Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About ashidhingra
ashidhingra
Path Finder
Member since:
05-13-2022
01-23-2024
Community Statistics
| Posts | 37 |
| Solutions | 0 |
| Karma Given | 44 |
| Karma Received | 0 |
| Member Since | 05-13-2022 |
Activity Feed
- Posted Re: How to get peakstats and a count of success and errors for a month in one table? on Splunk Search. 01-22-2024 11:38 PM
- Posted How to get peakstats and a count of success and errors for a month in one table? on Splunk Search. 01-22-2024 09:12 PM
- Posted How to get peak TPS stats for a month with the count of all route codes ? on Splunk Search. 01-19-2024 01:00 PM
- Karma Re: How to exclude specific time ranges in search results for martin_mueller. 01-10-2024 01:45 AM
- Karma Re: How to exclude specific time ranges in search results for somesoni2. 01-10-2024 01:45 AM
- Karma How to exclude specific time ranges in search results for jedatt01. 01-10-2024 01:45 AM
- Posted Re: Show all columns after using transpose splunk on Splunk Search. 07-20-2022 10:54 AM
- Posted How can I make transpose work for all more than 5 days of data? on Splunk Search. 07-20-2022 10:30 AM
- Karma Re: How to create a 14 day search for specific time range (02:00 - 06:00) only? for gcusello. 07-20-2022 10:26 AM
- Karma Re: How to transpose a table to make the values in Column 1 the header labels? for javiergn. 07-20-2022 10:07 AM
- Karma Re: Transpose and Timechart giving unnecessary fields for woodcock. 07-20-2022 10:00 AM
- Karma Re: How to create a 14 day search for specific time range (02:00 - 06:00) only? for burwell. 07-19-2022 06:28 AM
- Posted Re: How to create a 14 day search for specific time range (02:00 - 06:00) only? on Splunk Search. 07-19-2022 06:27 AM
- Karma Re: How to create a 14 day search for specific time range (02:00 - 06:00) only? for bowesmana. 07-19-2022 06:26 AM
- Posted How to create a 14 day search for specific time range (02:00 - 06:00) only? on Splunk Search. 07-18-2022 02:27 PM
- Posted How can I use * in eval if statement? on Splunk Search. 07-07-2022 01:18 PM
- Karma Re: bar chart visualization stop at 100 for efavreau. 06-29-2022 12:43 PM
- Posted How to add percent sign (%) on a stacked column chart data label without java script? on Dashboards & Visualizations. 06-29-2022 12:39 PM
- Karma Re: How do we display percentage on a pie chart? for MuS. 06-27-2022 02:08 PM
- Karma Re: alarms when count = 0 for gcusello. 06-23-2022 12:02 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
01-22-2024
11:38 PM
I am getting the peak stats by bucket using this <your_search>
| bucket span=1s _time
| stats count by _time
| timechart max(count) AS Peak_TPS span=1m Some how the two Queries are not working together
... View more
07-20-2022
10:54 AM
Thanks @ITWhisperer you are the best!! is there a way to generically format the color as the date changes everyday/
... View more
07-20-2022
10:30 AM
My actual query as all this data.
but after i use transpose | sort by _time desc | eval mytime=strftime(_time, "%B %d %Y") | fields - _* | transpose header_field=mytime I only see the result for first 5 columns
How can i make transpose work for all more than 5days of data Also is there a way to generically format the color. Because the date changes.
... View more
Labels
07-19-2022
06:27 AM
Is there a way to only show the time of the query on the timechart
... View more
07-18-2022
02:27 PM
How to create a 14 day search for specific time range (02:00 - 06:00) only?
... View more
Labels
- Labels:
-
stats
-
table
-
timechart
-
transaction
-
tstats
07-07-2022
01:18 PM
| eval RouteLatency = if (Name="ABC" AND HTTP="*https://.net.*.com*" , bckLatency ,RouteLatency )
... View more
06-29-2022
12:39 PM
I want to show 100%
... View more
06-23-2022
11:49 AM
I don't want the graph to show 105.
... View more
06-21-2022
11:17 PM
How can i create an alarm when a location goes down?
index=internal sourcetype=abc | timechart span=5m count(linecount) AS Count by loc useother=f usenull=f | sort by _time desc | table _time loc | where loc< 10
2022-06-22 02:15:00
0
0
0
102
949
941
967
969
45
33
2022-06-22 02:14:00
0
0
0
143
1167
1139
1146
1195
49
75
2022-06-22 02:13:00
0
0
0
134
874
827
891
876
29
46
2022-06-22 02:12:00
1
0
0
130
770
789
773
736
59
60
... View more
06-20-2022
09:32 AM
| where like(RouteCode, "50%") AND !like(RouteCode, "503%") I am trying to show Routecode 501,2, -- anyother not 503.
... View more
06-13-2022
10:07 AM
index=abc | stats latest(_time) AS Last_time by day | convert ctime(Last_time) | sort by Last_time desc
for example,
Monday
06/13/2022 13:03:11
Tuesday
06/13/2022 13:03:11
Wednesday
06/13/2022 13:03:11
Thursday
06/13/2022 13:03:11
Friday
06/12/2022 13:03:11
Saturday
06/13/2022 13:03:11
Sunday
06/13/2022 13:03:11
I want the search to return 0 // or something else if there was no event today.
Monday
06/13/2022 13:03:11
Tuesday
06/13/2022 13:03:11
Wednesday
06/13/2022 13:03:11
Thursday
06/13/2022 13:03:11
Friday
0 // or something else
Saturday
06/13/2022 13:03:11
Sunday
06/13/2022 13:03:11
Is that possible.
... View more
- Tags:
- splunk-search
Labels
06-09-2022
01:12 PM
Nevermind you solved . Thank you so much
... View more
06-09-2022
01:09 PM
Table hours day hours2 hours3 null monday 2 5 8 tuesday null null 8 wednesday null null 8 thursday null null 8 friday null null If day = monday i want hours to be 2+5
... View more
06-09-2022
11:57 AM
| eval hours= if (day="Monday", hours=(a+b), hours)
So basically if day=monday, i wants hours to add up a+b
... View more
Labels
- Labels:
-
lookup
-
other
-
search job inspector
-
subsearch
06-08-2022
08:40 AM
<single>
<search>
<query>|query</query>
<earliest>$time_token2.earliest$</earliest>
<latest>$time_token2.latest$</latest>
</search>
<option name="drilldown">all</option>
<option name="refresh.display">progressbar</option>
<drilldown>
<set token="hide_details">$click.name$</set>
<unset token="form.hide_details"></unset>
</single>
<input type="checkbox" token="hide_details">
<label></label>
<choice value="hide">Hide Details</choice>
<change>
<condition value="hide">
<unset token="hide_details"></unset>
</condition>
</change>
<delimiter> </delimiter>
</input>
</drilldown>
... View more
06-07-2022
11:30 AM
Awesome. thanks.
... View more
06-07-2022
11:14 AM
I only want to see 50A720 or 816851 in the ouput
... View more
06-07-2022
10:33 AM
The data i have is 816851-567-7554080981706881 50A720 -123-8150015922249983 816851-567-1135131573613120 816851-567-0065137870504409 50A720 -123-1135131573613120 816851-567-0065137870504409 50A720 -123-1135131573613120 50A720 -123-0065137870504409 I want to extract 50A720 or 816851using | rex field=name mode=sed "s/816851/" getting error Error in 'rex' command: Failed to initialize sed. Failed to parse the replacement string.
... View more
Labels
05-24-2022
07:51 PM
hide Tables from a Dashboard if there are no results. is there a generic command. I have around 900 tables in a dashboard and i refuse to set 900 different tokens.
... View more
05-24-2022
09:57 AM
I have multiple tables on a dashboard. Is there a way that i can sow all the values that show up in red in the page below to highlight on top of the page ?
... View more
Labels
05-18-2022
12:09 PM
Hiding panels was a great idea. thanks.
... View more
05-18-2022
10:49 AM
the tables are present is splunk. is there a way to have an if statement call for different table IDs?
... View more
