Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About swdowiarz
swdowiarz
Path Finder
Member since:
12-06-2017
06-05-2020
Community Statistics
| Posts | 39 |
| Solutions | 1 |
| Karma Given | 2 |
| Karma Received | 1 |
| Member Since | 12-06-2017 |
Activity Feed
- Got Karma for Re: How to get sum of field based on it's value?. 06-05-2020 12:50 AM
- Karma Re: Resource usage monitoring in Splunk for nikita_p. 06-05-2020 12:49 AM
- Karma Re: SPLUNK Search if word form file appears in logs for gcusello. 06-05-2020 12:49 AM
- Posted Re: How to get sum of field based on it's value? on Splunk Search. 09-23-2019 01:03 AM
- Posted Re: How to get sum of field based on it's value? on Splunk Search. 09-20-2019 11:32 AM
- Posted How to get sum of field based on it's value? on Splunk Search. 09-20-2019 06:01 AM
- Tagged How to get sum of field based on it's value? on Splunk Search. 09-20-2019 06:01 AM
- Tagged How to get sum of field based on it's value? on Splunk Search. 09-20-2019 06:01 AM
- Posted REST API Modular Input on All Apps and Add-ons. 01-25-2018 02:55 AM
- Tagged REST API Modular Input on All Apps and Add-ons. 01-25-2018 02:55 AM
- Posted Re: Chart and table of occurences of field by another field on Splunk Search. 01-22-2018 02:51 AM
- Posted Re: Chart and table of occurences of field by another field on Splunk Search. 01-22-2018 02:28 AM
- Posted Re: Chart and table of occurences of field by another field on Splunk Search. 01-22-2018 02:08 AM
- Posted Re: Chart and table of occurences of field by another field on Splunk Search. 01-22-2018 02:04 AM
- Posted Re: Chart and table of occurences of field by another field on Splunk Search. 01-22-2018 01:40 AM
- Posted Chart and table of occurences of field by another field on Splunk Search. 01-22-2018 01:17 AM
- Tagged Chart and table of occurences of field by another field on Splunk Search. 01-22-2018 01:17 AM
- Tagged Chart and table of occurences of field by another field on Splunk Search. 01-22-2018 01:17 AM
- Tagged Chart and table of occurences of field by another field on Splunk Search. 01-22-2018 01:17 AM
- Posted SPLUNK Text analysis on Dashboards & Visualizations. 01-05-2018 07:54 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-23-2019
01:03 AM
1 Karma
yeah! it is working as it should be, thanks!
However, do you know how to present those counts in percentage?
... View more
09-20-2019
11:32 AM
Oh yes, I missed that one.
With this query I'm getting the look of a table as I wanted with three columns( user_id, ONLINE_GDT, OFFLINE_GDT ), but for each row(user_id) the data are not being count and all the values for GDTs are 0.
... View more
09-20-2019
06:01 AM
Hi,
I would be grateful for any help.
In my fields we are having two fields which are: data.user_id and data.config.offlineGDTS
data.config.offlineGDTS can have value true or false
My questions is: How can I have statistics for each user how many events he has for data.config.offlineGDTS=true and data.config.offlineGDTS=false ?
Basically I would like to have in one row: user_id, sum(data.config.offlineGDTS=true), sum(data.config.offlineGDTS=false)
What I've tried looks like this:
index=cs_engineering sourcetype=pizza_app data.offlineGDTS=* | stats
count(eval(data.offlineGDTS="true")) as ONLINE_GDT
count((data.offlineGDTS="false")) as OFFLINE_GDT
by data.user_id
... View more
01-25-2018
02:55 AM
Hi
I have the following issue, I'm trying to send some information from my local machine where Flask API is working on http://127.0.0.1:5000/splunk
My Splunk Enterprise is working on Google Cloud platform. I'm testing the app REST API Modular Input from splunkbase.
How can I achieve that when splunk REST API Modular Input call the above endpoint it should return some example json format data ?
I would be grateful with any information.
... View more
01-22-2018
02:51 AM
that's what I wanted, can I have some graph of it ? I mean graph which contains user and titleID ? For example graph which shows user and most used titleID and the number how many times he used this titleID ?
... View more
01-22-2018
02:28 AM
I have the following issue:
Search Factory: Unknown search command 'dc'.
... View more
01-22-2018
02:08 AM
No it's not a number, sorry that I didn't specify it properly, "data.titleID" is some string and I would like to have stats of how many times each user has used each data.titleID
... View more
01-22-2018
02:04 AM
oh yes, because my log contains field data which contains titleID and orderID so to get them it's data.titleID and data.orderID
... View more
01-22-2018
01:40 AM
Hi
I don't know why but SUM(titleID) does not work for me, I don't know why
... View more
01-22-2018
01:17 AM
Hi
I would like to have some chart ( bar etc.) and table of logs which contain two information titleID and userID.
I would like to have table and chart of each user and sum of each titleID for him.
I'm using this search, but I'm not sure about it:
... | top "data.titleID" by "data.userID" | table "data.userID" "data.titleID" count
... View more
01-05-2018
07:54 AM
Hi
I have logs indexed in my Splunk Instance. Those logs contains conversation between user and chat bot. I would like to know if there is any app that I can use for text analysis like the most used words or phrases etc.
I know that there is one called Sentiment Analysis but it is only compatibile with splunk version 6.5 or lower.
I would be thankful for any pice of information.
... View more
01-04-2018
05:22 AM
Awesome job ! That is what I want ! Thank you so much for help ! All the best for you !
... View more
01-04-2018
04:52 AM
my csv file contain only words like:
sebastian
firstword
secondword
thirdword
fourthword
... View more
01-04-2018
04:51 AM
I've added new lookup from my csv file which contains only words like:
sebastian
firstword
secondword
thirdword
fourthword
now I want to do a search to check if any of my events contains any of those words which are in lookup ?
... View more
01-04-2018
04:49 AM
more less it is something what I want to achieve, I've added new lookup which is my csv file with banned words, but how can I now see result of events which contains any of those words ?
... View more
01-04-2018
01:17 AM
Hi
I have the following issue. I'm using SPLUNK for real-time monitoring of chat bot. I have as well file with banned words, let say that's a csv file. I want to do search to check if any of those words appears in logs.
What is the best way to do it ? how it would affect on a performance ?
I would be rally grateful for any piece of information.
... View more
01-03-2018
02:33 AM
I have other question, how it would affect to performance of splunk ? or this is best solution ?
... View more
12-28-2017
05:44 AM
but if I change the file with banned words, will my lookup change as well or I'll have to do it on my own ?
... View more
12-28-2017
01:31 AM
Hi
I have a question. I'm using splunk for bot logs monitoring and I'm looking for a app or anything else which can help with specific problem. I'll have file with banned words and I want to check if any of those words from file are appearing in logs. If yes I need to set alert or something like this. Is there any app which can help mi with this ? I would be grateful for your help.
... View more
12-27-2017
05:29 AM
Yes, I did it, when I search index=os there are lot of events but instead of dashboards there is still No results found
... View more
12-27-2017
05:01 AM
I did configuration for Splunk Add-on for Unix and Linux and all the inputs are enable, but there still nothing to show.
... View more
12-27-2017
03:56 AM
Hi
I've installed Splunk App for Unix and Linux and Splunk Add-on for Unix and Linux. I want to monitor basic things about my machine as CPU usage, memory etc.
In documentation I've read that for the first install there is no need to do any changes in Settings -> Your Data.
When I want to display home dashboard it shows No results found. Can it be connected with sourcetype in Settings -> your data, because I leave it with default.
I would be grateful for some advice.
... View more
12-27-2017
01:51 AM
Hi
I did what I wanted by this: index="chat_bot" source="/var/www/html/backend/log_chat/conversation.log" | rex "^(?P<session_id>\d+)" | dedup session_id | timechart span=1d count
I've used rex command and now it is working as I wanted so there is no need to do extraction at index time.
Thank you all for involvement and help.
... View more
12-27-2017
01:06 AM
Hi @nikita_p
I was thinking about it, but I've heard that is not good idea, that's why I'm asking about it.
... View more
12-27-2017
01:04 AM
so I can use rex command in search instead of extracting new field ? That's good point !
... View more
