Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About changwoo
changwoo
Communicator
Member since:
01-06-2014
06-05-2020
Community Statistics
| Posts | 47 |
| Solutions | 0 |
| Karma Given | 21 |
| Karma Received | 12 |
| Member Since | 01-06-2014 |
Activity Feed
- Got Karma for What are the differences between join and lookup?. 03-21-2023 09:18 AM
- Karma Re: After downloading the "nmon" app, splunkd will not start for martin_mueller. 06-05-2020 12:47 AM
- Karma Re: After downloading the "nmon" app, splunkd will not start for martin_mueller. 06-05-2020 12:47 AM
- Karma Re: Eventgen app is not collecting the data in real time! for Lowell. 06-05-2020 12:47 AM
- Karma Re: Subsearch calculating average of hits and showing list of values higher than the average? for Suda. 06-05-2020 12:47 AM
- Karma Re: After downloading the "nmon" app, splunkd will not start for martin_mueller. 06-05-2020 12:47 AM
- Karma Re: After downloading the "nmon" app, splunkd will not start for martin_mueller. 06-05-2020 12:47 AM
- Got Karma for Subsearch calculating average of hits and showing list of values higher than the average?. 06-05-2020 12:47 AM
- Got Karma for Re: Subsearch calculating average of hits and showing list of values higher than the average?. 06-05-2020 12:47 AM
- Got Karma for "DB CONNECT" app timestamp is not working. 06-05-2020 12:47 AM
- Got Karma for Is there any way or app to make random sample data?. 06-05-2020 12:47 AM
- Got Karma for Is there any way or app to make random sample data?. 06-05-2020 12:47 AM
- Karma Re: subsearch help for linu1988. 06-05-2020 12:46 AM
- Karma Re: Sorting help for lguinn2. 06-05-2020 12:46 AM
- Karma Re: i want to convert my sample data to time stamp. for kristian_kolb. 06-05-2020 12:46 AM
- Karma Re: i want to convert my sample data to time stamp. for MuS. 06-05-2020 12:46 AM
- Karma Re: i want to convert my sample data to time stamp. for MuS. 06-05-2020 12:46 AM
- Karma Re: s.o.s "view results" drilldown doesn't yield the same search results than its panel for hexx. 06-05-2020 12:46 AM
- Karma Re: time difference issue for kristian_kolb. 06-05-2020 12:46 AM
- Karma Re: What is the meaning of splunk? for MuS. 06-05-2020 12:46 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 2 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 2 | |||
| 1 | |||
| 0 | |||
| 1 |
07-30-2014
10:51 PM
try to use "| dedup ID" search command
... View more
07-22-2014
01:10 AM
THANKS!! but i already know about eventgen.
And I think your two suggestion are the same thing ( EVENT GEN)
EVENT GEN can make data indexed that is already written in txt or csv isn't it?
I need something that can give each column random data which is on my list.
... View more
07-21-2014
11:20 PM
2 Karma
Hi I am trying to make a random sample data.
I want to define my column and what kind of random data should be in that column
For example
if i had make job , college column.
In the job column random data like student, teacher, seller should be going in randomly ( the job is selected by my list)
Is there any apps or way to make random sample data?
... View more
07-21-2014
08:59 PM
I tried to find the solution for your problem but there was no answer for it.
So I was wondering re-installing the splunk might help..
... View more
07-21-2014
06:58 PM
Try to delete /Applications/splunk directory and installing it.
... View more
07-17-2014
12:25 AM
Did you check the splunkd.log ?
... View more
07-16-2014
02:07 AM
I recently heard about flashtimeline.
I tried to see how it look like but there was no screenshot of it.
where can i find it?
I am using splunk 6.0.1ver .
what else do i need to use flashtimeline ?
THANKS
... View more
- Tags:
- flashtimeline
07-15-2014
05:30 PM
Oh it's okay. I was my fault not to read the supporting OS .
... View more
07-14-2014
10:15 PM
1 Karma
i am using the db connect app to get the data from my db.
i have a date formate like 2005-05-30
and my input.conf is
and the error log is like this
plz help~
... View more
07-14-2014
10:07 PM
I deleted the nmon app. And it worked!!!
... View more
07-14-2014
02:01 AM
Thanks !!!!!
... View more
07-14-2014
01:43 AM
it was that error when i started splunk
... View more
07-14-2014
01:33 AM
07-14-2014 17:32:30.184 +0900 ERROR ExecProcessor - message from "/Applications/Splunk/etc/apps/nmon/bin/nmon_helper.sh" dyld: DYLD_ environment variables being ignored because main executable (/bin/ps) is setuid or setgid
this error is comming out of splunkd.log
... View more
07-14-2014
01:21 AM
I was uploading website input app and splunk stopped..
... View more
07-14-2014
12:51 AM
This is the pop up screen shot
... View more
07-09-2014
12:46 AM
1 Karma
Thanks!!! it works perfect!!!
... View more
07-08-2014
10:10 PM
1 Karma
I am trying to make a subsearch which calculates the avg of the hits .
And showing the list of higher value than the avg.
i tried the search like this :
index= temp sourcetype = searchlog [search index = temp sourcetype = searchlog |stats avg(searchKeyword.hits) as avg | fields avg] | table avg
What's the problem ?
... View more
07-02-2014
05:56 PM
THANKS !!!!
... View more
07-02-2014
02:11 AM
As a result, only 21 events are indexed.
but in my internaldata.csv, there are about 19mb of data.
Also it is not indexing the data in real time. ( it is indexing the data every 11 minutes. )
plz help
... View more
- Tags:
- eventgen
02-19-2014
09:45 PM
thanks!!!!
... View more
02-19-2014
05:26 PM
2 Karma
i am trying to use the dashboard that sos app is supporting
when i click result i can get this search query
index=sos sourcetype="ps" host="SIS1-SERVER1"
| multikv
| eval type=case(like(ARGS, "%search%"),"searches",like(ARGS, "%root.py_%start%") OR like(COMMAND, "%splunkweb%") OR (like(COMMAND,"%python%") AND like(ARGS,"%appserver%")), "Splunk Web",like(ARGS,"%-p_%start%") OR (like(COMMAND,"%splunkd%") AND like(ARGS, "service")),"splunkd server")
| eval RSZ_MB=RSZ_KB/1024
| eval VSZ_MB=VSZ_KB/1024
| bin _time span=5s
| stats first(pctCPU) AS pctCPU, first(RSZ_MB) AS RSZ_MB, first(VSZ_MB) AS VSZ_MB first(type) AS type by PID _time
| stats sum(pctCPU) AS pctCPU, sum(RSZ_MB) AS RSZ_MB, sum(VSZ_MB) AS VSZ_MB by type, _time
| bin _time span=10s
| sistats avg(pctCPU), median(pctCPU), median(RSZ_MB), median(VSZ_MB) by type, _time
but! when i tried it in my own dashboard this didn't work like the app dashboard
what can i do
i tried timechart but the result was different .
... View more
02-18-2014
01:34 AM
1 Karma
I putted the .js and .css file to /opt/splunk/etc/apps/search/appserver/static
but when load the dashboard the style is not working.
What's the problem
... View more
02-14-2014
12:57 AM
i tried but epoch_st epoch_et, epoch_diff , dur field is not comming out ..
it's showing the _raw data...
... View more
02-13-2014
11:38 PM
start_time = > 2014-02-13T22:57:15+0900
end_ time = > 2014-02-13T23:59:54+0900
how can i get the time difference ??
i tried
convert timeformat="%Y/%m/%d %H:%M:%S" mktime(start_time) AS StartTime_epoch mktime(end_time) AS ResolvedTime_epoch | eval total=round((ResolvedTime_epoch-StartTime_epoch)/60/60/24)
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:03 AM
|
