Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About avikc100
avikc100
Path Finder
Member since:
06-08-2021
03-03-2024
Community Statistics
| Posts | 18 |
| Solutions | 2 |
| Karma Given | 3 |
| Karma Received | 1 |
| Member Since | 06-08-2021 |
Activity Feed
- Posted how to freeze 1st column on Dashboards & Visualizations. 02-27-2024 12:21 PM
- Posted need for each Receiver_ID how much invoice total for 1 months span on Splunk Search. 02-22-2024 12:57 PM
- Posted Re: how to keep sender name with space in search result on Splunk Search. 02-21-2024 12:22 PM
- Posted Re: how to keep sender name with space in search result on Splunk Search. 02-21-2024 11:38 AM
- Posted Re: how to keep sender name with space in search result on Splunk Search. 02-21-2024 10:53 AM
- Posted Re: how to keep sender name with space in search result on Splunk Search. 02-21-2024 05:15 AM
- Posted how to keep sender name with space in search result on Splunk Search. 02-20-2024 05:25 PM
- Posted merge succesrate query with timechart on Splunk Search. 01-07-2024 06:28 AM
- Posted how to sort date in header level on Splunk Search. 01-04-2024 02:54 PM
- Posted Re: how to report based on date on Splunk Search. 01-04-2024 04:08 AM
- Posted Re: how to report based on date on Splunk Search. 01-02-2024 07:05 PM
- Posted Re: how to report based on date on Splunk Search. 01-02-2024 01:09 PM
- Posted how to report based on date on Splunk Search. 01-02-2024 11:33 AM
- Got Karma for Re: interface wise success and error bar chart on a single dashboard. 12-12-2022 05:26 AM
- Karma Re: interface wise success and error bar chart on a single dashboard for richgalloway. 12-11-2022 07:16 PM
- Posted Re: interface wise success and error bar chart on a single dashboard on Splunk Search. 12-11-2022 07:12 PM
- Karma Re: interface wise success and error bar chart on a single dashboard for richgalloway. 12-11-2022 07:10 PM
- Posted Re: interface wise success and error bar chart on a single dashboard on Splunk Search. 12-11-2022 10:15 AM
- Posted How to represent interface wise success and error bar chart on a single dashboard? on Splunk Search. 12-11-2022 09:49 AM
- Posted Re: need search with if condition on Splunk Search. 06-08-2021 10:45 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
02-27-2024
12:21 PM
this is my splunk query: this is output: how can I freeze this 1st column where interface names are showing. problem is when dragging to right then can not see the interface name below is source code:
... View more
Labels
- Labels:
-
chart
02-22-2024
12:57 PM
i have log like this : 2024-02-22 12:49:38:344 EST| INFO |InterfaceName=USCUSTOMERINV INVCanonicalProcess Sender_ID=ThermoFisher Scientific Receiver_ID =Marshall University-Unimarket TxnType=Invoice TotalAmount=-1916.83 Status=Success 2024-02-22 11:51:12:992 EST| INFO |InterfaceName=USCUSTOMERINV INVCanonicalProcess Sender_ID=ThermoFisher Scientific Receiver_ID =Mammoth Bio via Coupa TxnType=Invoice TotalAmount=4190.67 Status=Success below query giving monthly total index="webmethods_qa" source="/apps/webmethods/integrationserver/instances/default/logs/USCustomerEDI.log" Status=success OR STATUS=Success OR Status=Failure USCUSTOMERINV | timechart sum(TotalAmount) span=1mon but I need for each Receiver_ID how much invoice total for 1 months span like this : how to do that?
... View more
02-21-2024
12:22 PM
used rex "Receiver_ID =(?<Receiver_ID>.+)\s TxnType" and worked
... View more
02-21-2024
11:38 AM
Can you please help to extract Receiver_ID also, how should I regex it? Receiver_ID ='Thermo Fisher Sci West Palm Beach' TxnType=
... View more
02-21-2024
10:53 AM
Sender_ID is present in log line: 2024-02-16 09:55:41:829 EST| INFO |InterfaceName=USCUSTOMERPO POCanonical_JSONHttpDataProcess=END JSON data successfully processed to Order Processor application for TxID=20240216095535623-0EEu Sender_ID=hC Bioscience Inc Receiver_ID=ThermoFisher Scientific TxnType=USCustomer_PO Format=cXML Direction=Inbound PO_Num=2550 Status=Success I have updated the query bit still space is truncated InterfaceName=USCUSTOMERPO Status=Success OR Status=Failure | eval timestamp=strftime(_time, "%F")|chart limit=30 dc(TxID) over Sender_ID by timestamp|rex "Sender_ID=(?<Sender_ID>.+)\s"
... View more
02-21-2024
05:15 AM
Sender_ID is present in logging: as example: 2024-02-16 09:55:41:829 EST| INFO |InterfaceName=USCUSTOMERPO POCanonical_JSONHttpDataProcess=END JSON data successfully processed to Order Processor application for TxID=20240216095535623-0EEu Sender_ID=hC Bioscience Inc Receiver_ID=ThermoFisher Scientific TxnType=USCustomer_PO Format=cXML Direction=Inbound PO_Num=2550 Status=Success please help to form the query : i tried this but still the issue persist it is taking only 1st word from log line
... View more
02-20-2024
05:25 PM
I am using Splunk Enterprise Version: 9.1.0.1. my search query is : index="webmethods_prd" source="/apps/webmethods/integrationserver/instances/default/logs/USCustomerEDI.log" InterfaceName=USCUSTOMERPO Status=Success OR Status=Failure | eval timestamp=strftime(_time, "%F")|chart limit=30 dc(TxID) over Sender_ID by timestamp in result I am getting incomplete Sender_ID, splunk removed space from Sender_ID but actually it should be full name , like this : How can I preserve the full Sender_ID here? Avik
... View more
Labels
- Labels:
-
chart
01-07-2024
06:28 AM
how should I merge this 2 query into 1: query 1) index="XXXX" source="XXXX"|search "SupplierRTI_AlphaAesar" |stats count AS "Total",count(eval(STATUS=="fail")) AS Failure|eval Faliurerate=(Failure/Total)*100|eval SuccessRate=100-Faliurerate|table Total,SuccessRate query 2) index="webmethods_prd" source="/apps/WebMethods/IntegrationServer/instances/default/logs/SupplierRTI.log"|search "SupplierRTI_AlphaAesar" | timechart span=1w count I want a report like this how should I form the query?
... View more
01-04-2024
02:54 PM
this query showing date &time haphazardly, how to sort it like 1/4/2024, 1/3/2024, 1/2/2024.... index="*" source="*" |eval timestamp=strftime(_time, "%m/%d/%Y") | chart limit=30 count as count over DFOINTERFACE by timestamp
... View more
Labels
- Labels:
-
chart
01-04-2024
04:08 AM
@dtburrows3 this query showing date &time haphazardly, how to sort it like 1/4/2024, 1/3/2024, 1/2/2024.... index="*" source="*" |eval timestamp=strftime(_time, "%m/%d/%Y") | chart limit=30 count as count over DFOINTERFACE by timestamp
... View more
01-02-2024
01:09 PM
Hi @dtburrows3 its giving different result. I just want in reverse direction its giving me like this : but I want like this
... View more
01-02-2024
11:33 AM
I am getting the count of each interface, but I need it date wise as example below : please help to modify my query
... View more
12-11-2022
07:12 PM
1 Karma
your solution was perfect. It solved my problem
... View more
12-11-2022
10:15 AM
I have tried separately. Please see the attachment for success log interface wise host="uxxxxh-wxxxxx*.axxx.txxx.com" source="/apps/WebMethods/IntegrationServer/instances/default/logs/DFO.log" completed successfully |stats count by DFOINTERFACE and for failure log interface wise host="uxxxxh-wxxxxx*.axxx.txxx.com" source="/apps/WebMethods/IntegrationServer/instances/default/logs/DFO.log" completed with error |stats count by DFOINTERFACE I am unable to combine both together.
... View more
12-11-2022
09:49 AM
I want to represent interface wise (DFOINTERFACE) success and failure
success log below, where completed successfully is main keyword: 2022-12-06 14:43:21:064 EST| INFO |dfo_.allocation DFOINTERFACE=dfo_.allocation START -- dfo_.allocation Execution accountNumber=%productValidationRequest/accountNumber/accountBase%%productValidationRequest/accountNumber/accountDest% completed successfully MFRESPONSETIME=96 millisec 176 microsec 997 nanosec MFPROGRAMEID=OMCRCAL1 Service Name : LowCodePlatform.RESTService.allocation:_post and error log below, where completed with Error is main keyword: 2022-12-06 13:52:38:233 EST| ERROR |dfo_.productValidation DFOINTERFACE=dfo_.productValidation START -- dfo_.productValidation Execution accountNumber=076732008 completed with Error 20120014 - CICS ECI Connection: Transformation error on reply: Invalid decimal digit: MFRESPONSETIME=411 millisec 753 microsec 627 nanosec MFPROGRAMEID=OECDFB21 Service Name : LowCodePlatform.RESTService.ProductValidation I want a report like, please see the attachment
... View more
Labels
- Labels:
-
chart
-
count
-
field extraction
-
lookup
-
stats
06-08-2021
09:02 PM
Am getting data in this format now. but i need to show only those row where sum of all column values are > 500 am trying somethign like this. am new so unable to form the query, please help index=b2b_wm_core sourcetype=wm_woheaderdetail_log logType="header" type="proc" woCountInFile | bin woCountInFile span=10.1 | search if(count(woCountInFile < 70) > 500) | timechart span=1h count by woCountInFile
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-03-2024
11:31 AM
|
