Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About anikeshp7
anikeshp7
Path Finder
Member since:
09-05-2020
10-17-2020
Community Statistics
| Posts | 25 |
| Solutions | 0 |
| Karma Given | 4 |
| Karma Received | 4 |
| Member Since | 09-05-2020 |
Activity Feed
- Posted Re: unable to find lookup file created on Splunk Search. 10-16-2020 11:56 PM
- Posted unable to find lookup file created on Splunk Search. 10-16-2020 10:18 AM
- Tagged unable to find lookup file created on Splunk Search. 10-16-2020 10:18 AM
- Tagged unable to find lookup file created on Splunk Search. 10-16-2020 10:18 AM
- Posted Re: time spent by users on Salesforce App Console Tab on All Apps and Add-ons. 10-04-2020 08:05 AM
- Tagged Re: time spent by users on Salesforce App Console Tab on All Apps and Add-ons. 10-04-2020 08:05 AM
- Posted time spent by users on Salesforce App Console Tab on All Apps and Add-ons. 10-02-2020 06:07 AM
- Tagged time spent by users on Salesforce App Console Tab on All Apps and Add-ons. 10-02-2020 06:07 AM
- Got Karma for Re: how to query time spent by user in a console. 10-02-2020 01:10 AM
- Got Karma for Re: how to query time spent by user in a console. 10-02-2020 01:03 AM
- Got Karma for Re: how to query time spent by user in a console. 10-02-2020 12:51 AM
- Got Karma for how to query time spent by user in a console. 10-02-2020 12:48 AM
- Posted Re: how to query time spent by user in a console on Splunk Search. 10-02-2020 12:17 AM
- Karma Re: how to query time spent by user in a console for ITWhisperer. 10-02-2020 12:17 AM
- Posted Re: how to query time spent by user in a console on Splunk Search. 10-01-2020 10:34 AM
- Posted Re: how to query time spent by user in a console on Splunk Search. 10-01-2020 10:08 AM
- Posted Re: how to query time spent by user in a console on Splunk Search. 10-01-2020 09:38 AM
- Posted Re: how to query time spent by user in a console on Splunk Search. 10-01-2020 09:22 AM
- Posted Re: how to query time spent by user in a console on Splunk Search. 10-01-2020 04:44 AM
- Posted Re: how to query time spent by user in a console on Splunk Search. 09-30-2020 11:15 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
10-16-2020
11:56 PM
Hi @richgalloway I tried searching in all apps as well. This is happening everytime I create a lookup file I cant find it but it exists. Is there something with version as well ? When splunk is loaded it shows version 7.3 but when I search for any lookup files the directory of lookups belongs to version 6.2 Shall I change the version somewhere ? How should I do it
... View more
10-16-2020
10:18 AM
I created a lookup csv file and when I try to search it in lookups I dont see the file. Its not allowing me to create with same name as there's already one exist. Any help why I am not able to see the file please.
... View more
Labels
- Labels:
-
chart
-
lookup
-
search job inspector
-
stats
10-04-2020
08:05 AM
shall I search the Account Page events by modifing the url attribute as "url":"/lightning/page/Account” this is event generated "attributes":{"app":{"appName":"Collections_Platform","appType":"Console","appNamespace":"c"},"url":"/lightning/page/home"}},"deviceAttributes":null}`` @ITWhisperer
... View more
10-02-2020
06:07 AM
For fetching any events related to a Salesforce App Console we generally use logRecordType=ailtn ("appName":"Collections_Platform" AND "appType":"Console") I have a requirement where I want to display time spent by Users on one of TAB inside the App Console. For ex -> time spent by users on Accounts Tab of the App Console. How would I meet this requirement ? How should I start the search query ? Any suggestions ?
... View more
Labels
- Labels:
-
dashboard
-
development
-
other
-
search
10-01-2020
10:34 AM
1 Karma
Thanks for this. One questions, multiplying days by 24 and adding it into hours would be a good approach to display time spent as hours:min How would I do that ? Or shall i simply display as strftime(timeSpentOnConsole ,"%T")
... View more
10-01-2020
10:08 AM
1 Karma
@ITWhisperer is this what You are asking to write as stats earliest(_time) as startofsession, latest(_time) as endofsession by sessionKey userId | eval timeloggedon=endofsession-startofsession |eval strftime(timeloggedon,"%j %H:%M") as temp |stats sum(temp) as timeSpentOnConsole by userId | lookup 2clicTest.csv UserID AS userId OUTPUT Name AS NAME | fields NAME timeSpentOnConsole | sort -timeSpentOnConsole | where NAME != ""
... View more
10-01-2020
09:38 AM
@isoutamothe dispTime column is coming as empty using this eval dispTime = tostring(totalsessiontime, "duration")
... View more
10-01-2020
09:22 AM
@ITWhispererThe previous query you wrote wasn't returning stats so had to tweak little bit.
... View more
10-01-2020
04:44 AM
I also want to know if the time displayed is which format and how can i format it to display in Hrs:Min
... View more
09-29-2020
09:54 PM
1 Karma
-We can identify the users using the userID. -If a user log in more than once concurrently, overlapping period doesn't get double counted -If the log in session terminates abnormally, then that will be logged as an end of session -Each event do have a session id
... View more
09-29-2020
04:07 AM
1 Karma
Hi I want to create a report to display time spent by user in a console Being beginner doesnt know how to query . Any suggestions ? index="123" AND organizationId="0123000000000342" logRecordType=ailtn ("appName":"Collections_Platform" AND "appType":"Console")
... View more
09-28-2020
08:41 AM
@ITWhispererI just simplified the query further to get unique logins in last 30 days index="123" AND organizationId="011110012D" logRecordType=ailtn ("appName":"Cash_Platform" AND "appType":"Console") earliest=-30d | dedup userId | lookup test.csv UserID AS userId | stats count(userId) This is returning the events . I welcome any suggestions for improvement ++Now Im trying to display time spent by user on the app console . Dont know how to write query for this.
... View more
09-24-2020
11:38 AM
yup. I also have a requirement where I want to show time spent by user on the console in above query. How should I achieve that ?
... View more
09-24-2020
08:32 AM
Hi @ITWhisperer it does retuen events with userId=*
... View more
09-24-2020
03:17 AM
Requirement- I want to display distinct logins into an app in the last 30 days. My query returns zero events. index="123" AND organizationId="011110012D" logRecordType=ailtn ("appName":"Cash_Platform" AND "appType":"Console") [|inputlookup "test"|table UserID|rename UserID as userId]|lookup test.csv UserID AS userId |timechart span=1mon dc(userId) as distinctLogins Here App name is Cash_Platform and lookup file test.csv contains UserID and UserNames Any Suggestions where am I doing wrong or how this can be improved to return valid events. Thanks
... View more
09-14-2020
01:13 AM
Yes @thambisetty . Trying to display names with session_key and time
... View more
09-13-2020
09:58 AM
Any suggestions how the query can be improved This returns no events as of now. In the lookup csv Im having UserId and Name as two columns. index=123 AND organizationId=00TY00000005677 AND logRecordType=ailtn (Lightning_Console) | dedup sessionKey | lookup test123.csv UserId AS userId OUTPUT UserId AS userId | table userId, sessionKey, _time
... View more
Labels
- Labels:
-
lookup
-
search job inspector
-
stats
-
table
09-12-2020
12:29 AM
Any suggestions how the query can be improved @vgtk4431 This returns no events as of now. In the lookup csv Im having UserId and Name as two columns. index=123 AND organizationId=00TY00000005677 AND logRecordType=ailtn (Lightning_Console) | dedup sessionKey | lookup test123.csv UserId AS userId OUTPUT UserId AS userId | table userId, sessionKey, _time
... View more
09-10-2020
10:11 PM
@vgtk4431 Yes the user is trying to execute a Search. Any suggestions how this can be avoided .
... View more
09-09-2020
10:40 AM
I have created a lookup test123.csv owned by me and
A user queries and he gets the error - "User has insufficient permissions to perform this operation. list_workload_pools and select_workload_pools capabilities are required."
When I do the same query I don't get any error but it also return 0 events. I dont get that error is it because I own the file ?
index=123 AND organizationId=00TY00000005677 AND logRecordType=ailtn (Lightning_Console) | dedup sessionKey | lookup test123.csv UserId AS userId OUTPUT UserId AS userId | table userId, sessionKey, _time
Would highly appreciate thoughts and suggestions on this .
... View more
Labels
- Labels:
-
fields
-
lookup
-
other
-
search job inspector
09-05-2020
08:47 AM
Hi, Im trying to display display top 10 users Name in the past 30 days using query index="123" AND organizationId="00980876655334" earliest=-30d logRecordType=axapx ((*DataTableController*) AND (*fetchData*)) |lookup Test.csv UserID AS userId OUTPUT Name AS NAME| stats count(userId) as usage by userId |sort -usage limit=10 In Test.csv I have columns UserId and Name containing userIds and respective Names of users The above query succesfully returns the top 10 UserId. However my requirement is to return the Names instead of the userIds. tweaking the last line of query as [ stats count(NAME) as usage by NAME |sort -usage limit=10 ] doesn't seem to work and gives error "Could not construct lookup 'Test.csv, UserID, AS, userId, OUTPUT, Name, AS, NAME'. " Can anyone please help me on this.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-17-2020
03:16 AM
|
