Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About petem3
petem3
New Member
Member since:
05-01-2020
03-11-2021
Community Statistics
| Posts | 6 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 05-01-2020 |
Activity Feed
- Posted Re: Uploading flat/sequential file on Getting Data In. 03-11-2021 02:52 AM
- Posted Uploading flat/sequential file on Getting Data In. 03-09-2021 06:39 AM
- Posted Re: Adding an event field to Stats Min command on Splunk Search. 09-14-2020 02:08 AM
- Posted Adding an event field to Stats Min command on Splunk Search. 09-11-2020 08:39 AM
- Posted Re: Left Outer Join Using NOT clause on Splunk Search. 05-04-2020 08:35 AM
- Posted Left Outer Join Using NOT clause on Splunk Search. 05-01-2020 07:59 AM
- Tagged Left Outer Join Using NOT clause on Splunk Search. 05-01-2020 07:59 AM
- Tagged Left Outer Join Using NOT clause on Splunk Search. 05-01-2020 07:59 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
03-11-2021
02:52 AM
Thanks for the speedy response. Ultimately i would like to index the file, but currently just trying to ingest into splunk and have a play around with it.
... View more
03-09-2021
06:39 AM
I'm trying to upload an ascii file (created on a IBM mainframe) into splunk using the lookup - add new lookup table file option. Its not a CSV format, just text with no comma separated fields (also known as a flat/sequential file). I'm getting the following error :- "Encountered the following error while trying to save: File is binary or file encoding is not supported, only utf-8 encoded files are supported". Am i using the correct option to get the data into splunk, if yes, how do i overcome the error?
... View more
09-14-2020
02:08 AM
I am trying to show the event date related to the min field value, along with the minimum value.
... View more
09-11-2020
08:39 AM
When calculating a minimum value across events how can you then retain an event field related to the minimum value and display the minimum value with the event field?
... View more
Labels
- Labels:
-
stats
05-04-2020
08:35 AM
The first solution was fastest; just a minor correction
where dc=1 AND index="A"
should be
where index_count=1 AND index="A".
It worked perfectly, many thanks for your help.
... View more
05-01-2020
07:59 AM
I'm trying to identify arrangement's in one data source that do not exist in another data source. One of the sources has multiple indexes, but assume this should not cause a problem. I'm trying to use the NOT clause instead of a JOIN clause. The query returns values in both sources; any ideas?
index=A
| RENAME AR_ID as arrangementId
| dedup arrangementId
| fields arrangementId
NOT
[search index=B OR index=C OR index=D
| dedup arrangementId
| return 10000 arrangementId ]
| table arrangementId
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-11-2021
03:36 AM
|
