Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Mr_Adate
Mr_Adate
Explorer
Member since:
12-30-2022
12-20-2023
Community Statistics
| Posts | 12 |
| Solutions | 0 |
| Karma Given | 4 |
| Karma Received | 0 |
| Member Since | 12-30-2022 |
Activity Feed
- Posted Re: How to compare matching values and their count from two fields from two lookup files on Splunk Search. 12-20-2023 07:16 AM
- Karma Re: How to compare matching values and their count from two fields from two lookup files for yuanliu. 12-18-2023 11:58 PM
- Posted Re: How to compare matching values and their count from two fields from two lookup files on Splunk Search. 12-07-2023 02:18 AM
- Karma Re: How to compare matching values and their count from two fields from two lookup files for yuanliu. 12-07-2023 02:09 AM
- Posted Re: How to compare matching values and their count from two fields from two lookup files on Splunk Search. 12-07-2023 12:01 AM
- Karma Re: How to compare matching values and their count from two fields from two lookup files for gcusello. 12-06-2023 11:48 PM
- Karma Re: How to compare matching values and their count from two fields from two lookup files for gcusello. 12-06-2023 01:47 AM
- Posted Re: How to compare matching values and their count from two fields from two lookup files on Splunk Search. 12-06-2023 01:45 AM
- Posted How to compare matching values and their count from two fields from two lookup files on Splunk Search. 12-05-2023 11:53 PM
- Posted Re: comparing fields to find identical values on Splunk Search. 12-05-2023 08:58 AM
- Posted Re: How to use mvfilter Function to search two field values? on Splunk Search. 06-12-2023 05:58 AM
- Posted How to use mvfilter Function to search two field values? on Splunk Search. 06-12-2023 03:24 AM
- Posted Re: How to extract fields values including keywords on Splunk Search. 02-20-2023 02:20 AM
- Posted Re: How to extract fields values including keywords on Splunk Search. 02-20-2023 01:28 AM
- Posted Re: How to extract fields values including keywords on Splunk Search. 02-20-2023 01:26 AM
- Posted How to extract fields values including keywords on Splunk Search. 02-20-2023 12:42 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
12-20-2023
07:16 AM
Hello Yuanliu, Sorry to bother you again. with your code I am getting values for " ABC.csv + XYZ.csv " and XYZ.csv only file but not getting for ABC.csv only. can help me to get output for not matching count for ABC.csv only data as well ?
... View more
12-07-2023
02:18 AM
Thank you very much yuanliu, now only one task is pending is what if I want to see name of the firewall should be display there from fields either firewall_name or firewall_hostname which are not matching along with their count on single search. Please help me with that also.
... View more
12-07-2023
12:01 AM
Hi gcusello, somehow this solution is not working for me. in my first lookup table I have 1000 firewall count and in second lookup file 850 firewall count. I manually checked in spreadsheet by comparing each other and found there is only 1 firewall is not available in first lookup so my solution should be out of 1000 firewall 849 firewall are matching and 1 is not hence it should display like; Firewall Name which is not matching Count of FW which is not matching Count of FW which is matching ABCDFW 1 all reaming firewalls 849 hope you understand my requirement now.
... View more
12-06-2023
01:45 AM
Hi gcusello, thank you very much for your prompt reply. I appreciate that I tried with you code but I guess something is wrong with last line code. I am getting 0 result. can you please confirm it again?
... View more
12-05-2023
11:53 PM
Hello Friends, I need your help to find out matching fields values and their total count by comparing from two different lookup files. | inputlookup ABC.csv | fields Firewall_Name | stats count | inputlookup XYZ.csv | fields Firewall_Hostname | stats count My goal is to compare two lookup files by using field name Firewall_Name with Firewall_Hostname and get matching field values count. EX. if in ABC.csv file field name Firewall_Name total count is 1000 and in second lookup file XYZ.csv field name Firewall_Hostname total count is 850 then my result should display all matched values with their count. so I can get confirmation that from file name XYZ.csv all fields are matching with file ABC.csv and all firewalls are up and running with their total matched firewall count 850.
... View more
Labels
- Labels:
-
field extraction
-
join
-
lookup
-
stats
-
subsearch
12-05-2023
08:58 AM
Hi @ gcusello, I have similar problem with my use case. I am looking to filter out from two lookup files. I am not using any index. can you help me with to compare filed values from two difference lookup files? below are the sample data from two lookup file 1.Firewall_NEW_Database.csv o Hostname Location Datacenter ABCD US xyz LMNO SING ABC 2,Firewall_OLD_Database.csv. Firewall Location Datacenter LMNO SING ABC ABCD US xyz EFGH CAN PQR in above two lookups I want to compare similar values base on Hostname and Firewall fields and filter it out with count.
... View more
06-12-2023
05:58 AM
@ITWhisperer Thank you. Your command is not giving me output if field_A have more than 1 values like sr. field_A field_B 1. AD_Name_C AD_Name_C AD_Name_B AD_Name_B AD_Name_A AD_Name_A 2. AD_Name_K AD_Name_K AD_Name_L AD_Name_L please help
... View more
06-12-2023
03:24 AM
Hello All, I wanted to search "field_A" data value from "field_B" data values into "field_C" but only if field_A values match with field_B Data example Sr. field_A field_B 1. AD_Name_A AD_Name_C; AD_Name_Z; AD_Name_A;AD_Name_B 2. AD_Name_K AD_Name_K; AD_Name_C; AD_Name_D 3. AD_Name_M AD_Name_J;AD_Name_K 4. AD_Name_Z AD_Name_C;AD_Name_Z;AD_Name_L;AD_Name_O;AD_Name_D I am trying to use below mentioned command but not working. | makemv delim=";" field_B | eval field_C =mvfilter(if('field_A'='field_B',"Match",'field_A')) I am also tried below command but no luck. | eval field_C=mvfilter(match('field_A'='field_B') Please help me to on it.
... View more
02-20-2023
02:20 AM
Thanks for your reply.. I have uploaded file as lookup not props.conf.
... View more
02-20-2023
01:28 AM
I don't have _raw filed as I am uploading file from csv format
... View more
02-20-2023
01:26 AM
I have uploaded .csv file Firewall Interface Description SGSIFASFFWR035A port8 xafdy AXAZCBDM02 port15.2 wawfesvcds ESESDFAADFSABBM00002 port11 asdfasdf I want to extract field values from Firewall field name
... View more
02-20-2023
12:42 AM
I have three fields like " field1=SGSIFASFFWR035A field2=AXAZCBDM02 fields3=ESESDFAADFSABBM00002 in above examples I want to extract field values like these; field1=FWR035A (any character after FW* including FW) field2=BDM02 (any character after BDM* including BDM) fields3=BBM00002 (any character after BBM* including BBM ) additionally, I want to to use single command to extract all three field values in one go. like "FW*|BDM"|BBM*" I am using below rex command to extract it but it is not including FW keyword in extracted field | rex field= field1 "FW(?<AFTERTHISKEYWORD>\S+)" if you can provide a workable solution either using rex and eval or another code, it would be appreciated. Thanks in advance..
... View more
