Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About vadlamudi
vadlamudi
Explorer
Member since:
01-18-2017
10-21-2021
Community Statistics
| Posts | 14 |
| Solutions | 0 |
| Karma Given | 3 |
| Karma Received | 0 |
| Member Since | 01-18-2017 |
Activity Feed
- Karma Re: Clickable value in the output table for Chef. 10-21-2021 09:31 AM
- Posted Clickable value in the output table on Splunk Search. 10-20-2021 03:18 PM
- Posted Dropdown options from a panel doesn't appear on Dashboards & Visualizations. 10-15-2021 02:23 PM
- Karma Re: Splunk dashboard clickable table output for somesoni2. 10-13-2021 12:31 PM
- Karma Re: Splunk dashboard clickable table output for richgalloway. 10-13-2021 12:31 PM
- Posted Re: Splunk dashboard clickable table output on Splunk Search. 10-13-2021 12:18 PM
- Posted Splunk dashboard clickable table output on Splunk Search. 10-13-2021 11:47 AM
- Posted first query table output as input to another query on Splunk Search. 10-06-2021 01:57 PM
- Posted Re: Splunk labels in table format on Splunk Search. 10-05-2021 12:26 PM
- Posted Re: Splunk labels in table format on Splunk Search. 10-05-2021 11:34 AM
- Posted Re: Splunk labels in table format on Splunk Search. 10-05-2021 10:36 AM
- Posted Re: Splunk labels in table format on Splunk Search. 10-05-2021 09:05 AM
- Posted Splunk labels in table format on Splunk Search. 10-04-2021 04:38 PM
- Posted Splunk search head certificate on Getting Data In. 06-28-2019 01:55 PM
- Tagged Splunk search head certificate on Getting Data In. 06-28-2019 01:55 PM
- Tagged Splunk search head certificate on Getting Data In. 06-28-2019 01:55 PM
- Tagged Splunk search head certificate on Getting Data In. 06-28-2019 01:55 PM
- Posted Re: how to set the values for the concurrent search job limit for a role on Splunk Search. 07-13-2017 11:01 AM
- Posted how to set the values for the concurrent search job limit for a role on Splunk Search. 07-11-2017 03:44 PM
- Tagged how to set the values for the concurrent search job limit for a role on Splunk Search. 07-11-2017 03:44 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
10-20-2021
03:18 PM
HI There, Can i please know how make the REQUEST_ID clickable from the below query. i want pass the REQUEST_ID from query1 to query2 when the user clicks on the REQUEST_ID in table from query1. Query 1: index=<<index_name>> | dedup REQUEST_ID | table USER_ID, ENTITY_TYPE, ENTITY_ID, REQUEST_ID, STATUS | where USER_ID="123123123" Query 2: Index=<<index_name>> "error" | where $REQUEST_ID$ Thank you
... View more
10-15-2021
02:23 PM
Hello, I am trying to create a dropdown panel with the below mentioned splunk query. I was able to view the results when i manually run the query but the dropdown is not populating any results. Any help would be appreciated. Query: index=<< index_name >> | dedup SERVER_TYPE | table SERVER_TYPE Thank You
... View more
10-13-2021
12:18 PM
HI @richgalloway I am facing with below error when i tried the above solution that you provided. ERROR: Node drilldown is not allowed here Thank You
... View more
10-13-2021
11:47 AM
Hi There, I have two queries [Query 1 and Query 2]. what i am planning to achieve is that when user clicks on the server_ID for tabular output of Query 1, then it should be passed as INPUT to the WHERE clause in Query 2 . Any help would be appreciated. Query 1: index=<<index_name>> sourcetype=webserver | dedup server_ID | table server_ID Query 1 Output: server_ID 49552473-567 d5eedf55-dca 5d4bb774-74a 03f03042-1f7 Query 2: index=<< index_name>> "Exception" | where server_ID= "server_ID from Query1 table" Thank You
... View more
10-06-2021
01:57 PM
Hello, Can i please know how to parse the value to the 2nd query from the output of 1st query. Any help would be appreciated. 1st query: index=<index_name> sourcetype=<sourcetype_name> | table k8s_label | where k8s_label="id=<id_number>" 1st Query Output: name=peter project_id=123 user_id=2700835661 zone=us-west-2a 2nd Query: index=<index_name> "server failed" Project_id=<need to get project_id from the result of 1st query Output> Thanks
... View more
10-05-2021
12:26 PM
Thank you for the query @somesoni2 . When i run the query, i am getting the below output. It is not extracting the K8s_labels. [ 2021-02-04 23:14:28.925 SingleApp log:158] 200 GET /apache/proxy/user/1123123/qsdddqwedqewdqwdqwd/api (@1.1.1.1.1) 0.98ms
... View more
10-05-2021
11:34 AM
@somesoni2 Below is the expected table format from the key value pairs. Log event: [ 2021-02-04 23:14:28.925 SingleApp log:158] 200 GET /apache/proxy/user/1123123/qsdddqwedqewdqwdqwd/api (@1.1.1.1.1) 0.98ms k8s_label = app=jupyterhub k8s_label = component=server k8s_label = entity_type=jupyter-lab k8s_label = heritage=jupyterhub k8s_label = identity_name=namespace k8s_label = notebook_id=1123324234 k8s_label = notebook_name=learningpython.iypnb k8s_label = project_id=123 k8s_label = sdr.appname=notebooks k8s_label = user=mattparker k8s_label = user_id=1123234 k8s_label = zone=us-east-2b Expected Ouptut: The k8s_labels from the log event should be in table format. below is the sample output of k8s_label. notebook_name earningpython.iypnb project_id 123 user mattparker
... View more
10-05-2021
10:36 AM
i will be unable to add the transforms (no access to the splunk infra). Therefore, i am looking for the search time commands. Any direction to start will be helpful.
... View more
10-05-2021
09:05 AM
Hi @PickleRick sorry for the confusion. What i trying to achieve here is that something like below in tabular format. i am trying to put the key value pairs in tabular format. notebook_name learningpython.iypnb project_id 123 user mattparker
... View more
10-04-2021
04:38 PM
Hi There, Log event: [ 2021-02-04 23:14:28.925 SingleApp log:158] 200 GET /apache/proxy/user/1123123/qsdddqwedqewdqwdqwd/api (@1.1.1.1.1) 0.98ms k8s_label = app=jupyterhub k8s_label = component=server k8s_label = entity_type=jupyter-lab k8s_label = heritage=jupyterhub k8s_label = identity_name=namespace k8s_label = notebook_id=1123324234 k8s_label = notebook_name=learningpython.iypnb k8s_label = project_id=123 k8s_label = sdr.appname=notebooks k8s_label = user=mattparker k8s_label = user_id=1123234 k8s_label = zone=us-east-2b I am trying to achieve the k8s_labels in table format in splunk but however, when i us the below query i am getting an error. any help would be appreciated Query: index=<index_name> sourcetype=<sourcetype_Name> 1123123 | table k8s_label="user_id=1123234",k8s_label="mattparker" Error: Error in 'table' command: Invalid argument: 'k8s_label=user_id=1123234' Thank You
... View more
Labels
- Labels:
-
field extraction
-
fields
-
regex
-
rex
-
stats
-
subsearch
-
transaction
06-28-2019
01:55 PM
Hello,
Is there a way to know which certificate the splunk search head is using thru CLI ?
Thanks
... View more
07-13-2017
11:01 AM
Thank you for the reply. But i would like to know what would the good value for User-level concurrent search jobs limit .
... View more
07-11-2017
03:44 PM
Can i please know how to calculate the values for " user-level concurrent search job limit" ,"user level concurrent real time search job limit" , "limit total job disk quota" . What is the role of "limit total job disk quota" because in our environment jobs are getting queued for some users until other users jobs are completed and do the increase of "user-level concurrent search job limit" will solve the issue ( currently it is 30 )
... View more
01-18-2017
07:38 AM
hi,
Can anyone please help me with a search to to identify scheduled jobs for abc and xyz application and the user owning that job? i know i need to use index=_internal and source=scheduler.log . But i am not getting the exact requirement that i need.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-21-2021
10:51 PM
|
