposits/account-applications
- https://api-sandbox.****.com/bank/deposits/details
- https://api-sandbox.****.com/bank/application/
Credit - https://api-sandbox.****.com/credit/products?li/34141
- https://api-sandbox.****.com/credit/business/43414
here I want to get details where how many calls were made for each API for credit/Bank/Transactions and compare in once single graph
... View more
01-07-2018
12:09 AM
Thanks for the reply, this works!
How can I add multiple URI's like credit, trans, bank.... ?
where I am looking forward an output like below,
/credit/ . 80
/transaction/ . 100
/Bank/ . 50
... View more
01-05-2018
12:32 PM
Thank you for the reply.
So after I did the below search
index=cap host=prod SERVICE="Credit" | eval product=case( URI="/credit/" ,"Credit", 1==1,URI ) | stats count as total by product
I got
/credit/company/23532525 . 10
/credit/company/34532523 . 30
/credit/product/23235225 . 40
I need that to be
/credit/ . 80
... View more
01-05-2018
12:24 PM
HI,
I have a result which displays common starting URI. but I have to combine it to one and have the result, how can I do it ?
Result -
/credit/company/23532525 . 10
/credit/company/34532523 . 30
/credit/product/23235225 . 40
I need something like
/credit/ 80
... View more
12-13-2017
01:48 PM
I just tried Option 1 and it worked!
Thank you very much for the time and effort.
for Reference the output looks like -
CustomerName . | . Last Week . | . curent Week | . Perc |
USER1 | . 87204 | 53960 . | 61.88 . |
USER2 . | 147738 | 64848 | 43.89 . |
... View more
12-13-2017
11:37 AM
I don't know for what reason the values popping up for curent Week are not coming right for the above search
... View more
12-12-2017
08:22 PM
How do I complete the statement? I mean % should also print in the summary
index=abc client1 OR client2 earliest=-14d@d latest=-7d@d | eval CustomerName=case( CLIENT== "client1","USER1",CLIENT== "client2","USER2", 1==1, CLIENT) | eval weeknum="Last Week"
| append [ search
index=abc client1 OR client2 earliest=-7d@d latest=-0d@d | eval CustomerName=case( CLIENT== "client1","USER1",CLIENT== "client2","USER2", 1==1, CLIENT) | eval weeknum="curent Week" ]
| eval perc=round(('current Week'/'Last Week')*100,1) | chart count over CustomerName by weeknum AND perc ?
... View more
12-12-2017
05:22 PM
Hi,
Can anyone help write a query where it can display
User | Number of calls current week | number of calls last week | Percentage change in the calls for current and last week
My Query
index=abc client1 OR client2 earliest=-14d@d latest=-7d@d | eval CustomerName=case( CLIENT== "client1","USER1",CLIENT== "client2","USER2", 1==1, CLIENT) | eval weeknum="Last Week"
| append [ search
index=abc client1 OR client2 earliest=-7d@d latest=-0d@d | eval CustomerName=case( CLIENT== "client1","USER1",CLIENT== "client2","USER2", 1==1, CLIENT) | eval weeknum="curent Week" ]
| chart count over CustomerName by weeknum
how to add percentage change here ?
Thanks in advance
... View more
12-12-2017
03:24 PM
Hi
Could you help me how to get the change in percentage for the results I get from a current week of calls to last week calls?
my Search earliest=-14d@d latest=-7d@d | eval weeknum="Last Week" |
append [ search my Search earliest=-7d@d latest=-1m@m | eval weeknum="Current Week" ] | chart count over CustomerName by weeknum
... View more
12-11-2017
02:18 PM
Hi,
Thank you very much.
The search worked pretty well but I am getting a little extra number in last 7 days, it's taking for last 8 day's looks like changing "-7d@d" to "-6d@d" got much closer but I am assuming the start time has some lag now, can you confirm the start time is from last min to 7 days ?
EX-
Getting 238,121 for last 7 days but actual no. 242,408
And for last 30 days is coming correct.
... View more
12-11-2017
01:44 PM
Hi ,
Thank you for the reply,
I kind of did few tweaks and was able to get the response but only last 7 days value is correct and for last 30 days value its coming some value,
Search -
My Search | eval weeknum="Last 7 days" |
append [ search My Search | eval weeknum="Last 30 days" ]
| chart count over CustomerName by weeknum
With this I am getting out as below -
CustomerName | Last 30 days | Last 7 days |
abc | 77 | 92385 |
def | 87 | 235235 |
Here Last 30 days value is incorrect
... View more
12-11-2017
12:03 PM
Hi Everyone,
I am trying to create a report where I am able to get the list of username's / number for calls for last 7 days but unable to add another field number for calls for last 30 days. the list should look something like this
i.e list of username's / number for calls for last 7 days/number for calls for last 30 days.
... View more
- Tags:
- splunk-mint
- table
07-27-2017
03:40 PM
I have a statistic to get where I am getting multiple lines but unable to group them into one and display the result like.
Getting -
URI | error . | count . |
/offer/transaction/ . | 200 | 5 . |
/offer/transaction/298759829 . 300 1
/offer/transaction/5683435 300 1
/offer/transaction/0578285 . 200 1
/offer/clear-up-in/9646789 . 200 1
/offer/transaction/87589889. 200 1
Need -
URI error count
/offer/transaction/ . 200 6
/offer/transaction/ 300 2
/offer/transaction/ 500 1
/offer/clear-up-in/ . 200 . 2
... View more
