Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About faizolsaidin
faizolsaidin
Explorer
Member since:
10-17-2017
10-12-2022
Community Statistics
| Posts | 7 |
| Solutions | 1 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 10-17-2017 |
Activity Feed
- Karma Virustotal Checker: Why do I keep getting error "'NoneType' object is not iterable" in dict_reader.py? for msqrd. 06-05-2020 12:47 AM
- Posted Re: How to combine a few eval cases to a single search? on Splunk IT Service Intelligence. 08-09-2018 08:42 AM
- Posted Re: Connect_ping to test port even if Ping fails in TA-connectivity on All Apps and Add-ons. 08-06-2018 12:43 AM
- Posted How to combine a few eval cases to a single search? on Splunk IT Service Intelligence. 08-05-2018 08:52 PM
- Tagged How to combine a few eval cases to a single search? on Splunk IT Service Intelligence. 08-05-2018 08:52 PM
- Tagged How to combine a few eval cases to a single search? on Splunk IT Service Intelligence. 08-05-2018 08:52 PM
- Posted ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-connectivity/bin/connect.py" ERRORargument of type 'NoneType' is not iterable on Splunk IT Service Intelligence. 04-25-2018 08:46 PM
- Tagged ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-connectivity/bin/connect.py" ERRORargument of type 'NoneType' is not iterable on Splunk IT Service Intelligence. 04-25-2018 08:46 PM
- Tagged ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-connectivity/bin/connect.py" ERRORargument of type 'NoneType' is not iterable on Splunk IT Service Intelligence. 04-25-2018 08:46 PM
- Posted Re: invalid search or missing required fields for thresholding on Splunk Search. 01-10-2018 05:25 PM
- Posted invalid search or missing required fields for thresholding on Splunk Search. 01-09-2018 11:38 PM
- Tagged invalid search or missing required fields for thresholding on Splunk Search. 01-09-2018 11:38 PM
- Tagged invalid search or missing required fields for thresholding on Splunk Search. 01-09-2018 11:38 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
08-09-2018
08:42 AM
My bad, my question should be with the query that i had from the eval cases above, i would like to combine it in order to monitor all cases in single search instead to have it separately. Since it was part of my base search but i'm creating this of 1 piece in my Glass table. Hope this helps to clarify.
... View more
08-06-2018
12:43 AM
Yup, we experiencing the same issues as well, not using on system, so without any OS buts its IP printer.
... View more
08-05-2018
08:52 PM
Hi,
How could i combine few eval cases into single count search.
Search as below :
| eval a = case(Name LIKE "abc%efg%123" AND State="Running",1,Name LIKE "abc%efg%123" AND State!="Running",0)
| eval b = case(Name LIKE "abc%efg%456" AND State="Running",1,Name LIKE "abc%efg%456" AND State!="Running",0)
| eval c = case(Name LIKE "abc%efg%789" AND State="Running",1,Name LIKE "abc%efg%789" AND State!="Running",0)
... View more
04-25-2018
08:46 PM
Previously, its working fine where it suddenly stop sending any data to indexer.
inputs.conf
[ping:///opt/splunk/etc/apps/search/lookups/ping_itsi_entities.csv]
host_field = host
workers = 8
interval = 60
sourcetype = ping
index=connectivity
disabled=false
[connect:///opt/splunk/etc/apps/search/lookups/connect_itsi_entities.csv]
host_field = host
port_field = port
workers = 1
interval = 300
sourcetype = connect_ping
index=connectivity
disabled=false
props.conf
[ping]
CHECK_FOR_HEADER = false
TIME_FORMAT = %m/%d/%Y %H:%M:%S %Z
LINE_BREAKER = ([\r\n]+)
SHOULD_LINEMERGE = true
BREAK_ONLY_BEFORE_DATE = true
[webping]
CHECK_FOR_HEADER = false
TIME_FORMAT = %m/%d/%Y %H:%M:%S %Z
LINE_BREAKER = ([\r\n]+)
SHOULD_LINEMERGE = true
BREAK_ONLY_BEFORE_DATE = true
[connect]
CHECK_FOR_HEADER = false
TIME_FORMAT = %m/%d/%Y %H:%M:%S %Z
LINE_BREAKER = ([\r\n]+)
SHOULD_LINEMERGE = true
BREAK_ONLY_BEFORE_DATE = true
... View more
01-10-2018
05:25 PM
Thanks for your info. I'm still rookie in ITSI Splunk, based from the documentation, on step 3, it asked to check on Time Picker, may I know where can I find it?
... View more
01-09-2018
11:38 PM
Hi,
I'm using ad hoc search for a glass table. By search, when run i'm able to get the value that i want. But in the glass table, error appear as "invalid search or missing required fields for thresholding ". Any idea or opinion that i can start to look at?
... View more
