Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About aorkcreate
aorkcreate
New Member
Member since:
08-08-2017
06-05-2020
Community Statistics
| Posts | 7 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 08-08-2017 |
Activity Feed
- Posted Re: Hi. I am indexing data from a ticketing tool. on All Apps and Add-ons. 08-09-2018 10:56 AM
- Posted Re: Hi. I am indexing data from a ticketing tool. on All Apps and Add-ons. 08-09-2018 10:56 AM
- Posted Re: Hi. I am indexing data from a ticketing tool. on All Apps and Add-ons. 08-09-2018 10:53 AM
- Posted Re: Hi. I am indexing data from a ticketing tool. on All Apps and Add-ons. 08-09-2018 10:50 AM
- Posted Hi. I am indexing data from a ticketing tool. on All Apps and Add-ons. 08-08-2018 01:29 PM
- Tagged Hi. I am indexing data from a ticketing tool. on All Apps and Add-ons. 08-08-2018 01:29 PM
- Tagged Hi. I am indexing data from a ticketing tool. on All Apps and Add-ons. 08-08-2018 01:29 PM
- Posted Re: Create a evaluation in each end of month based in one field that is not _time field on Splunk Search. 08-08-2018 12:16 PM
- Posted I have a data that I'm manually ingesting the data from Splunk WEB but I don't have time stamp in my log but I have field that has time but no time in it . so I need that has my time stamp with default 00:00:00:000 has time for me ,how ? on Getting Data In. 08-07-2018 10:55 AM
- Tagged I have a data that I'm manually ingesting the data from Splunk WEB but I don't have time stamp in my log but I have field that has time but no time in it . so I need that has my time stamp with default 00:00:00:000 has time for me ,how ? on Getting Data In. 08-07-2018 10:55 AM
Topics I've Started
08-09-2018
10:56 AM
I need that comparing trend line ,no of open by the end of each month .
example :- if a 5 tickets are open by end of January then it needs to append with with feb data but if 2 of January tickets is closed in feb then it should not show in trend line of feb but should show in jan and too on
.
... View more
08-09-2018
10:56 AM
I need that comparing trend line ,no of open by the end of each month .
example :- if a 5 tickets are open by end of January then it needs to append with with feb data but if 2 of January tickets is closed in feb then it should not show in trend line of feb but should show in jan and too on
.
... View more
08-09-2018
10:53 AM
the command that you given does work but I need a trend line of how many open this month and how many open last month and sooo on
... View more
08-09-2018
10:50 AM
This is my sample data :-
{
"Application": "",
"Data Source Status": "open",
"Days Open": "0",
"Director": “abcd”,
"Director ID": “12345”,
"Director Username": “dcbd”,
"Last Updated": "8/6/2018 9:00:16 AM",
"Number of Days Past Due": "-30",
"Reason for Closure": "",
"Request URL": “https://abcd.com”,
"Required Remediation Date": "9/5/2018",
"Source": “with”,
"Status": "Open",
"Threat Level": "High",
"Unit CIO": "",
"Vector ID": “123456789”,
"Vector Status": "Valid",
"Vector Status Justification": "",
"Vulnerability Closed Date": "",
"Vulnerability ID": “with-123-456”,
"Vulnerability Open Date": "8/6/2018",
"Vulnerability Risk": "High",
"WAVM Hosting Location": "External",
"WAVM Inventory Application(s)": “1234-abcde-1234”,
"With Vulnerability ID": "51817015"
}
... View more
08-08-2018
01:29 PM
I need to see what tickets were opened at end of each month. I've done a initial charge of the database, because of this, I can't use the _time indexed, otherwise I have to use open_date and close_date. Basically, the logic that I need to apply is: Make a count of all tickets that were opened before end of month and were closed after the end of that month. I need show like timechart with this info by month. Any idea about the way to get this info? Maybe could be useful the gentimes command?
... View more
08-08-2018
12:16 PM
I've needed the same output ,did you achieve that ,can you tell me how is it possible ?
... View more
08-07-2018
10:55 AM
I have a data that I'm manually ingesting the data from Splunk WEB but I don't have time stamp in my log but I have field that has time but no time in it . so I need that has my time stamp with default 00:00:00:000 has time for me ,how ?
... View more
- Tags:
- splunk-enterprise
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:03 AM
|
