×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
lgroot
Explorer
Member since: ‎09-25-2014
‎11-06-2024
Community Statistics
Posts 4
Solutions 1
Karma Given 0
Karma Received 0
Member Since ‎09-25-2014
Activity Feed
View All

Re: ITSI no services and N/A in tree view

by in Splunk ITSI
‎07-08-2021 11:44 PM
‎07-08-2021 11:44 PM
We have got some support of Splunk, and the problem was in the SA-indexCreation  app at the indexer. The wrong version was installed, where there was no support for metric collection.  Now we have installed the correct version, and everything works fine.  ... View more

ITSI no services and N/A in tree view

by in Splunk ITSI
‎06-24-2021 06:51 AM
‎06-24-2021 06:51 AM
Hello, I have a strange problem in ITSI after een upgrade. The configured services are not showing up in the Service Analyzer Tile view and they are grey-ed out in the tile view. When i open the service with a deep dive, i can see my KPI with data and a Service Health Score.  Does anybody know what's going on? ... View more
Labels

Put results in one row table

by in Splunk Search
‎09-24-2015 05:45 AM
‎09-24-2015 05:45 AM
Hello, I have got a question about a Query. This is the query: index=security-mijnssp "View rendered = /error.jspx" OR "Er is een fout opgetreden op de JSF" | rex "BSN=(?P<BSN>[^<]+) View" | rex "INFO n.s.m.w.l(?P<INFO>[^<]+)"|rex "ERROR n.s.m.w.l(?P<ERROR>[^<]+)"| table BSN, INFO, ERROR, _time And this is how the table look likes: My question is how i can put the results in one row? So that BSN, INFO, ERROR and Time are on the same line sorted by Time? Thanks for the answer! ... View more

Combine table rows

by in Splunk Search
‎09-24-2015 03:27 AM
‎09-24-2015 03:27 AM
Hi everyone, I've got a question about a query i have made: index=security-mijnssp "View rendered = /error.jspx" OR "Er is een fout opgetreden op de JSF pagina" | rex "BSN=(?P<BSN>[^<]+) View" | rex "INFO n.s.m.w.l(?P<INFO>[^<]+)"|rex "ERROR n.s.m.w.l(?P<ERROR>[^<]+)"| table INFO,BSN, ERROR, _time Is it possible to combine the results of this query in one row? So that the INFO,BSN,ERROR and time are in one row? ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎11-06-2024 12:04 PM