Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Anud
Anud
Path Finder
Member since:
01-24-2022
Thursday
Community Statistics
| Posts | 30 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 2 |
| Member Since | 01-24-2022 |
Activity Feed
- Posted Re: status of held Data has to complete with in the day itself. on Splunk Search. Thursday
- Posted Re: status of held Data has to complete with in the day itself. on Splunk Search. Thursday
- Posted Re: status of held Data has to complete with in the day itself. on Splunk Search. Wednesday
- Posted Re: status of held Data has to complete with in the day itself. on Splunk Search. Wednesday
- Posted status of held Data has to complete with in the day itself. on Splunk Search. Wednesday
- Tagged status of held Data has to complete with in the day itself. on Splunk Search. Wednesday
- Got Karma for Re: Sum of the field based on the other field values. 02-27-2024 05:10 AM
- Posted Re: Sum of the field based on the other field values on Splunk Search. 02-27-2024 01:05 AM
- Karma Re: Sum of the field based on the other field values for richgalloway. 02-27-2024 01:05 AM
- Posted Sum of the field based on the other field values on Splunk Search. 02-26-2024 10:28 AM
- Posted Re: Send an alert if one event doesn't occur in 10 min on Alerting. 01-13-2024 01:39 AM
- Posted Re: Send an alert if one event doesn't occur in 10 min on Alerting. 01-13-2024 01:37 AM
- Posted Send an alert if one event doesn't occur in 10 min on Alerting. 01-12-2024 02:10 AM
- Posted Re: how to join 2 lookup files to combine all the rows. on Splunk Search. 11-08-2023 09:27 AM
- Posted Re: how to join 2 lookup files to combine all the rows. on Splunk Search. 11-08-2023 05:54 AM
- Posted how to join 2 lookup files to combine all the rows. on Splunk Search. 11-08-2023 05:23 AM
- Posted Re: how to get when server goes down status. on Splunk Search. 06-02-2023 04:11 AM
- Posted Re: how to get when server goes down status. on Splunk Search. 06-01-2023 06:26 AM
- Tagged Re: how to get when server goes down status. on Splunk Search. 06-01-2023 06:26 AM
- Posted How to get when server goes down status? on Splunk Search. 06-01-2023 06:10 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
Thursday
Thanks for your query! I have applied logic along with query, it working as expected. please let me know earliest and latest logic for 12:00 AM to 11:59PM.
... View more
Thursday
We need to know particularly about how many H status were coming to C within the day(12AM to11:59PM).
... View more
Wednesday
H status at 2024-03-07T01:50:00.000-05:00 X 20240307 2024-03-07T03:40:07.000-05:00 X 20240307 C status at 2024-03-07T08:30:22.000-05:00 C 20240307 2024-03-07T08:30:22.000-05:00 C 20240307 So here count 2 One more H status at 2024-03-07T22:40:07.000-05:00 X 20240307 But its not completed within the day 2024-03-08T08:30:22.000-05:00 C 20240308
... View more
Wednesday
comparing both _time and DT and the NUM (different num will be there). In the sample data i have same NUM.
... View more
Wednesday
HI Team, when the status is H and it has to complete within the day itself. expected output for below sample data is count 2 completed overall within the day. Thanks in Advance! Sample output below: _time OVERAL DT NUM STAT FM WLM CS OB EM RC ER ST 2024-03-07T01:50:00.000-05:00 X 20240307 5 C C C H X X X X X 2024-03-07T03:30:10.000-05:00 X 20240307 5 C C C P X X X X X 2024-03-07T03:40:07.000-05:00 X 20240307 5 C C H H H H H H H 2024-03-07T06:10:14.000-05:00 X 20240307 5 C C C I X X X X X 2024-03-07T07:10:16.000-05:00 X 20240307 5 C C C H X X X X X 2024-03-07T07:30:17.000-05:00 X 20240307 5 C C C I X X X X X 2024-03-07T08:20:18.000-05:00 X 20240307 5 C C C C I C I C C 2024-03-07T08:30:22.000-05:00 C 20240307 5 C C C C C C C C C 2024-03-07T02:20:01.000-05:00 X 20240307 5 C C C X X X X X X 2024-03-07T03:30:10.000-05:00 X 20240307 5 C C C P X X X X X 2024-03-07T03:40:07.000-05:00 X 20240307 5 C C H H H H H H H 2024-03-07T07:10:16.000-05:00 X 20240307 5 C C C H X X X X X 2024-03-07T07:30:17.000-05:00 X 20240307 5 C C C I X X X X X 2024-03-07T08:20:18.000-05:00 X 20240307 5 C C C C I C I C C 2024-03-07T08:30:22.000-05:00 C 20240307 5 C C C C C C C C C 2024-03-07T010:30:10.000-05:00 X 20240307 5 C C C P X X X X X 2024-03-07T22:40:07.000-05:00 X 20240307 5 C C H H H H H H H 2024-03-07T22:10:16.000-05:00 X 20240307 5 C C C H X X X X X 2024-03-07T23:30:17.000-05:00 X 20240308 5 C C C I X X X X X 2024-03-07T00:20:18.000-05:00 X 20240308 5 C C C C I C I C C 2024-03-08T08:30:22.000-05:00 C 20240308 5 C C C C C C C C C
... View more
- Tags:
- count
Labels
- Labels:
-
count
02-27-2024
01:05 AM
1 Karma
Logic was worked. Thank you so much
... View more
02-26-2024
10:28 AM
Hi Team, how to Sum of the field based on the other field values. Row1 field values will be 0-9 and a-z. Sample one given below: ROW1 ROWcount 11 22 12 54 13 34 a1 56 a2 78 d3 67 c4 78 c5 79 Final Output be like: ROW1 ROWcount 1 110 a 134 d 67 c 157 Thanks in Advance!!
... View more
Labels
- Labels:
-
stats
01-13-2024
01:39 AM
Thanks for response @PickleRick Here my logic is for every 30mins one event1 will generate and within 5mins another event2 has to generate. If not it has to trigger the alert. Hope you understand the logic.
... View more
01-13-2024
01:37 AM
Thanks for response. For using eval condition and count the values not giving proper results. Here my logic is for every 30mins one event1 will generate and within 5mins another event2 has to generate. If not it has to trigger the alert.
... View more
01-12-2024
02:10 AM
How Send an alert if one event doesn't occur in 10 min with below format data. The data will send every 1 hour with 30mins interval. example: alert has trigger for the below data is 2:40 _time ID Bill_ID 2024-01-12T03:10:53.000-06:00 TTF5 80124 2024-01-12T03:08:07.000-06:00 TFB6 84958 2024-01-12T02:34:54.000-06:00 TFB6 84958 2024-01-12T02:09:48.000-06:00 TTF5 80124 2024-01-12T02:07:02.000-06:00 TFB6 84958 2024-01-12T01:36:59.000-06:00 TTF5 80124 2024-01-12T01:33:37.000-06:00 TFB6 84958 2024-01-12T01:11:13.000-06:00 TTF5 80124 2024-01-12T01:07:22.000-06:00 TFB6 84958 2024-01-12T00:37:08.000-06:00 TTF5 80124 2024-01-12T00:35:08.000-06:00 TFB6 84958 2024-01-12T00:11:16.000-06:00 TTF5 80124 2024-01-12T00:10:20.000-06:00 TFB6 84958 2024-01-11T23:36:19.000-06:00 TTF5 80124 2024-01-11T23:34:17.000-06:00 TFB6 84958
... View more
Labels
- Labels:
-
alert action
11-08-2023
09:27 AM
Thanks for the explanation..!! This is not working. | inputlookup fileB.csv
table A E F
|lookup fileA.csv A OUTPUT E This is the actual result, but not getting the proper results.
... View more
11-08-2023
05:54 AM
sorry i didnt get you this is the file flow One fileA data looks: A E F 234 CAR 2 456 BUS 3 Second fileB data: A B C 234 MON 3 234 TUES 4 234 WED 5 234 THUR 1 234 FRI 2 234 SAT 1 456 MON 3 456 TUES 4 456 WED 5 456 THUR 1 456 FRI 2 456 SAT 1 Final output be like : E A B C CAR 234 MON 3 CAR 234 TUES 4 CAR 234 WED 5 CAR 234 THUR 1 CAR 234 FRI 2 CAR 234 SAT 1 BUS 456 MON 3 BUS 456 TUES 4 BUS 456 WED 5 BUS 456 THUR 1 BUS 456 FRI 2 BUS 456 SAT 1
... View more
11-08-2023
05:23 AM
how to join 2 lookup files to combine all the rows. I used this query but not giving proper values and used join/append no use. | inputlookup fileA table A E F |join [ inputlookup fileB.csv] table E A B C One file data looks: A E F 234 CAR 2 456 BUS 3 Second file data: A B C 234 MON 3 234 TUES 4 234 WED 5 234 THUR 1 234 FRI 2 234 SAT 1 456 MON 3 456 TUES 4 456 WED 5 456 THUR 1 456 FRI 2 456 SAT 1 Final output be like : E A B C CAR 234 MON 3 CAR 234 TUES 4 CAR 234 WED 5 CAR 234 THUR 1 CAR 234 FRI 2 CAR 234 SAT 1 BUS 456 MON 3 BUS 456 TUES 4 BUS 456 WED 5 BUS 456 THUR 1 BUS 456 FRI 2 BUS 456 SAT 1 Thanks in Advance..!!
... View more
Labels
- Labels:
-
lookup
06-02-2023
04:11 AM
Hi gcusello, I want first down time server status, any idea time status 6/2/2023 12:55 down 6/3/2023 12:52 down 6/4/2023 12:50 down 6/4/2023 12:46 up 6/4/2023 12:45 down 6/4/2023 12:45 down MY output want to display server down at 12:45 6/4/2023 12:45 down
... View more
06-01-2023
06:26 AM
Thanks for the response..!! This one tried giving all down status but i need when down time started first for the server.
... View more
- Tags:
- thanks
06-01-2023
06:10 AM
HI Team, I want to get when server goes down time.
time
status
6/2/2023 12:55
down
6/3/2023 12:52
down
6/4/2023 12:50
down
6/4/2023 12:46
up
6/4/2023 12:45
down
6/4/2023 12:45
down
MY output want to display server down at 12:45
6/4/2023 12:45
down
Thanks in Advance..!!
... View more
Labels
- Labels:
-
stats
05-04-2023
06:02 AM
Thanks for the quick response!! Here each day we have 18GB file size, so is it possible for normal process way to ingest. That data is from Jan month and indexed time stamp will be today date or else Jan month. how it looks, please let us know.
... View more
05-04-2023
05:15 AM
Hi Team, Please suggest me to ingest the Jan month data into Splunk. Those files are CSV files and its contains 18gb size and total 4 days data has to sent to Splunk index. please let us know the possibilities to ingest old data. Thanks in advance!!
... View more
Labels
- Labels:
-
CSV
09-21-2022
07:05 AM
HI Team, I am getting 2 hr time span only if i mentioned the 1 or 3 or 4 hours span too in the visualization line chart. Running below command gives correct time 1hr span but in the visualization facing the issue. attached the reference.
index="xx" * "*"
|eval Day case(like(Date,"%22-AUg-22"),"work",like(Date,"%23-AUg-22"),"work",like(Date,"%24-AUg-22"),"week",like(Date,"%25-AUg-22"),"week",1=1,Day) |timechart span=1h max(YYY) by Day
Thanks in Advance.
... View more
Labels
- Labels:
-
timechart
04-25-2022
10:36 AM
Yes, i know that one Cisco team integration...this add-on will use only group WebEx chat based on room I'd... Here my question, with some condition through splunk alert email is getting triggered.. So like that how to communicate through WebEx chat to individual person
... View more
04-25-2022
09:53 AM
https://splunkbase.splunk.com/app/4870/ Already in my environment that add-on is available, but i need when each email(individual person) is triggered through Splunk alert, that has to be communicated through webEx chat. Please see below email triggered condition.
... View more
04-24-2022
10:36 AM
Hi team,
I have a query related to splunk alert msg send to WebEx chat to individual person.
If there is any process, please help me out on this.
Thanks in advance.
... View more
- Tags:
- splunk-search
Labels
- Labels:
-
other
04-24-2022
10:30 AM
Here target is to check the version for the host and their names. So we have only 2hosts...final version is compared to 2and 3hosts with their same names. Sometimes it takes to another day,so we need compare pervious day host latest time. Thank you
... View more
04-24-2022
07:58 AM
Host is the criteria. We need to check host latest and earliest time in a day... accordingly thier names and version have to compare. Thankyou
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Thursday
|
