Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About kiragsplunk
kiragsplunk
Explorer
Member since:
07-11-2020
10-05-2021
Community Statistics
| Posts | 14 |
| Solutions | 0 |
| Karma Given | 5 |
| Karma Received | 0 |
| Member Since | 07-11-2020 |
Activity Feed
- Posted MANHATTAN ACTIVE WAREHOUSE MANAGEMENT with Splunk on Knowledge Management. 03-17-2021 08:15 AM
- Posted splunk certification - IRS Tax on Training + Certification Discussions. 03-15-2021 07:27 AM
- Posted Re: how to check the daily data usage in a particular index and also historical daily data in gb on Splunk Enterprise. 12-04-2020 08:55 AM
- Posted Re: Can i get index daily usage for a. particular index? on Splunk Enterprise. 12-04-2020 08:45 AM
- Posted Re: Splunk 7.2.9.1 Universal forwarder on SUSE Linux12.4 not communicating and forwarding logs to Indexer after certain on Splunk Enterprise. 12-03-2020 07:52 PM
- Posted Re: splunkforwarder-8.1.0 New installation on Ubuntu18 error on Installation. 12-03-2020 05:56 PM
- Posted Re: Splunk 7.2.9.1 Universal forwarder on SUSE Linux12.4 not communicating and forwarding logs to Indexer after certain on Splunk Enterprise. 12-03-2020 05:43 PM
- Posted Re: Splunk UF Docker Image root process writing splunkd's stderr.log to stdout on Deployment Architecture. 12-03-2020 05:33 PM
- Karma Re: Need help to combine inputlookup and map search for two sources for richgalloway. 07-16-2020 09:04 AM
- Posted Re: Need help to combine inputlookup and map search for two sources on Splunk Search. 07-16-2020 06:10 AM
- Karma Re: Need help to combine inputlookup and map search for two sources for richgalloway. 07-16-2020 06:07 AM
- Posted Re: Need help to combine inputlookup and map search for two sources on Splunk Search. 07-15-2020 01:54 PM
- Karma Re: Need help to combine inputlookup and map search for two sources for richgalloway. 07-15-2020 01:52 PM
- Posted Re: Need help to combine inputlookup and map search for two sources on Splunk Search. 07-15-2020 08:06 AM
- Karma Re: Need help to combine inputlookup and map search for two sources for richgalloway. 07-14-2020 02:27 PM
- Posted Re: Need help to combine inputlookup and map search for two sources on Splunk Search. 07-14-2020 01:12 PM
- Posted Re: Need help to combine inputlookup and map search for two sources on Splunk Search. 07-14-2020 01:00 PM
- Karma Re: Need help to combine inputlookup and map search for two sources for richgalloway. 07-14-2020 12:57 PM
- Posted Need help to combine inputlookup and map search for two sources on Splunk Search. 07-14-2020 09:27 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
03-17-2021
08:15 AM
Hey Splunkers, Anyone using Splunk with MANHATTAN ACTIVE WAREHOUSE MANAGEMENT ?
... View more
Labels
- Labels:
-
other
03-15-2021
07:27 AM
Team, Just checking, can we show our Splunk training costs for IRS Tax exemption if I paid for my training? @certification @IRS
... View more
12-04-2020
08:55 AM
index=_internal component=LicenseUsage idx="Index Name" | timechart span=1d sum(b) as GB | eval GB=round(GB/1024/1024,2)
... View more
12-04-2020
08:45 AM
index=_internal sourcetype=splunkd component=LicenseUsage idx="Index Name" | timechart span=1d sum(b) as MB | eval MB=round(MB/1024/1024,2)
... View more
12-03-2020
07:52 PM
good to know, you could try add entry in /etc/hosts to avoid this dns issue if you want.
... View more
12-03-2020
05:56 PM
1) Check the port listening "netstat -an | grep 9997" 2) Under Receive data, click Add new. Add the default forwarder listening port (typically TCP port 9997) and click Save
... View more
12-03-2020
05:43 PM
In limits.conf, try changing file_tracking_db_threshold_mb in the [inputproc] stanza to a lower value.
... View more
12-03-2020
05:33 PM
if you use splunk user as user account, please go ahead and change permission. #chown -R splunk:splunk /opt/splunkforwarder Hope this helps
... View more
07-16-2020
06:10 AM
May I use a python script to run each query separately then combine the results to a csv . that results can be viewed is Dashboard right? Please advise.
... View more
07-15-2020
01:54 PM
No common in between.. those are two different sources from the same index. I don't see any common field in between both search. ( except the index)
... View more
07-15-2020
08:06 AM
I am getting expected results in both search, could you please help me to append it, if I append the results I am getting time range Error and no results found.
... View more
07-14-2020
01:12 PM
I ran the query manually to validate the second string.. it would be great if I get this fixed in search..
... View more
07-14-2020
01:00 PM
Thanks Rich, Could you please recommend any search string to accomplish this. as you said appendcols not working in map. if I manually assign value (XXX_WH_OVERVIEW & XXX_WH_SHIPPING) works fine. whats the best approach do you recommend?
... View more
07-14-2020
09:27 AM
Team, Need help to build a dashboard . WH.csv content XXX YYY I want to search in two different sources but wanna use the same variable from inputlookup variable. existing Query | inputlookup WH.csv | table ware_house | map search="search index=wh source=$ware_house$_WH_OVERVIEW| head 1 | stats list(Routes) AS ROUTE list(source) AS WH | appendcols [ search index=wh source=$ware_house$_WH_SHIPPING | head 5 | stats list(LabelsCreated) AS LabelsCreated by LabelType | stats sum(LabelsCreated) AS SUMMARY ] " Issue : second search is not getting the variable $ware_house$ so it does not return any result. As soon as the base search work would like to add it in the Dashboard.
... View more
- Tags:
- map
Labels
- Labels:
-
subsearch
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-05-2021
10:10 AM
|
