About harryvdtol

harryvdtol · ‎05-15-2023

Thank you Jeffland, Regards, Harry

harryvdtol · ‎05-10-2023

Hello, In the classic Dashboard you have the option to see the Job Inspector in the panels. I miss this option in Dashboard Studio. Does anybody know of this exist? I cannot find it. Regards,, Harry

harryvdtol · ‎05-02-2023

Hi, I have application data on a Windows node that sends data to a log file. The data is formatted as json. On the Windows node i have a UF running (9.0.4) I want to send this data to a metrics index, but i do not know if this is possible and how to format the inputs.conf For far i am unable to find any documentaion about this. Does anyone know if this is possble ? Regards, Harry

harryvdtol · ‎02-02-2023

Hello, I have installed the SCOM app (version 430) on my Splunk Heavy Forwarder (903) The Windows SCOM infrastructure exists of one managementgroup with 2 management servers. managementgroup = SC-PROD consisting of 2 management SC-PRD1 and SC-PRD2 The reason for this, is when server 1 is down, data is still collected thru the second node. I have configured the managemt servers in the Splunk SCOM app. I have only to option to connect to the management servers and not to a group. I connect with a URL , with a Service acount that exist on the server My problem is that i get double data, from both managemtn servers. I am looking for a smart way to connect, like a cluster Has anybody experience and advise in this scenario? Any advise is appriceated Regards, Harry

harryvdtol · ‎09-19-2022

Yes thank you for your help. This is what i made of it. .. | stats first(hst) as host by code type | eventstats c as total by code | where (type="master") OR (total=1 and type="host") | table host code type

harryvdtol · ‎09-19-2022

Hello, I have a search that outputs table data that looks like this: hst code type hosta 01 master hosta 02 master hostb 01 host hostb 03 host hostc 02 host hostd 04 host hoste 05 master hoste 06 master hostf 06 host hostg 08 host etc.etc... I am trying to filter events but i am unable to do. My goal is to filter events based on this condition: If the code on a master also exist on the host, then the host rows should be removed So, my desired output should look like this: hst code type hosta 01 master hosta 02 master hostb 03 host hostd 04 host hoste 05 master hoste 06 master hostg 08 host I hope someone can help me. Thanks in advance. Regards, Harry

harryvdtol · ‎01-19-2022

Very impressive and educational. Thank you. Regards, Harry

harryvdtol · ‎01-19-2022

Hello, I have 3 rows with numeric data, trying to visualize this in a pie chart. The first value (totalval) is the total value I want to the other values to be a percentage of the total value and so only show the 2 other values (typeA and typeB) type total --------------------- totalval 4151 typeA 1442 typeB 17 Trying for some hours, i am stuck, any help is appreciated Regards, Harry

Posts	8
Solutions	1
Karma Given	0
Karma Received	0
Member Since	‎12-10-2021

Online Status	Offline
Date Last Visited	3 weeks ago

Does search inspect exist in Dashboard Studio?

Is it possible to log data to metrics index?

How to navigate SCOM add-on configuration?

How to filter on multiple events?

Visualize fields as percentage in pie chart

Re: Does search inspect exist in Dashboard Studio?

Does search inspect exist in Dashboard Studio?

Is it possible to log data to metrics index?

How to navigate SCOM add-on configuration?

Re: Filter on multiple events

How to filter on multiple events?

Re: Visualize fields as percentage in pie chart

Visualize fields as percentage in pie chart