Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About michael_vi
michael_vi
Path Finder
Member since:
02-18-2021
a week ago
Community Statistics
| Posts | 44 |
| Solutions | 0 |
| Karma Given | 6 |
| Karma Received | 1 |
| Member Since | 02-18-2021 |
Activity Feed
- Posted Re: argument uri is not supported by this handler splunk - Splunk Cloud on Splunk Cloud Platform. a week ago
- Posted argument uri is not supported by this handler splunk - Splunk Cloud on Splunk Cloud Platform. a week ago
- Tagged argument uri is not supported by this handler splunk - Splunk Cloud on Splunk Cloud Platform. a week ago
- Karma Re: Remove portion of multivalue field with rex-sed for kiran_panchavat. 02-17-2025 05:54 AM
- Posted Re: Remove portion of multivalue field with rex-sed on Getting Data In. 02-17-2025 05:44 AM
- Posted Remove portion of multivalue field with rex-sed on Getting Data In. 02-16-2025 03:49 AM
- Tagged Remove portion of multivalue field with rex-sed on Getting Data In. 02-16-2025 03:49 AM
- Tagged Remove portion of multivalue field with rex-sed on Getting Data In. 02-16-2025 03:49 AM
- Tagged Remove portion of multivalue field with rex-sed on Getting Data In. 02-16-2025 03:49 AM
- Posted Assign to missing timestamp event previous event timestamp on Getting Data In. 01-22-2025 02:20 AM
- Posted Re: Is changing Class can affect indexing and Fishbucket CRC on Getting Data In. 01-15-2025 12:30 AM
- Posted Is changing Class can affect indexing and Fishbucket CRC on Getting Data In. 01-14-2025 11:48 PM
- Tagged Is changing Class can affect indexing and Fishbucket CRC on Getting Data In. 01-14-2025 11:48 PM
- Tagged Is changing Class can affect indexing and Fishbucket CRC on Getting Data In. 01-14-2025 11:48 PM
- Tagged Is changing Class can affect indexing and Fishbucket CRC on Getting Data In. 01-14-2025 11:48 PM
- Posted Re: Sending alert only once for similar events on Alerting. 12-29-2024 12:25 AM
- Posted Sending alert only once for similar events on Alerting. 12-22-2024 07:32 AM
- Posted Re: Split sourcetype + indexed fields on Getting Data In. 03-17-2024 12:04 AM
- Karma Re: Replication factor change before indexer removing for richgalloway. 03-13-2024 09:49 AM
- Posted Split sourcetype + indexed fields on Getting Data In. 03-13-2024 09:27 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
a week ago
An what about the other one... My question is why remote search doesn't work splunk search "index="some remote index on splunk cloud" | head 10" I'm getting the following error: ERROR: Unknown error for indexer: <splunk cloud>. Search results may be incomplete. If this occurs frequently , check on the peer.
... View more
a week ago
HI I'm trying to run a search via CLI from federated Splunk instance > Splunk cloud. Everything is configured correctly and I have access to all indexes that on Splunk Cloud from Federated Instance via web interface But when I'm trying to check connection via CLI on Federated Search instance splunk display app -uri https://<splunk cloud uri>:8089 I get this error: argument uri is not supported by this handler splunk Also, while trying to execute a search from Federated Search: splunk search "index="some remote index on splunk cloud" | head 10" I'm getting the following error: ERROR: Unknown error for indexer: <splunk cloud>. Search results may be incomplete. If this occurs frequently , check on the peer. Please assist
... View more
- Tags:
- federated
Labels
- Labels:
-
troubleshooting
02-16-2025
03:49 AM
Hi. I have a file that I want to remove portion of it during index time. Remove all the text between ************************************** For example: **********************************************************************
Started at : 25/02/16 04:07:04
Terminated at:
Elapsed time :
Software:
Version: 6.0.0.0
Built : 6.0.0.0.20141102.1-Release_
14/11/02 10:06:52
Context:
Account: SOC
Machine: NEW
IP addr: 255.555.543
CPU : Dual-Core
LOG Recycle Count:
**********************************************************************
25/02/16 04:07:04.834 | 7904 | TEST1
25/02/16 04:07:04.834 | 7904 | TEST2
25/02/16 04:07:04.865 | 7860 | TEST3
25/02/16 04:07:04.881 | 7860 | TEST4
... In the end I need to get: 25/02/16 04:07:04.834 | 7904 | TEST1
25/02/16 04:07:04.834 | 7904 | TEST2
25/02/16 04:07:04.865 | 7860 | TEST3
25/02/16 04:07:04.881 | 7860 | TEST4 Please assist Thanks
... View more
Labels
01-22-2025
02:20 AM
Hi, By default, if no timestamp exist in a field, Splunk defaulting timestamp of previous event On one hand, I do want Splunk to do it, but on the other hand I don't want Splunk to treat it as a "Timestamp Parsing Issues" in the Data quality. Is there any way explicitly to tell Splunk to do it? I just want Splunk to treat it as error. Thanks
... View more
Labels
- Labels:
-
field extraction
-
props.conf
-
sourcetype
01-15-2025
12:30 AM
I mean, if I change a Server Class in Deployment Server from one to another. Everything else stays the same.
... View more
01-14-2025
11:48 PM
Hi all, A general question that I couldn't find an answer to... If I change for the certain app class from one to another, and restart splunkd, will there be any affect on indexing? I mean will it re-index the same data or a portion of it twice? Or, since it's the same a app and same source, maybe there is no need to restart splunkd? Thanks
... View more
Labels
- Labels:
-
data
12-29-2024
12:25 AM
The desired result is to send alerts for all events > 0 and only once for alert that has 0 for the first time: Scheduled alerts: Time 0 5 10 15 20 25 30 35 40 45 50 55 0 5 10 15 20 25 30 # of Events 3 4 0 0 0 8 15 2 0 5 55 66 0 0 0 0 0 8 9 Desired output, i.e. the alert that I want to receive Time 0 5 10 25 30 35 40 45 50 55 0 25 30 # of Events 3 4 0 8 15 2 0 5 55 66 0 8 9 Is there a configuration that I need to activate in alerts box? Or is there something else that I'm missing?
... View more
12-22-2024
07:32 AM
We have a TrueSight integration with Splunk that is sending results when a certain event occurs. Sometimes no events are being sent, and I want to document only the first time when it happens, for example: Time 0 5 10 15 20 25 30 35 40 45 50 55 0 5 10 15 20 25 30 # of Events 3 4 0 0 0 8 15 2 0 5 55 66 0 0 0 0 0 8 9 I want to include also 0 values that occurs only the first time and not all the times when we have an alert. Please assist
... View more
Labels
- Labels:
-
alert action
-
alert condition
-
throttling
03-13-2024
09:27 AM
I have an issue with adding indexed fields to each of the new (splatted) sourcetype: Configuration that "duplicated" indexed fields for each sourcetype: Now I see fields: indexedfileds1, indexedfileds2 and indexedfileds3 as 200%, For example: indexedfields1 values: valuie1 150% value2 50% props.conf [MAIN SOURCE]
SHOULD_LINEMERGE = false
LINE_BREAKER = ([\r\n]+)
TIME_PREFIX = {\"time\":\"
MAX_TIMESTAMP_LOOKAHEAD = 25
TIME_FORMAT = %Y-%m-%dT%H:%M:%S.%6N%:z
TRUNCATE = 999999
TRANSFORMS-changesourcetype = sourcetype1, sourcetype2
TRANSFORMS-indexedfields = indexedfield1, indexedfield2, indexedfield3
[sourcetype1]
SHOULD_LINEMERGE = false
LINE_BREAKER = ([\r\n]+)
TIME_PREFIX = {\"time\":\"
MAX_TIMESTAMP_LOOKAHEAD = 25
TIME_FORMAT = %Y-%m-%dT%H:%M:%S.%6N%:z
TRUNCATE = 999999
[sourcetype2]
SHOULD_LINEMERGE = false
LINE_BREAKER = ([\r\n]+)
TIME_PREFIX = {\"time\":\"
MAX_TIMESTAMP_LOOKAHEAD = 25
TIME_FORMAT = %Y-%m-%dT%H:%M:%S.%6N%:z
TRUNCATE = 999999 transforms.conf [indexedfield1]
REGEX=
FORMAT=
WRITE_META=
[indexedfield2]
REGEX=
FORMAT=
WRITE_META=
[indexedfield3]
REGEX=
FORMAT=
WRITE_META=
[sourcetype1]
DEST_KEY-MetaData:Sourcetype
REGEX = some regex
FORMAT = sourcetype::sourcetype1
[sourcetype2]
DEST_KEY-MetaData:Sourcetype
REGEX = some regex
FORMAT = sourcetype::sourcetype2 I thought to move the indexed fields to each of the new sourcetype but then I see no indexed fields. Check with | tstats count props.conf [MAIN SOURCE]
SHOULD_LINEMERGE = false
LINE_BREAKER = ([\r\n]+)
TIME_PREFIX = {\"time\":\"
MAX_TIMESTAMP_LOOKAHEAD = 25
TIME_FORMAT = %Y-%m-%dT%H:%M:%S.%6N%:z
TRUNCATE = 999999
TRANSFORMS-changesourcetype = sourcetype1, sourcetype2
[sourcetype1]
SHOULD_LINEMERGE = false
LINE_BREAKER = ([\r\n]+)
TIME_PREFIX = {\"time\":\"
MAX_TIMESTAMP_LOOKAHEAD = 25
TIME_FORMAT = %Y-%m-%dT%H:%M:%S.%6N%:z
TRUNCATE = 999999
TRANSFORMS-indexedfields = indexedfield1, indexedfield2, indexedfield3
[sourcetype2]
SHOULD_LINEMERGE = false
LINE_BREAKER = ([\r\n]+)
TIME_PREFIX = {\"time\":\"
MAX_TIMESTAMP_LOOKAHEAD = 25
TIME_FORMAT = %Y-%m-%dT%H:%M:%S.%6N%:z
TRUNCATE = 999999
TRANSFORMS-indexedfields = indexedfield1, indexedfield2, indexedfield3 What is the needed configuration to see indexed fields per sourcetype, w/o showing 200% Thanks
... View more
Labels
- Labels:
-
props.conf
-
transforms.conf
03-13-2024
09:13 AM
Hi, We have 3 indexers and 1 search head (replication factor = 3).I need to permanently remove one indexer What is the correct procedure: 1. Change replication factor = 2 and then remove indexer OR 1. Remove indexer and after that change the replication factor to 2 Thanks
... View more
Labels
- Labels:
-
indexer
-
indexer clustering
12-31-2023
10:52 AM
Looks good. I'll check it. I also thought of using EVAL after extraction to replace NULLs and spaces: EVAL-OldType=if(isnull(OldType) OR OldType = " ", "noData", OldType)
EVAL-NewType=if(isnull(NewType) OR NewType = " ", "noData", NewType)
... View more
12-31-2023
04:49 AM
Managed to fix the old and new in props.conf: | rex "^([^\|]*\|){19}(?<OldType>[^\~|\|]*)\~|\|"
| rex "^([^\|]*\|){19}.+~(?<NewType>[^\|]*)\|" Still having trouble with the || (null values)
... View more
12-31-2023
03:47 AM
Something is missing. The 'NewType' filed may or may not start with the ~, if no data then it will start with the | In the attached picture the field 'NewType' is missing for the event that has only pipes.
... View more
12-31-2023
02:37 AM
@gcusello The problem is that, once props can't extract the field. it won't be shown in extracted fileds. so.. | fillnull value=NULL will not work
... View more
12-31-2023
02:16 AM
Good idea to combine... Is it possible to replace the NULL with space w/o using SPL? Within the porps.conf
... View more
12-31-2023
01:42 AM
Hi all, I have a very specifc regex extraction (search time extraction) _raw data example: | union [| makeresults | eval _raw = "Dec-28-2023|12:05:46,836|10.150.6.118|148:|some branch|uswer_name|d168a8b9-5647-421b-97ba-f2aa3bceb69a|1:Creation page stack|Success|action_portfolio_forms_c_save.action|8970:PORTFOLIO ONBOARDING - FORMS CAPTURE||3065254228||||||| ~newType|||"] [| makeresults | eval _raw = "Dec-28-2023|12:05:46,836|10.150.6.118|148:|some branch|uswer_name|d168a8b9-5647-421b-97ba-f2aa3bceb69a|1:Creation page stack|Success|action_portfolio_forms_c_save.action|8970:PORTFOLIO ONBOARDING - FORMS CAPTURE||3065254228|||||||oldType~newType|||"] [| makeresults | eval _raw = "Dec-28-2023|12:05:46,836|10.150.6.118|148:|some branch|uswer_name|d168a8b9-5647-421b-97ba-f2aa3bceb69a|1:Creation page stack|Success|action_portfolio_forms_c_save.action|8970:PORTFOLIO ONBOARDING - FORMS CAPTURE||3065254228||||||||||"] I want to extract 2 fields from position 19 of the pipe and until 20th position that include (or may not) 2 fields that need to be extracted new: comes right after 19th | and before ~ old: comes after ~ and before 20th | There are 3 option that the data may appear: |<space>~newType| |oldType~newType| |<null><null>| The problem that I have is when no data is presented (3rd option) , then the props.conf doesn't parse it In the end I need to have 2 fields, based on the example above: old new <space> newType oldType newType <space> <space> props.conf [user_activity]
REPORT-bb_extract = REPORT-bb_extract
EXTRACT-oldAccountType = ^(?:[^|]*\|){19}(?<old>[^\~|\|]*)
EXTRACT-newAccountType = (?:[^~]*\~){1}(?<new>[^|]*) transforms.conf [REPORT-bb_extract]
KEEP_EMPTY_VALS = true
DELIMS = "|"
FIELDS = "DATE","TIME","ip","branch","appName","userName","actionID","actionType","actionStatus","actionName","action","srcPortfolioId","refID","currency","TotalAmount","secondPortfolioId","multiTransfer","field18","field19","id2","field21","new","old" 1. How can I extract the field that may or may not include some value 2. How can I fix the the second regex to start with ~ after 19th | Thanks
... View more
Labels
- Labels:
-
field extraction
11-13-2023
02:40 AM
Yes, I did The thing is, the that any new font that I put into the fonts folder gives me gibberish...
... View more
11-13-2023
12:42 AM
After putting the new fonts, should I make any changes to reportCIDFontList = <string> In alert_actions.conf
... View more
11-09-2023
01:27 AM
I have a simple report that that has Hebrew in it. Exporting to CSV works as it should and I see the Hebrew in it, but exporting to PDF shows nothing. | makeresults
| eval title = "לא רואים אותי" Can someone help? Thanks
... View more
Labels
- Labels:
-
PDF
-
saved search
09-10-2023
02:54 AM
Hi,
I didn't find detailed info, how to connect Universal Forwarders to Monitoring Console.
In our organization there is no deployment server, but we do want to monitor Splunk UF/HF with monitoring console, so the info can be seen on MC > Forwarders > Forwarders: Deployment
What are the steps on the UF side to configure this.
Thanks
... View more
- Tags:
- splunk search
Labels
- Labels:
-
forwarder
-
monitoring console
09-07-2023
04:43 AM
import requests
url = "https://splunkbase.splunk.com/api/v1/app/"
limit = 1
url2= "https://splunkbase.splunk.com/api/v1/app/"
with open(r"C:\Users\denis.zarfin\PycharmProjects\pythonProject2\main.txt", 'w') as f:
f.write("name" + ", " + "uid" + ", " + "title" + ", " +'\n')
offset = -1
all_numbers = []
try :
while True:
offset += 1
try:
response = requests.get(url, params={"limit": limit, "offset": offset})
data = response.json()
for i in data["results"]:
url2 = str(url2) + str(i["uid"]) + "/release/"
response2 = requests.get(url2)
data2 = response2.json()
data2 = data2[0:1]
for j in data2:
a = str(j["name"])
b = str(i["uid"])
c = str(i["title"])
with open(r"C:\Users\denis.zarfin\PycharmProjects\pythonProject2\main.txt", 'a') as f:
f.write(a + ", " + b + ", " + c + ", " +'\n')
url2 = "https://splunkbase.splunk.com/api/v1/app/"
except:
pass
print(offset, a, b, c)
if offset > 2700:
break
except:
pass
print("ok") That one exports the results to CSV... but it's not that good. In the end I want to get 2 JSONs I was able to do it "manually" with: import json
import requests
result = []
for app_id in range(0, 1, 1):
url = f'https://splunkbase.splunk.com/api/v1/app/?offset={app_id}&limit=1'
data = requests.get(url).json()
print(f'Name: {data["results"]['uid']}')
... View more
07-18-2023
03:52 AM
Hi,
I'm trying to drill down to a panel with depends="$some token$" from the Number Display wiz, but instead to show/hide panel according to token, it opens a search.
I'm having trouble to make each of the 3 panels be dependable on token in Number Display wiz.
Please assist
<dashboard>
<label>Show Panel based on Click</label>
<row>
<panel>
<viz type="number_display_viz.number_display_viz">
<search>
<query>index="_internal" sourcetype="splunkd" log_level="*"
| stats count by log_level</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="number_display_viz.number_display_viz.bordercolor">#ffffff</option>
<option name="number_display_viz.number_display_viz.bordersize">2</option>
<option name="number_display_viz.number_display_viz.colorprimary">#000000</option>
<option name="number_display_viz.number_display_viz.colorprimarymode">auto</option>
<option name="number_display_viz.number_display_viz.colorsecondary">#000000</option>
<option name="number_display_viz.number_display_viz.colorsecondarymode">darker1</option>
<option name="number_display_viz.number_display_viz.max">100</option>
<option name="number_display_viz.number_display_viz.min">0</option>
<option name="number_display_viz.number_display_viz.nodatacolor">#0178c7</option>
<option name="number_display_viz.number_display_viz.padding">1</option>
<option name="number_display_viz.number_display_viz.pulserate">4</option>
<option name="number_display_viz.number_display_viz.shadowcolor">#F2F4F5</option>
<option name="number_display_viz.number_display_viz.shapebordercolor">#FFFFFF</option>
<option name="number_display_viz.number_display_viz.shapebordercolormode">static</option>
<option name="number_display_viz.number_display_viz.shapebordersize">1</option>
<option name="number_display_viz.number_display_viz.shapedropcolor">#ffffff</option>
<option name="number_display_viz.number_display_viz.shapeshadow">yes</option>
<option name="number_display_viz.number_display_viz.shapetexture">solid</option>
<option name="number_display_viz.number_display_viz.sparkHeight">30</option>
<option name="number_display_viz.number_display_viz.sparkWidth">90</option>
<option name="number_display_viz.number_display_viz.sparkalign">5</option>
<option name="number_display_viz.number_display_viz.sparkalignv">70</option>
<option name="number_display_viz.number_display_viz.sparkcolorfill">#009DD9</option>
<option name="number_display_viz.number_display_viz.sparkcolorline">#0178c7</option>
<option name="number_display_viz.number_display_viz.sparkcolormodefill">auto</option>
<option name="number_display_viz.number_display_viz.sparkcolormodeline">auto</option>
<option name="number_display_viz.number_display_viz.sparkmin">0</option>
<option name="number_display_viz.number_display_viz.sparknulls">gaps</option>
<option name="number_display_viz.number_display_viz.sparkorder">no</option>
<option name="number_display_viz.number_display_viz.sparkstyle">area</option>
<option name="number_display_viz.number_display_viz.spinnerspeedmax">20</option>
<option name="number_display_viz.number_display_viz.spinnerspeedmin">1</option>
<option name="number_display_viz.number_display_viz.style">a2</option>
<option name="number_display_viz.number_display_viz.subtitlealign">center</option>
<option name="number_display_viz.number_display_viz.subtitlealignv">70</option>
<option name="number_display_viz.number_display_viz.subtitlecolor">#5C6773</option>
<option name="number_display_viz.number_display_viz.subtitlecolormode">static</option>
<option name="number_display_viz.number_display_viz.subtitledrop">yes</option>
<option name="number_display_viz.number_display_viz.subtitledropcolor">#ffffff</option>
<option name="number_display_viz.number_display_viz.subtitlesize">40</option>
<option name="number_display_viz.number_display_viz.textalign">center</option>
<option name="number_display_viz.number_display_viz.textalignv">60</option>
<option name="number_display_viz.number_display_viz.textcolor">#000000</option>
<option name="number_display_viz.number_display_viz.textdrop">no</option>
<option name="number_display_viz.number_display_viz.textdropcolor">#ffffff</option>
<option name="number_display_viz.number_display_viz.textduration">300</option>
<option name="number_display_viz.number_display_viz.textmode">static</option>
<option name="number_display_viz.number_display_viz.textprecision">1</option>
<option name="number_display_viz.number_display_viz.textsize">100</option>
<option name="number_display_viz.number_display_viz.textunitposition">after</option>
<option name="number_display_viz.number_display_viz.textunitsize">50</option>
<option name="number_display_viz.number_display_viz.thickness">50</option>
<option name="number_display_viz.number_display_viz.thresholdcol1">#1a9035</option>
<option name="number_display_viz.number_display_viz.thresholdcol2">#d16f18</option>
<option name="number_display_viz.number_display_viz.thresholdcol3">#b22b32</option>
<option name="number_display_viz.number_display_viz.thresholdcol4">#ffffff</option>
<option name="number_display_viz.number_display_viz.thresholdcol5">#ffffff</option>
<option name="number_display_viz.number_display_viz.thresholdcol6">#ffffff</option>
<option name="number_display_viz.number_display_viz.thresholdsize">20</option>
<option name="number_display_viz.number_display_viz.thresholdval2">70</option>
<option name="number_display_viz.number_display_viz.thresholdval3">90</option>
<option name="number_display_viz.number_display_viz.titlealign">center</option>
<option name="number_display_viz.number_display_viz.titlealignv">30</option>
<option name="number_display_viz.number_display_viz.titlecolor">#edd051</option>
<option name="number_display_viz.number_display_viz.titlecolormode">static</option>
<option name="number_display_viz.number_display_viz.titledrop">no</option>
<option name="number_display_viz.number_display_viz.titledropcolor">#ffffff</option>
<option name="number_display_viz.number_display_viz.titlesize">65</option>
<option name="refresh.display">progressbar</option>
<drilldown>
<condition field="INFO">
<set token="tokINFO">true</set>
<unset token="tokWARN"></unset>
<unset token="tokERROR"></unset>
</condition>
<condition field="WARN">
<unset token="tokINFO"></unset>
<set token="tokWARN">true</set>
<unset token="tokERROR"></unset>
</condition>
<condition field="ERROR">
<unset token="tokINFO"></unset>
<unset token="tokWARN"></unset>
<set token="tokERROR">ERROR</set>
</condition>
</drilldown>
</viz>
</panel>
</row>
<row>
<panel depends="$tokINFO$">
<table>
<title>INFO details</title>
<search>
<query>index=_internal sourcetype=splunkd log_level="INFO"
| timechart count by component</query>
<earliest>$earliest$</earliest>
<latest>$latest$</latest>
</search>
<option name="drilldown">cell</option>
<option name="refresh.display">progressbar</option>
</table>
</panel>
<panel depends="$tokWARN$">
<table>
<title>WARN details</title>
<search>
<query>index=_internal sourcetype=splunkd log_level="WARN"
| timechart count by component</query>
<earliest>$earliest$</earliest>
<latest>$latest$</latest>
</search>
<option name="drilldown">cell</option>
</table>
</panel>
<panel depends="$tokERROR$">
<table>
<title>ERROR details</title>
<search>
<query>index=_internal sourcetype=splunkd log_level="ERROR"
| timechart count by component</query>
<earliest>$earliest$</earliest>
<latest>$latest$</latest>
</search>
<option name="drilldown">cell</option>
<option name="refresh.display">progressbar</option>
</table>
</panel>
</row>
</dashboard>
... View more
07-09-2023
04:31 AM
Is there any way to get the same # of rows (100) for the release URL, and not to do it 1 by 1? https://splunkbase.splunk.com/api/v1/app/<UUID>/release/
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
a week ago
|
Karma given to
| User | Karma Count |
|---|---|
| 1 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
