Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About alvaromoraes
alvaromoraes
Path Finder
Member since:
10-10-2012
06-05-2020
Community Statistics
| Posts | 20 |
| Solutions | 0 |
| Karma Given | 9 |
| Karma Received | 0 |
| Member Since | 10-10-2012 |
Activity Feed
- Karma Re: Every 1st of month Splunk stops showing data indexed from Splunk DB Connect for lukejadamec. 06-05-2020 12:46 AM
- Karma Re: Every 1st of month Splunk stops showing data indexed from Splunk DB Connect for lukejadamec. 06-05-2020 12:46 AM
- Karma Re: Every 1st of month Splunk stops showing data indexed from Splunk DB Connect for lukejadamec. 06-05-2020 12:46 AM
- Karma Re: New version of the Splunk DB Connect (formerly DBX) app is proprietary? for Dan. 06-05-2020 12:46 AM
- Karma Re: Login error in Splunk 5.0.1 for jguarini. 06-05-2020 12:46 AM
- Karma Re: Login error in Splunk 5.0.1 for jguarini. 06-05-2020 12:46 AM
- Karma Re: Specify timestamp display format for timechart axis labels for Ron_Naken. 06-05-2020 12:45 AM
- Karma Re: Can I format a table in reverse (field headings by row, not by columns)? for dwaddle. 06-05-2020 12:45 AM
- Karma Re: "Other" in timechart for Stephen_Sorkin. 06-05-2020 12:45 AM
- Posted Re: Every 1st of month Splunk stops showing data indexed from Splunk DB Connect on Splunk Search. 08-01-2013 07:52 AM
- Posted Re: Every 1st of month Splunk stops showing data indexed from Splunk DB Connect on Splunk Search. 08-01-2013 07:38 AM
- Posted Re: Every 1st of month Splunk stops showing data indexed from Splunk DB Connect on Splunk Search. 08-01-2013 06:57 AM
- Posted Re: Every 1st of month Splunk stops showing data indexed from Splunk DB Connect on Splunk Search. 08-01-2013 06:44 AM
- Posted Re: Every 1st of month Splunk stops showing data indexed from Splunk DB Connect on Splunk Search. 08-01-2013 06:30 AM
- Posted Every 1st of month Splunk stops showing data indexed from Splunk DB Connect on Splunk Search. 08-01-2013 06:16 AM
- Tagged Every 1st of month Splunk stops showing data indexed from Splunk DB Connect on Splunk Search. 08-01-2013 06:16 AM
- Tagged Every 1st of month Splunk stops showing data indexed from Splunk DB Connect on Splunk Search. 08-01-2013 06:16 AM
- Tagged Every 1st of month Splunk stops showing data indexed from Splunk DB Connect on Splunk Search. 08-01-2013 06:16 AM
- Posted Re: Date problem with indexed events (month / day to day / month) on Getting Data In. 07-04-2013 05:51 AM
- Posted Date problem with indexed events (month / day to day / month) on Getting Data In. 07-03-2013 11:45 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
08-01-2013
07:52 AM
Thank you again! 🙂
... View more
08-01-2013
07:38 AM
Man, what kind of black magic was that? lol
Now it works like a charm!
What I did:
1) In Splunk DB Connect I went to "Search" option (not in the Search app).
2) Run the search for "All the time" range (without any search string). Some events from today returned \o/
3) Verified my dashboards and 1st August is showing ok now!
lukejadamec, thank you so much for the help! 🙂
If you can, put your answer below so I can vote to this as best answer!
:D
Thank you!
... View more
08-01-2013
06:57 AM
We use an Oracle database.
Yes, when I run queries from the DBX in "Database Query" option everything works ok and fast.
... View more
08-01-2013
06:44 AM
It is broken at moment, I will not try to reinstall until tomorrow.
... View more
08-01-2013
06:30 AM
1) To get working again I reinstall everything without data backup (with data the problem usually occurs again).
2) Even in a simple search the problem is the same, if I run a search of Last 15 minutes no data is found ("No matching events found. Inspect ...").
3) No, they aren't.
Thank you for the answer.
... View more
08-01-2013
06:16 AM
Hello,
I have some queries running at Splunk DB Connect, when month changes, like today (from July to August), it always stop showing new indexed data. I am sure that queries are running and events are being indexed (see logs below), because "Summary" dashboard shows it. Every 1st day of month all the charts and dashboards that use data from Splunk DB Connect stop working... every month is the same problem. Anyone know some workaround? I already tried to reinstall Splunk DB Connect without any success.
dbx.log:
2013-08-01 10:11:43.089 monsch1:INFO:Scheduler - Execution of input=[dbmon-dump://PSAV/SYSTEMDELAY ] finished in duration=0 ms with resultCount=1 success=true continueMonitoring=true
Summary Dashboard:
sourcetype Count Last Update
1 SYSTEMDELAY 8,409 Thu Aug 1 10:12:43 2013
... View more
07-04-2013
05:51 AM
I tagged like "Splunk DB Connect", because the problem occurs only from events indexed with it. It is not a database field, it is the timestamp from the event.
Yesterday, after a clean install, the first event indexed was 07/03/2013, but the search interpreted the date as 03/07/2013 (Mar 7 2013). Before 07/01 it was working right. Today my summary shows:
Earliest event Thu Mar 7 15:43:00 2013
Latest event Thu Jul 4 09:48:15 2013
There is no such event from March in my Splunk, the earliest date is 07/03. Something is converting this date wrong.
Hope this helps. Thank you for your concern.
... View more
07-03-2013
11:45 AM
Hello,
I'm with a problem that started 07/01/2013. The pattern for date usually is month/day/year, but for some reason after 1st of July, it is converting the date 07/03/2013 to 03/07/2013 (Mar 7 2013).
We don't know about any system modification. I tried to change Windows Regional and Language Options, but don't worked. The indexed data is coming from Splunk DB Connect.
Anyone know about any solution?
Thank you very much!
... View more
02-01-2013
09:13 AM
No, I don't set up any configuration in props.conf. I'm making new Database Inputs (new source type too) and it's working now. Thank you for the answer.
... View more
02-01-2013
05:59 AM
Hello,
Since the update to 1.0.8 today (01/02) the Splunk DB Connect stopped indexing data in Splunk.
Splunk show my sources as updated today:
But when I query data 4 hours ago, no results are found:
In DB Connect log there are no errors.
I recreated the connections Connect the DB, but had no effect.
Has anyone had this problem?
Thank you in advance for any help.
... View more
01-29-2013
10:21 AM
I tried your suggestion in my source, same problem. I hate this empty column! haha
Thanks for the answer.
... View more
01-29-2013
10:15 AM
Yes, I tried to modify the time range like you said, but it didn't work. The column without any results always appear in the chart.
Thanks for the answer.
... View more
01-24-2013
10:13 AM
I don't know if chart can automatically scale (I'm interested in this "scale-ability" too).
Just asking, you tried to use logarithmic unit scale option to achieve your intent?
... View more
01-24-2013
10:02 AM
Yes, you can, read more in http://splunk-base.splunk.com/answers/11649/specify-timestamp-display-format-for-timechart-axis-labels?page=1&focusedAnswerId=11652#11652
For me, Ron Naken tip worked.
Read this for more about date format info: http://docs.splunk.com/Documentation/Splunk/5.0.1/SearchReference/Commontimeformatvariables
Use something like above to get your "3/12/Sat" format:
... | rename _time AS Time | eval Time=strftime(Time, "%m/%d/%A")
I hope this can help you!
... View more
01-24-2013
08:04 AM
Hello comunity,
I need help to hide a value unavailable in a timechart. I searched for some functions, but I have no sucess trying.
Please, see the image below:
I don't want the time column "13:00" appearing in timechart, 'cause i don't have results yet (my database query get results with an interval of 15 minutes). You know anything to hide it until results are avaiable?
My search:
sourcetype="backlog_baonline" | timechart span=1h max(TOTAL) by ACTIVITY limit=100 | rename _time AS Time | eval Time=strftime(Time, "%H:%M")
Time range: -4h to now
I tried usenull=f useother=f, but it didn't work for my purpose.
Thank you in advance!
... View more
01-22-2013
12:12 PM
After restarting the computer Splunk is working. Maybe it was the browser cache, like jguarini suggested.
Thanks.
... View more
01-22-2013
11:34 AM
Hello to all,
I can't login in my Splunk free version 5.0.1.
I remember that I was in Manage app screen, then my session ended. Now, when I try to login, I see this message: "Your session has expired. Log in to return to the system."
My password/user are correct.
Can anyone provide some help?
Thank you in advance.
... View more
12-05-2012
10:45 AM
Sorry to bother with that question, but dbx wasn't a proprietary app? I'm confused because I requested access to it in the last week.
Thank you,
Alvaro.
... View more
- Tags:
- Splunk DB Connect 1
11-13-2012
11:53 AM
Hello,
My suggestion is to create some Java or VBA script to do it.
Some links:
http://stackoverflow.com/questions/12605920/convert-multiple-xls-files-to-csv-files-separated-by-semicolons
http://stackoverflow.com/questions/10803395/is-it-possible-to-batch-convert-csv-to-xls-using-a-macro
... View more
