ERROR [stories_HMCatalogSyncJob::de.hybris.platform.servicelayer.internal.jalo.ServicelayerJob] -[J= U= C=] (stories) (0000T7P5) [CatalogVersionSyncJob] Finished synchronization in 0d 00h:01m:31s:258ms. There were errors during the synchronization! ... View more

HI team , Default analyzer showing grey in tree view and NO results in GRID view .Although KPI and service is working fine. can you help us why it is happening and we are using ITSI on-prem .   ... View more

ERROR [monki_HMCatalogSyncJob::de.hybris.platform.servicelayer.internal.jalo.ServicelayerJob] -[J= U= C=] (monki) (0000MM1K) [CatalogVersionSyncJob] Finished synchronization in 0d 00h:00m:07s:499ms. There were errors during the synchronization! ​ INFO [monki_HMCatalogSyncJob::de.hybris.platform.servicelayer.internal.jalo.ServicelayerJob] -[J= U= C=] (monki) (0000ML9S) [CatalogVersionSyncJob] Finished synchronization in 0d 00h:00m:17s:091ms. No errors.   ... View more

/en_sek/klarna ... View more

Hi Team, Can we get the list of All Glass table in Splunk through query or anyway? ... View more

ACC - 127.0.0.1 - - [27/Nov/2019:15:34:47 +0100] "GET /ja_jp/checkout/orderConfirmation/12598099392 HTTP/1.0" 302 - "https://secureacceptance.cybersource.com/" "targetapp_ios_12_Mozilla/5.0 (iPad; CPU OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148" J=F1291B21689EBBBAC9C3864AFAC9FDCD17AE26C9BC04183F079014FC7A9FCC0CE892C995CA283C7033F54B4B236B8DC5AA9B3F85A7B8E567E75430C49D075418.hybris-ecommerce-59dc4956fb-868d9 TimeMillToProcess=492 TimeMillToCommit=492 ... View more

we are getting duplicate alerts in episode review . need to know what required change needs to be done and where so we will not see duplicate alerts. please help here . Thanks in advance. ... View more

I need the the instance value in single field like EU1 ,EU2,AM,AP. host = HYBECMPRDEU1P* host = HYBECMPRDEU2P* host = HYBECMPRDEU3P* host = HYBECMPRDEU4P* host = HYBECMPRDEU5P* host = HYBADMPRDEU1P* host = HYBADMPRDEU2P* host = HYBADMPRDEU3P* host = HYBADMPRDEU4P* host = HYBADMPRDEU5P* host = HYBBUSPRDAMP* host = aks-prdap-12459421-vmss000000 host = HYBBUSPRDEU1P* host = HYBBUSPRDEU2P* host = HYBBUSPRDEU3P* host = HYBBUSPRDEU4P* host = HYBBUSPRDEU5P* host = HYBBUSPRDAMP* host = HYBADMPRDAMP* host = HYBECMPRDAMP* ... View more

index=vmware* (sourcetype=vmware:perf:cpu OR sourcetype=vmware:perf:mem) source=*virtual* |table p_average_cpu_usage_percent, p_average_mem_usage_percent , moid, host, _time|bin span=5m _time |rename avg(p_average_cpu_usage_percent) as "cpuUsage",avg(p_average_mem_usage_percent) as "memUsage"| lookup Entity moid AS moid, host AS host | stats avg(p_average_cpu_usage_percent), avg(p_average_mem_usage_percent) by moid,host,_time,lowername,name,type | rename avg(p_average_cpu_usage_percent) as "cpuUsage",avg(p_average_mem_usage_percent) as "memUsage"| stats count(eval(cpuUsage>=85 AND cpuUsage<90 )) as "OverThresholdCpu", count(cpuUsage) as "TotalCountCpu",count(eval(memUsage>=85 AND memUsage<90)) as "OverThresholdMem", count(memUsage) as "TotalCountMem" ,count(eval(cpuUsage>=90)) as "OverThresholdCpu90" ,count(eval(memUsage>=90)) as "OverThresholdMem90" by lowername,host|eval procentOverMem=if(OverThresholdMem>=2,1,0)|eval procentOverMem90=if(OverThresholdMem90>=2,1,0)|eval procentOverCpu90=if(OverThresholdCpu90>=2,1,0)|eval procentOverCpu=if(OverThresholdCpu>=2,1,0)| fields lowername host procentOverCpu procentOverCpu90 procentOverMem procentOverMem90 | rename lowername as hostName ... View more

Tring to get the time diffrence between end time of job and start time.but when i am running this query for long period it providing me less data. index=hybecmprod OR index=hybadmprod host=HYBadmprd* fullProductAndStockFeedJob* "start job" OR "end job" | eval Status=case(like(_raw,"%Start%"),"Start_Job",like(_raw,"%End%"),"End_Job") |eval CronJob=case(like(_raw,"%fullProductAndStockFeedJob_1%"),"fullProductAndStockFeedJob_1",like(_raw,"%fullProductAndStockFeedJob_2%"),"fullProductAndStockFeedJob_2") | eval host=case(like(host,"%HYBADMPRDAP%"),"AP",like(host,"%HYBADMPRDAM%"),"AM",like(host,"%HYBADMPRDEU1%"),"EU1",like(host,"%HYBADMPRDEU2%"),"EU2",like(host,"%HYBADMPRDEU3%"),"EU3") | eval USERINFO=case(like(_raw,"%Start%"), host+":"+Status,like(_raw,"%End%"), host+":"+Status ) | rex field=USERINFO "(?<host>.*):(?<Status>.*)" | eval startingTime=case(Status="Start_Job", _time) | eval Endtime=case(Status="End_Job", _time) | stats first(startingTime) as startingTime earliest(_time) as _time first(Endtime) as Endtime by host CronJob | eval Time_taken=abs(Endtime-startingTime) | eval JobStatus=case(Time_taken!="","Finished",1=1,"Running") | fillnull | lookup Market1.csv host CronJob OUTPUTNEW Market | fields - startingTime | rename _time as StartingTime | eval Endtime=strftime(Endtime,"%Y/%m/%d %H:%M:%S") | eval StartingTime=strftime(StartingTime,"%Y/%m/%d %H:%M:%S") | eval Endtime=replace(Endtime,"1970/01/01 01:00:00","NA") ... View more

index=esbsrvprod sourcetype=foldermonitoringError NOT (.log) NOT (.nfs)|eval Instance=case(like(host,"%EU1%"),"EU1", like(host,"%EU3%"),"EU3", like(host,"%EU2P%"),"EU2",like(host,"%AP%"),"AP",like(host,"%AM%"),"AM",like(host,"%CI%"),"CI") | rex field=filePath /(?<folder>.*)/ | lookup FolderMonitorings.csv Folder as folder, Instance as Instance OUTPUT ThresholdFiles, "Assignment Group" MonType | eval folder=replace(folder,"mnt/integration","") | chart limit=10000 count over Instance by folder ... View more

Hi team, could you please help me in the below query . When i am running the following search, it is not giving any data if i increase the time range to more than 8 hours. It's only giving 8 hours after that blank . (index=hybecmprod OR index=hybadmprod) "CLUB REGISTRATION END" | rename UserID_End as UserID | sort by HYB_CLUB_END desc | join UserID [search index=hybecmprod "Club registration START" | rename userID_Start as UserID | sort by Hybris_Club_Start desc ] |dedup UserID | eval et=strptime(HYB_CLUB_END,"%Y/%m/%d %H:%M:%S") | eval st=strptime(Hybris_Club_Start,"%Y/%m/%d %H:%M:%S") | eval diff = abs(et-st) | timechart span=1h avg(diff) ... View more

Hi , i am facing some issue with query. My question is how to show only those filetype name which came in logs. Check in lookupfile, if any if filetype is missed then it must show in result. index=sap_bam sourcetype=sap_d059 | lookup sap_filetype.csv filetype as filetype | dedup source | stats count by filetype | rename count as filecount | eval alertme=if((filecount=0) OR isnull(filecount),1,0) | fields sourcetype filetype filecount alertme | table filetype filecount alertme ... View more