About Aakanksha

Aakanksha · ‎03-06-2013

I am still not able to resolve it. I am plotting locations on Google map, and its corresponding csv file contains three column - LAT,LONG,CODE. Search String is - sourcetype="csv-2" |eval _geo=geo_lat+","+geo_lng According to my dashboard requirement i want to drilldown CODE and on clicking any of the _geo location the linking dashboard(say ACCESSIBILITY) should get open with parameter CODE replaced/appended(replaceString/addterm) in the search string of this new dashboard(ACCESSIBILITY). How this can be done? Thanks in anticipation.

Aakanksha · ‎03-04-2013

Hi, I am using Google map. code is below <module name="ConvertToIntention"> <param name="settingToConvert">maps.drilldown</param> <param name="intention"> <param name="name">stringreplace</param> <param name="arg"> <param name="Nodes"> <param name="value">$click.value$</param> </param> </param> </param> <module name="ViewRedirector"> <param name="viewTarget">Accessibility</param> </module> </module> How can I use the passed value(args Nodes) in redirector view (Accessibilty) in three different search strings.

Aakanksha · ‎02-19-2013

No, this will not work.Transpose will categorize all values in one column but still TOP or SORT command won't work here, as there will be no column name and data is different.

Aakanksha · ‎02-19-2013

I want top 10 values from the below query: Problem is , we have applied stats average on multiple column, so simply writing top 10 or head 10 won't work in this case. Sorting is also an issue in this case. ... |stats avg(http_data) as "HTTP",avg(https_data) as "HTTPS",avg(rtsp_data) as "RTSP",avg(rtp_data) as "RTP",avg(wtp_data) as "WTP",avg(wsp_data) as "WSP",avg(mms_data) as "MMS",avg(sip_data) as "SIP",avg(ftp_data) as "FTP",avg(dns_data) as "DNS Lookups",avg(smtp_data) as "SMTP",avg(pop3_data) as "POP3",avg(imap_data) as "IMAP",avg(skype_data) as "SKYPE",avg(torrent_data) as "TORRENT",avg(msn_data) as "MSN",avg(yahoo_data) as "YAHOO",avg(ddlink_data) as "DDLINK" ,avg(jabber_data) as "JABBER",avg(ppstream_data) as "PPSTREAM",avg(steam_data) as "STEAM",avg(imesh_data) as "IMESH",avg(hamachivpn_data) as "HAMACHIVPN",avg(mute_data) as "MUTE",avg(pando_data) as "PANDO",avg(orb_data) as "ORB",avg(winny_data) as "WINNY",avg(slingbox_data) as "SLINGEBOX",avg(fasttrack_data) as "FASTTRACK"

Aakanksha · ‎02-06-2013

No,it is just here in the post. In search query it is like - ... | sort - date_hour

Aakanksha · ‎02-05-2013

I have 1 week data uploaded in SPLUNK. I a sorting it on weekly as well as daily basis. Query is as follow: ... |chart limit=0 avg(KPI) by date, date _hour| sort - date _hour However, the result is not sorted on date_hour. How can this be resolved?

Aakanksha · ‎01-23-2013

i think join works on some common fields but i don't have any common field..plz correct me if i m wrong ..

Aakanksha · ‎01-23-2013

I have updated my question..and also i tried using appendcols but not sure whether i am using it correctly or not

Aakanksha · ‎01-23-2013

for example suppose i have a search query which gives me results avg1 and name1, and second search which gives a result avg2 and name2 now I want to create a table which contains these values of search1 & search2 as avgs and names thanks.. [Edit] Query1-- ... eval add = x+y+z |eval name="xyz"|stats avg(add) as avg1 Query2-- ... eval add=d+e+f | eval name="abc"|stats avg(add) as avg2 now-- result should be name avg ----------- xyz avg1 abc avg2

Aakanksha · ‎01-22-2013

hi I am trying to plot a trend line on top of column chart. But Splunk is drawing trends as column chart instead of line chart. How can we change this behavior of splunk.

Aakanksha · ‎01-16-2013

I have uploaded 1.50 GB of data. Splunk takes nearly 5 mins to render a single graph, which is really slow. What is the basic configuration needed for 2 Gb data? Also, We are facing issue in drilldown charts. Drilldown chart is visible on some of the systems but not on others, with same XML file(VIEW). Is it something related to configuration of system?

Aakanksha · ‎01-07-2013

How to create multiple tab in a single dashboard using advanced XML? I want to create a View with four tabs, each tab containing multiple charts and tables. Also, Is it possible to put two different charts in single panel?

Aakanksha · ‎12-30-2012

No, I want 3 weeks graph with 21 lines(7*3), ie. each week average data with granularity of single day data.

Aakanksha · ‎12-27-2012

Is it possible to display weekly as well as daily data on the same chart? Eg. Three weeks data with sub-scale of 7 days each.

Aakanksha · ‎12-11-2012

For calculations, we used the below approach: ((A/((SUM(A,B,H)-SUM(D,C,G,E,F)))100)) In Splunk: sourcetype=source1 | join date,time [search sourcetype=source3] | eval add1 = A +B+ H|join date,time [search sourcetype=source2] | eval add2=C+D |join date,time [search sourcetype=source3] |eval add3 =G+E|eval add4 = F+add3|eval sub = add1 - add4 |eval div = A/sub |eval final-result = div*100 By using “join” function here, we were able to get column names of all three source types and use eval on them. But the join does not consider all the possible combinations. SHEET contains sample data.

Aakanksha · ‎12-11-2012

Pleas Check Sample Data and Query link text

Aakanksha · ‎11-27-2012

Thank you for the information. Is there any application in splunk that will store search result directly in to Oracle?

Aakanksha · ‎11-23-2012

How can I download DBX - SQL database Extension? Does trial version of Splunk support Oracle connectivity?

Posts	18
Solutions	0
Karma Given	8
Karma Received	1
Member Since	‎10-11-2012

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

How can I use the arg value defined in redirector ...

Top 10 values from 10 different columns?

Sorting data on basis of date and date_hour

How to add result of multiple searches to a single...

Trendline(as line chart ) on top of column chart

SPLUNK Performance Issue

How to create multiple tab in a single dashboard u...

Is it possible to display weekly as well as daily ...

How does the JOIN or single TRANSACTION work in s...

How can I download DBX - SQL database Extension?

Re: How can I use the arg value defined in redirec...

How can I use the arg value defined in redirector ...

Re: Top 10 values from 10 different columns?

Top 10 values from 10 different columns?

Re: Sorting data on basis of date and date_hour

Sorting data on basis of date and date_hour

Re: How to add result of multiple searches to a si...