Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About sjansma
sjansma
Explorer
Member since:
04-29-2015
08-30-2021
Community Statistics
| Posts | 7 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 2 |
| Member Since | 04-29-2015 |
Activity Feed
- Posted Re: How to make a linechart with a table and multiple lines on Dashboards & Visualizations. 08-29-2021 11:42 PM
- Posted How to make a linechart with a table and multiple lines on Dashboards & Visualizations. 08-25-2021 01:23 AM
- Got Karma for Re: How to find a value from index1/table1 in index2/table2?. 06-05-2020 12:50 AM
- Got Karma for how to display a range in color (Good or Fault). 06-05-2020 12:47 AM
- Posted Re: How to find a value from index1/table1 in index2/table2? on Splunk Search. 05-08-2019 03:01 AM
- Posted Re: How to find a value from index1/table1 in index2/table2? on Splunk Search. 05-08-2019 03:01 AM
- Posted Re: How to find a value from index1/table1 in index2/table2? on Splunk Search. 05-08-2019 03:01 AM
- Posted How to find a value from index1/table1 in index2/table2? on Splunk Search. 05-01-2019 03:52 AM
- Tagged How to find a value from index1/table1 in index2/table2? on Splunk Search. 05-01-2019 03:52 AM
- Tagged How to find a value from index1/table1 in index2/table2? on Splunk Search. 05-01-2019 03:52 AM
- Posted how to display a range in color (Good or Fault) on Dashboards & Visualizations. 04-29-2015 01:01 AM
- Tagged how to display a range in color (Good or Fault) on Dashboards & Visualizations. 04-29-2015 01:01 AM
- Tagged how to display a range in color (Good or Fault) on Dashboards & Visualizations. 04-29-2015 01:01 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 1 |
08-29-2021
11:42 PM
Found it. With "chart first(duration) OVER date BY metric" it has succeeded to create my dashboard
... View more
08-25-2021
01:23 AM
I want to make a presentation in a dashboard where I can see a line per service with the duration of each call of that service. I have made a table in splunk and would create a linechart wiht multiple lines (per service a line) with duration in y-as en time in x-as. How can i do that? Or is there another way to get that done? my search: index=test sourcetype=test-performance duration>0 | convert timeformat="%Y-%m-%dT%H:%M:%S%:z" ctime(_time) AS date | table date, metric, duration | sort by date some events from the table. date metric duration 2021-08-25T08:55:28+02:00 service1 93 2021-08-25T08:55:28+02:00 service1 4 2021-08-25T08:55:28+02:00 service3 3 2021-08-25T08:55:28+02:00 service4 1 2021-08-25T08:55:23+02:00 service5 84 2021-08-25T08:55:20+02:00 service5 88 2021-08-25T08:50:55+02:00 service1 91 2021-08-25T08:50:55+02:00 service1 18 2021-08-25T08:50:55+02:00 service3 14 2021-08-25T08:50:55+02:00 service6 2 2021-08-25T08:50:55+02:00 service7 4 2021-08-25T08:50:55+02:00 service4 5 2021-08-25T08:50:54+02:00 service8 46 2021-08-25T08:50:54+02:00 service9 43 2021-08-25T08:49:58+02:00 service1 88 2021-08-25T08:49:58+02:00 service1 17 2021-08-25T08:49:58+02:00 service3 16 2021-08-25T08:49:58+02:00 service10 10 2021-08-25T08:49:58+02:00 service11 10 2021-08-25T08:49:58+02:00 service6 2
... View more
05-08-2019
03:01 AM
This is not working. I got no result where i expect result. Maybe due to that for both searches i use the same index. Search1 gives must give al list with MessageID's , search2 give al iist with RefToMessageID's. I am looking for the MessageID's wich has not a RefToMessageID (MessageID = RefToMessageID)
... View more
05-08-2019
03:01 AM
1 Karma
This is working. But in the answer of @DavidHourani he says thats it's better not to use 'append' because it should be very resource intensive. ??
... View more
05-01-2019
03:52 AM
I have made two indexes and set the values into a table. How can i find a value from table1 in table2 and present de value wich is not found in table2.
In table 2 are more results as in table1. I just want to see the value from table1 wich is not found in table2.
This is my search:
index=MySearch1 | stats by MessageID | dedup MessageID | table MessageID | rename MessageID as messageid | append [search index=MySearch2" | stats by RefToMessageID | dedup RefToMessageID | table RefToMessageID | sort -_time] | rename RefToMessageID as reftomessageid | foreach messageid [eval match=if(messageid!=reftomessageid, "NOK", "OK")] | stats values(messageid) values(reftomessageid) values(match)
Only one value(match) gives "OK", the others are empty. What am i doing wrong?
... View more
04-29-2015
01:01 AM
1 Karma
As result i would have a green "Good" or a red "Fault"
<title>Schoning bestanden</title>
<searchString>index=tm sourcetype="tm-cleanup:log" "(cleanup.sh) - In totaal" | rex field=_raw "exitstatus=(?<bericht>.*)" | head 1 | eval n=substr(bericht,1,1) | eval code=case(n=0,"Goed",0=0,"Fout") | stats count by code | eval codecheck = if (code=="Goed", 0, 1) | rangemap field=codecheck green=0-0 red=1-100 default=green</searchString>
<earliestTime>-1d@d</earliestTime>
<latestTime>@d</latestTime>
<option name="classField">range</option>
<option name="field">code</option>
<option name="linkView">search</option>
<option name="drilldown">none</option>
</single>
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-30-2021
03:03 AM
|
