Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About xp001975
xp001975
Explorer
Member since:
02-27-2023
03-16-2023
Community Statistics
| Posts | 17 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 02-27-2023 |
Activity Feed
- Posted Re: how to convert a timestamp from one format to a different one on Splunk Search. 03-15-2023 06:48 PM
- Posted How to convert a timestamp from one format to a different one? on Splunk Search. 03-15-2023 02:46 PM
- Posted Re: How to generate a output bases on a common value from two different events? on Splunk Search. 03-15-2023 10:10 AM
- Posted Re: How to generate a output bases on a common value from two different events? on Splunk Search. 03-07-2023 02:29 PM
- Posted Re: how to generate a output bases on a common value from two different events on Splunk Search. 03-07-2023 09:58 AM
- Posted Re: How to generate a output bases on a common value from two different events? on Splunk Search. 03-07-2023 09:29 AM
- Posted Re: how to generate a output bases on a common value from two different events on Splunk Search. 03-06-2023 11:58 AM
- Posted How to generate a output bases on a common value from two different events? on Splunk Search. 03-01-2023 06:15 AM
- Karma Re: Start time calculate for each transaction? for bowesmana. 03-01-2023 01:20 AM
- Posted Re: Start time calculate for each transaction? on Splunk Search. 02-28-2023 09:01 PM
- Posted Re: Start time calculate for each transaction? on Splunk Search. 02-28-2023 11:14 AM
- Posted Re: Start time calculate for each transaction? on Splunk Search. 02-28-2023 11:13 AM
- Posted Re: Start time calculate for each transaction? on Splunk Search. 02-27-2023 08:25 PM
- Posted Re: Start time calculate for each transaction? on Splunk Search. 02-27-2023 03:36 PM
- Posted Re: Start time calculate for each transaction? on Splunk Search. 02-27-2023 03:19 PM
- Posted Re: Start time calculate for each transaction? on Splunk Search. 02-27-2023 02:53 PM
- Posted How to start time calculation for each transaction? on Splunk Search. 02-27-2023 07:53 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
03-15-2023
06:48 PM
No the difference is coming as expected
... View more
03-15-2023
02:46 PM
convert 2023-03-15T17:25:18.832-0400 to YYYY-MM-DD HH:MM:SS.Millisec .
2023-03-15T17:25:18.832-0400 ------------------- > 2023-03-15 17:25:18.832
Once converted to the asked format i need to calculate the difference between EndTime & StartTIme.
... View more
Labels
- Labels:
-
timechart
03-15-2023
10:10 AM
eip-microservice-metric: {"path":"/request","method":"POST","status":"200 OK","consCorrId":null,"apiTransId":"139efc926411fa1536b2488f","appName":null,"start":"2023-03-15T13:02:13.596-0400","end":"2023-03-15T13:02:13.992-0400","tTime":396,"aTime":1,"fTime":395,"e":null,"addl":{"X-Correlation-Id":"d7-7c455c12ac15","X-Provider-Correlation-Id":"586752.393268","X-Provider-API-Correlation-Id":"9176536b2488f"},"pMetrics":[{"provider":"API","function":"invokeXXXX","time":395,"e":null}],} How to extract start and end from this eip-microservice-metric ?
... View more
03-07-2023
02:29 PM
Thanks ITWhisperer ! That works . Is there a way we can join two different indexes , earlier case is same index .
... View more
03-07-2023
09:58 AM
All data looks good except rename _time as EToAvaTime | fieldformat EToAvaTime=strftime(EToAvaTime, "%F %T.%Q") is not giving YYYY-MM-DD HH:MM:SS.MilliSec format . coming as 1677704096.378
... View more
03-07-2023
09:29 AM
deleted the message
... View more
03-06-2023
11:58 AM
Not clearly able to understand "Rename the fields so that they have the same name" in particular. Is my Splunk query looks correct like you suggested in previous response.
... View more
03-01-2023
06:15 AM
we have two separate events which have a common field x-provider-api-correlation-id . In 1st event it is coming as part of HTTP response header and in second api it is coming as part of Http Request Header. My requirement is to extract start time (_time-(time_to_serve_request/1000), endtime which is _time from these two separate events based of x-provider-api-correlation-id which is having same value .
... View more
Labels
- Labels:
-
field extraction
02-27-2023
03:19 PM
This is one event . want to calculate the start time by deducting time to serve request (millisec) from _time .
... View more
02-27-2023
02:53 PM
I am trying | eval EndTime = strptime(_time, "%Y-%m-%d %H:%M:%S.%3N%Z") | eval timetoserveRequst = strptime(time_to_serve_request, ".%3N%Z") | eval startTIme = EndTime - timetoserveRequst | table startTIme EndTime But Nothing is getting displayed
... View more
02-27-2023
07:53 AM
Hi ,
I have a splunk log where we have End time and time to Serve Requst (in Millisec). i want calculate Start time by subtracting End time - time to Serve Requst (in Millisec) . Can you please help me with the query which will help me to achieve this requirement.
Example:
End time -2023-02-27 10:46:13.559 time to server Request - 1131 (milliSec)
... View more
Labels
- Labels:
-
transaction
