About ravidudala

ravidudala · ‎12-18-2019

Link - not working, can you guide me to the working link or the content of the old link

ravidudala · ‎04-19-2018

You can try the following in props.conf [sourcteype] INDEXED_EXTRACTIONS = json KV_MODE = none

ravidudala · ‎04-11-2018

Hello, Instructions are available in the below Doc - Under Static and dynamic inputs to forms https://docs.splunk.com/Documentation/Splunk/7.0.3/Viz/Buildandeditforms Thanks | RD

ravidudala · ‎04-05-2018

Hi, Please find the similar issue reported earlier, where the root cause was network connectivity. https://answers.splunk.com/answers/486930/why-do-i-see-several-search-peer-errors-such-as-pe.html Thanks | RD

ravidudala · ‎04-04-2018

Hello, What happens if you try with a different browser? I had the similar issue which was sorted when I used a different browser. Thanks | RD

ravidudala · ‎04-04-2018

Hello, please try the below stanza in your inputs.conf and let me know the update. [monitor://D:\Program Files (x86)\Proficy\Proficy Server\LogFiles\CalculationMgr*.log] disabled = false index = Give the name of the Index whitelist = (?i)CalculationMgr\W\w+\W\w+\W+\w+ blacklist = (?i)CalculationMgr\W\w+ sourcetype = CalculationMgr recursive = false Thanks | RD

ravidudala · ‎03-28-2018

Hi, If I understand your question - you want to ingest the file CBS.log . If that is the case you can follow the instructions available in below Doc. https://docs.splunk.com/Documentation/Splunk/7.0.2/Data/MonitorfilesanddirectorieswithSplunkWeb If not can you elaborate your question? Thanks | RD

ravidudala · ‎03-08-2018

Hi nike, I have tried that - It worked for static fields, But it didn't work for Dynamic fields. Any Suggestions for dynamics fields. Thanks RD

ravidudala · ‎03-06-2018

Hi Splunkers, I have the below query ( (index=xxx sourcetype=xxx severity=xxx intelId=xxx ) ) | eval intelId = case(match(intelId ,"xxx"),"Test1",match(intelId ,"XX"),"Test2") | eval intelId = severity+":"+intelId | timechart usenull=f span=1d count by intelId So this query gives me the information in a chart with serverity+ the field name, for example for INFO it will INFO: Test1. I was trying to give colors to the column chart with the following condition "{"ERROR:":0xcc0000,"FATAL:":0xff9900,"INFO:":0x339933,"DEBUG:":0x6699ff}" My goal is to achieve color based on the severity - But the above option doesn't seem to work. Any inputs on this are much appreciated. Thanks | RD

ravidudala · ‎11-12-2013

Hi All, Need this info - Whether splunk can be integrate with manageengine IT 360. Checked online - But not able to find any info. We want to know whether we can feed manage-engine IT 360 logs to splunk to analysis and generate the reports. Thanks Ravi +917776909809

Posts	10
Solutions	1
Karma Given	3
Karma Received	2
Member Since	‎04-17-2013

Online Status	Offline
Date Last Visited	‎05-08-2023 08:16 AM

Assign colour's based on the field value

splunk integration with manageengine IT 360

Re: Unknown search command 'dbquery' for non-admin...

Re: Exracting a json field data from a log

Re: Dropdown has search filter box and others don'...

Re: How to remove this error "peer has status="Dow...

Re: Unable to parse the result xml. Verify the cha...

Re: Log File input monitor not working

Re: Monitor a log file

Re: Assign colour's based on the field value

Assign colour's based on the field value

splunk integration with manageengine IT 360