About jorgeoa

jorgeoa · ‎11-03-2015

Hi cwhong, I'm trying, for example, "index=*" to get all the events. The search button doesn't do anything.

jorgeoa · ‎10-23-2015

Hello, I've installed the new CartoDB Toque app in Splunk but nothing works in it. I can enter the app home but the search field doesn't work, no matter what string I write, nothing happens. Looking at the github page of the app I see that there are some files that the app package doesn't have, like for example some config files in the "default" directory. Could anybody make it work? Thanks!

jorgeoa · ‎07-15-2015

Hello jeremiahc4, I appreciate the fdi01's answer but it didn't help me in solving my problem. When I found the real problem and solution by modifying the query, I posted that solution. That's why I marked my explanation as accepted.

jorgeoa · ‎06-10-2015

Thanks for the answer fdi01, The problem was that the field "act" have the same values in lower and upper case, and it seems that the "by src_act" doesn't interprets that cases in the same way as the search events does (search events ignore word case but "by" not). I solved the problem using lower() in the eval expression: eval src_act=lower(src.".".act)

jorgeoa · ‎06-10-2015

Hello, I'm new with splunk and I'm trying to get all the different values of a field with stats values() command with results grouped by another field. Here is the query: src=* | eval src_act=src.".".act | stats values(vendor) as vendors dc(vendor) as num_vendors by src_act | where num_vendors>1 The maximum number of vendors returned by the query is two, but searching with the "view events" link of a result, the real number of different vendors is three or four in some cases. The same problem occurs using the list() function, it only shows the elements from a maximum of two different vendors. I tried to modify the list_maxsize param in limits.conf file but it doesn't solve the problem, even with the list() function, no more that 2 different values in "vendors" field. Anybody can help me? Thank you very much! Regards.

Posts	5
Solutions	1
Karma Given	0
Karma Received	1
Member Since	‎06-10-2015

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

Can't get CartoDB Torque app work, anybody could? ...

stats values() doesn't return all values

Re: Can't get CartoDB Torque app work, anybody cou...

Can't get CartoDB Torque app work, anybody could? ...

Re: stats values() doesn't return all values

Re: stats values() doesn't return all values

stats values() doesn't return all values