About dfredell

dfredell · ‎04-16-2014

Wow that was perfect thank you! I had tried that before, I guess all I was missing was the '$' on ID.

dfredell · ‎04-16-2014

Hello, I want to use the results of my dbquery as search strings in the log files. Currently I am running two different Splunk searches then copy find/replace and pasting the result from 1 to 2. 1: |dbquery JiraDB "SELECT TOP 1000 [ID] FROM [jiraDB].[JIRA].[searchrequest] where [USERNAME] = 'dfredell'" 2: sourcetype=access_log "14196" OR "17516" OR "17525" OR ..... The output from 1 has 300 items and looks like: ID 14196 17516 17525 ... The data in access_log is a standard Apache Web Log and I am searching for the url to contain any of the ID values.

dfredell · ‎12-31-2013

I solved this issue by editing etc/system/local/inputs.conf on the receiving/ indexing server. As noted under Set up receiving with the configuration file all I had to do was add: [splunktcp://9997] disabled = 0 These are the basic commands I ran on the forwarder linux server: bin/splunk add monitor /logfile-gc.log -sourcetype gc bin/splunk add forward-server 192.168.0.1:9997

Posts	3
Solutions	0
Karma Given	1
Karma Received	2
Member Since	‎12-31-2013

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

Use db results in splunk search

Re: Use db results in splunk search

Use db results in splunk search

Re: cooked connection timed out?