Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About manoharkalva
manoharkalva
Engager
Member since:
12-10-2020
03-09-2021
Community Statistics
| Posts | 10 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 12-10-2020 |
Activity Feed
- Posted Re: rest api search not working when using cs_uri_stem/cs_uri_query in the query on Splunk Enterprise. 12-16-2020 06:27 AM
- Posted Splunk search Using CURL is not working on Splunk Search. 12-16-2020 02:13 AM
- Posted Re: rest api search not working when using cs_uri_stem/cs_uri_query in the query on Splunk Enterprise. 12-16-2020 02:02 AM
- Tagged Re: rest api search not working when using cs_uri_stem/cs_uri_query in the query on Splunk Enterprise. 12-16-2020 02:02 AM
- Posted Re: rest api search not working when using cs_uri_stem/cs_uri_query in the query on Splunk Enterprise. 12-14-2020 11:44 AM
- Posted Re: rest api search not working when using cs_uri_stem/cs_uri_query in the query on Splunk Enterprise. 12-14-2020 10:27 AM
- Posted Re: rest api search not working when using cs_uri_stem/cs_uri_query in the query on Splunk Enterprise. 12-11-2020 05:31 AM
- Posted rest api search not working when using cs_uri_stem/cs_uri_query in the query on Splunk Enterprise. 12-11-2020 01:24 AM
- Posted rest api search not working when using cs_uri_stem/cs_uri_query in the query on Splunk Search. 12-10-2020 08:41 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
12-16-2020
06:27 AM
i tried escape character and this worked perfectly fine: curl -k -u user:pass https://server:port/services/search/jobs/export --data-urlencode search="search cs_uri_stem=\"*/reporting/wkReport.xls\" AND (cs_uri_query=\"reportName=Pay+Certification\" OR cs_uri_query=\"reportName=CS+Monthly+Payroll+Cost*\")|stats count by AssociateOID, OrgOID, date, o, reportName" -d output_mode=csv
... View more
12-16-2020
02:13 AM
Hi, Below used query is working perfectly fine when i searched directly in SPLUNK WEB. but when i use the same query in CURL it's not working. I can able to run basic search using CURL but not this query. Kindly help me on this. Here is the query i used: curl -k -u UserName:Passwd https://splunkurl:port/services/search/jobs/export --data-urlencode search="search cs_uri_stem="*/reporting/wkReport.xls" AND (cs_uri_query="reportName=Pay+Certification" OR cs_uri_query="reportName=CS+Monthly+Payroll+Cost*")|stats count by AssociateOID, OrgOID, date, o, reportName" -d output_mode=csv Output shows FATEL error. I removed double qoutes with single quotes in search string and it gives me different error. query: curl -k -u UserName:Passwd https://splunkurl:port/services/search/jobs/export --data-urlencode search="search cs_uri_stem="*/reporting/wkReport.xls" AND (cs_uri_query="reportName=Pay+Certification" OR cs_uri_query="reportName=CS+Monthly+Payroll+Cost*")|stats count by AssociateOID, OrgOID, date, o, reportName" -d output_mode=csv Output shows stats is not recognized as internal/external command. Kindly help me out on this.
... View more
Labels
- Labels:
-
subsearch
12-16-2020
02:02 AM
Hi, I tried removing spaces as well but i din't get any results. when i used the same query in splunk i'm getting data. Also, when i removed output_mode, i am getting different error. Here is the query i used: curl -k -u UserName:Passwd https://splunkurl:port/services/search/jobs/export --data-urlencode search="search cs_uri_stem="*/reporting/wkReport.xls" AND (cs_uri_query="reportName=Pay+Certification" OR cs_uri_query="reportName=CS+Monthly+Payroll+Cost*")|stats count by AssociateOID, OrgOID, date, o, reportName" -d output_mode=csv and also tried replacing double quotes with single quotes for the string. query: curl -k -u UserName:Passwd https://splunkurl:port/services/search/jobs/export --data-urlencode search="search cs_uri_stem="*/reporting/wkReport.xls" AND (cs_uri_query="reportName=Pay+Certification" OR cs_uri_query="reportName=CS+Monthly+Payroll+Cost*")|stats count by AssociateOID, OrgOID, date, o, reportName" -d output_mode=csv
... View more
- Tags:
- ed
12-14-2020
11:44 AM
I Did and this time different issue, My sincere apologies for taking your time, but have no other option than splunk community. Kindly help me out. If i remove output_mode=csv, here is what i got. Sorry im really new to Splunk. i installed curl using pip install curl and the version is
... View more
12-14-2020
10:27 AM
Hi, i did exactly as you suggested. Here is the screenshot: i even removed -d after /jobs/export but looks like same error. Could you please examine the query and tell me which part of it i did wrong. This would really help me a lot. Thanks in advance.
... View more
12-11-2020
05:31 AM
Thank you for quick turn around. Well, i tried that as well and this time different issue i'm wondering how the same string works in splunk web and doesn't when used in CURL. if i use double quotes as is and remove search keyword from the search string i'm getting below error: Thanks, Manohar
... View more
12-11-2020
01:24 AM
I can able to search from splunk web using the below string: cs_uri_stem="*/reporting/rptttt.xls" AND (cs_uri_query="reportName=ddd+Certification")|stats count by AssociateOID, OrgOID, date, o, reportName but when i use the same search string while REST API call's its not working. curl -ku username:paswd https://splunkapiurl:port/servicesNS/admin/search/search/jobs/export -d search=“search cs_uri_stem="*/reporting/rptttt.xls" AND (cs_uri_query="reportName=ddd+Certification")|stats count by AssociateOID, OrgOID, date, o, reportName” -d output_mode=csv Please help me out resolving the issue.
... View more
Labels
- Labels:
-
using Splunk Enterprise
12-10-2020
08:41 AM
I can able to search from splunk web using the below string: cs_uri_stem="*/reporting/rptttt.xls" AND (cs_uri_query="reportName=ddd+Certification")|stats count by AssociateOID, OrgOID, date, o, reportName but when i use the same search string while REST API call's its not working. curl -ku username:paswd https://splunkapiurl:port/servicesNS/admin/search/search/jobs/export -d search=“search cs_uri_stem="*/reporting/rptttt.xls" AND (cs_uri_query="reportName=ddd+Certification")|stats count by AssociateOID, OrgOID, date, o, reportName” -d output_mode=csv Please help me out resolving the issue.
... View more
Labels
- Labels:
-
other
-
search job inspector
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-09-2021
09:44 AM
|
