×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
svivekananda007
Engager
Member since: ‎06-04-2015
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 1
Karma Received 4
Member Since ‎06-04-2015
Activity Feed
View All

Re: How to write a search where if a certain strin...

by in Splunk Search
‎06-04-2015 03:46 PM
‎06-04-2015 03:46 PM
THis worked. thanks. can you suggest me a way to keep Status=1 until "disconnected" is encountered in a log. Thanks ... View more

How to write a search where if a certain string is...

by in Splunk Search
‎06-04-2015 03:28 PM
4 Karma
‎06-04-2015 03:28 PM
4 Karma
I need to find a string in a log and set/unset a field depending on this. Ex: field Status = 1 or 0. I should say if(a_log_event contains "connected") then Status=1, otherwise 0 Please help me with this THanks ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:03 AM
Karma from
Karma given to
View All