About youngc_splunk

youngc_splunk · ‎11-21-2024

@ecnausysadm , it looks like you're trying to process EDIs. We now have solutions accelerator for EDIs. Would like to share what we have if you are interested.

youngc_splunk · ‎11-21-2024

@timothywatson @hogan24 , it looks like you both are trying to implement a solution with EDIs. We now have a solutions accelerator for EDI documents. Let me know if any of you is interested in sharing some information, I can set up a call to introduce.

youngc_splunk · ‎11-21-2024

@gajananh999 , it looks like your processing EDI data. We do have a new solution accelerator for EDI transactions. Love to share some content we have. Let me know if you're interested.

youngc_splunk · ‎11-21-2024

@tlunruh , it looks like your processing EDI data. We now have solution accelerator for EDI transactions, I would love to share what we have. Let me know if you're interested.

youngc_splunk · ‎11-21-2024

@dmrhodes101 , it looks like you are trying to process EDI, we do have a solution accelerator for processing EDIs, love to share some of the content we have. Let me know if you're interested.

youngc_splunk · ‎11-21-2024

@_gkollias It looks like you are trying to process EDI data. We do have a solutions accelerator for EDI, we can share. Are you interesting in learning about it? Love to set-up some time to share what we have.

youngc_splunk · ‎11-21-2024

My email is youngc@splunk.com Please send me an email, I will send a zoom meeting invite for us to connect.

youngc_splunk · ‎11-19-2024

@pradeepiyer2024 @tscroggins , we have recently launched EDI monitoring & analysis Solution Accelerator, love to connect and see if you are interested in evaluation and feedback.

youngc_splunk · ‎11-19-2024

@Naa_Win , we do have an EDI solutions accelerator. Love to connect and give you some dump on the solution. Let me know if you are interested.

youngc_splunk · ‎09-08-2021

Hello Gurus! I am sure some people may have run in to this. I am using extract command to parse fields from multi line unstructured event, but the data values are encapsulated by single quotes. Here is the example : ====EVENT 1======== 2021-09-08 00:00:00 ABC status - performance event name : 'James Bond' address : 'USA' age : '100' occupation : 'spy' performance event END ================== So the the following event, I am using transforms to transforms.conf [performance_data] DELIMS = "\r\n", ":" So above transforms partially works. The problem is the values has single quote ' encapsulated. Like this Field name "name" with value "'James Bond'". single quote included. How can I get rid of the single quote?

youngc_splunk · ‎08-04-2019

Hi @rosho ! I am Young Cho, author of "Getting Started with Splunk Security" app. Saw this question and also saw @woodcock 's good answer. This is to show you the approach (Technique) to engineer features from security activities for either machine learning and applying statistics. So, the real application should really consider the right threshold or it also can be a machine learning, to point out anomalies based on the type of traffic in the network. Also, streamstats should do "| streamstats avg(gap) by src dest" where I feel that it should be by "src dest" instead of just "dest". Let me know what you think and love to know if some of these techniques work for your environment.

youngc_splunk · ‎11-11-2015

Sam, maybe we should use DB Connect 1 until someone answers this DB Connect 2 issue.

Posts	12
Solutions	0
Karma Given	0
Karma Received	3
Member Since	‎06-12-2015

Online Status	Offline
Date Last Visited	‎11-23-2024 01:18 AM

Splunk Extract Command to process single or double...

Re: Stringing together searches

Re: Custom datetime.xml for x12 format

Re: How to get the difference of time between 2 ev...

Re: Mismatch with values in Join

Re: eval isnull() always returns true

Re: How to Assign Values for _time at Index Time ...

Re: Why is stanza for inputs conf is not working?

Re: Monitoring EDI transactions

Re: Why is stanza for inputs conf is not working?

Splunk Extract Command to process single or double...

Re: In this Splunk's video how do the values of "a...

Re: Splunk DB Connect 2: Why am I getting Internal...