Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About rsathish47
rsathish47
Contributor
Member since:
07-29-2013
08-09-2023
Community Statistics
| Posts | 119 |
| Solutions | 4 |
| Karma Given | 54 |
| Karma Received | 18 |
| Member Since | 07-29-2013 |
Activity Feed
- Karma Re: Remove "All" from Multiselect Input in Dashboard for ktwombley. 06-05-2023 10:14 PM
- Got Karma for DMC alert for Disk usage. 03-01-2021 06:13 AM
- Posted How to add global JS in Splunk to update the KV store? on Splunk Dev. 09-30-2020 12:13 AM
- Karma Feed inputs as command line argument for the_scissor. 06-05-2020 12:48 AM
- Karma Re: Splunk index roll-out information? for inventsekar. 06-05-2020 12:48 AM
- Karma Re: How to add parallelIngestionPipelines to server.conf in an indexer cluster? for maraman_splunk. 06-05-2020 12:48 AM
- Karma Re: How to form a search based on my data and my desired output? for gokadroid. 06-05-2020 12:48 AM
- Karma Re: How to form a search based on my data and my desired output? for somesoni2. 06-05-2020 12:48 AM
- Got Karma for Re: How to set token value in the updateView using Javascript?. 06-05-2020 12:48 AM
- Got Karma for Re: Add data with Python. 06-05-2020 12:48 AM
- Karma Re: Using StreamStats/Other commands for Ayn. 06-05-2020 12:47 AM
- Karma Re: Append or Join related in Splunk for Runals. 06-05-2020 12:47 AM
- Karma Re: Where do we find date of creation for Knowledge objects in Splunk? for lguinn2. 06-05-2020 12:47 AM
- Karma Re: single search multiple table in splunk? for Tanefo. 06-05-2020 12:47 AM
- Karma Re: How to run batch file in splunk ? for MuS. 06-05-2020 12:47 AM
- Karma Re: Why can I not delete a dashboard I created in Splunk 6.2 and receiving error? for fdi01. 06-05-2020 12:47 AM
- Karma Re: Do newly added tags get updated for already indexed data or only new incoming data? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: Search query for permon counter for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How to omit duplicate values of a column for somesoni2. 06-05-2020 12:47 AM
- Karma Re: Help with search query to table single occurrence rows? for linu1988. 06-05-2020 12:47 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-30-2020
12:13 AM
I want to run a javascript in all pages in the dashboard in all the apps in Splunk. The purpose of the JS is to update the KV store.
Please let me know if you have any idea how to implement this solution.
... View more
- Tags:
- javascript
- kv store
Labels
- Labels:
-
simple XML
-
Splunk Web Framework
-
SplunkJS
03-20-2019
10:57 PM
2nd option , how do we do that? how to embed the py lib in app. please guide me here
... View more
03-20-2019
10:56 PM
2nd option , how do we do that? how to embed the py lib in app. please guide me here
... View more
03-05-2019
02:40 AM
Hi ,
you can use streamstats command for this
index=_internal | stats count by sourcetype | head 2| streamstats current=f last(count) as newcount
Thanks
Sathish R
... View more
03-22-2017
12:07 PM
https://answers.splunk.com/answers/223843/rest-endpoint-for-modifying-applocalmacrosconf.html
i got it 🙂
... View more
03-22-2017
11:11 AM
Hi Meenal,
Is possible to provide me the sample/example code ?
Thanks
Sathish Rangan
... View more
02-15-2017
08:35 AM
not working ;(
... View more
02-15-2017
03:13 AM
HI All,
How to pass regular expression to the variable to match command? Please help..
in Following search query we need to pass the value for nonsupporting days dynamically based on the criteria.
| gentimes start=-1 | eval CreateDateEpoch="1412136000" | table CreateDateEpoch | eval start=relative_time(CreateDateEpoch,"@d") | eval end=relative_time(now(),"@d") | eval Date=mvrange(start,end+86400,86400) | convert ctime(Date) timeformat="%+" | eval NoOfBusinessDays=mvcount(mvfilter(NOT match(Date,"(Sun|Sat).*")))
Ex:
eval nonsupport=if(value=1,"(Sun|Sat).*","(Mon|Sun).") | eval NoOfBusinessDays=mvcount(mvfilter(NOT match(Date,nonsupport*))
Thanks
Sathish Rangan
... View more
01-18-2017
02:03 AM
we are running on Splunk 6.4.1.
we run given rest call same out put
yep it is for only one index server
... View more
01-15-2017
09:25 AM
Thank You mmodestino, we have configured for 97% in disk usage.
Different between free and available is too much. is there anywhere we can fix this?
... View more
01-12-2017
10:24 PM
1 Karma
HI All,
We are receiving false alert in the DMC and checked the search it running following rest search . In that free and available diskspace having 100+ GB differents. How to fix it ?
| rest splunk_server_group=dmc_group_* /services/server/status/partitions-space
Output :
server capacity free available
idx10 2TB 188GB 83GB
Thanks
Sathish Rangan
... View more
12-21-2016
11:23 PM
I tried it but it is not giving right count.
i want dedup month
Jan --> dedup till Jan --> 3
FEB --> dedup till Feb---> 3
Mar--> dedup till Mar---> 4
... View more
12-21-2016
10:46 PM
Thank You for the query
I got below output but it is not correct output
Name Value
Feb 1
Jan 3
Mar 3
i want dedup month
Jan --> dedup till Jan --> 3
FEB --> dedup till Feb---> 3
Mar--> dedup till Mar---> 4
...
Please help me
... View more
12-21-2016
09:49 PM
Hi All,
I have the below format of data
Name Value
1-Jan A
2-Jan B
2-Jan B
3-Jan C
2-Feb A
1-Mar V
2-Mar B
3-Mar C
Output needs to be like this
Name Value
Jan 3
FEB 3
Mar 4
Please help me format the search.
... View more
11-22-2016
06:19 AM
Hi
How do we get a dispatch job list in a Splunk search head cluster?
Thanks
Sathish Rangan
... View more
11-22-2016
06:13 AM
Hi All,
We have an indexer cluster and cluster master. we need to add the parameter below in the indexer cluster server.conf file. Can you please let me know where I need to add this and how to push?
[general]
parallelIngestionPipelines = 2
Do we need to add it in the cluster master server.conf file? and then Splunk apply cluster-bundle
OR
I need to add it the individual indexer and restart the server?
Thanks
Sathish Rangan
... View more
10-24-2016
10:58 PM
Hi All,
UF is crashing frequently . I didn't find any details in the splunkd logs
VERSION=6.3.0
BUILD=aa7d4b1ccb80
PRODUCT=splunk
PLATFORM=Linux-x86_64
Splunk Error Log:
splunkd: /home/build/build-src/ember/src/pipeline/input/Tailing.h:178: bool StatWrap::isDir() const: Assertion _valid' failed.
2016-09-19 07:10:30.089 +0200 splunkd started (build aa7d4b1ccb80)
splunkd: /home/build/build-src/ember/src/pipeline/input/Tailing.h:178: bool StatWrap::isDir() const: Assertion _valid' failed.
2016-10-03 08:00:18.048 +0200 splunkd started (build aa7d4b1ccb80)
splunkd: /home/build/build-src/ember/src/pipeline/input/Tailing.h:178: bool StatWrap::isDir() const: Assertion `_valid' failed.
2016-10-17 19:22:31.964 +0200 splunkd started (build aa7d4b1ccb80)
Thanks
Sathish Rangan
... View more
- Tags:
- universal-forwarder
10-07-2016
05:37 AM
I fixed it using props.conf
[Jbossorder]
FIELD_DELIMITER =;
TIME_FORMAT = %Y%m%dT%H%M%S%z
TIMESTAMP_FIELDS = datetime
FIELD_NAMES = H1,H2,H3,H4,datetime
... View more
10-07-2016
04:27 AM
HI All,
Am have CSV which is semicolon as delimiter and am using Props and transpose to extract the fields. But am assigning fields name in the transpose and am not able to set _time field . Please let me know how to do that.
Props.conf
[Jbossorder]
REPORT-formation = split_header
BREAK_ONLY_BEFORE = SO;
transforms.conf
[split_header]
DELIMS = ;
FIELDS =H1,H2,H3,H4,datetime
Thanks
Sathish Rangan
... View more
10-06-2016
04:09 AM
Hi All,
I have to build dashboard for Splunk index roll-out information From hot to Warm Warm to Cold and Cold to Frozen ? Please let me which internal index and source-type I need to use to get this detail?
... View more
- Tags:
- indexes
- internal-logs
10-06-2016
04:05 AM
How to get Splunk Sever roles using Splunk internal logs(autid,internal, etc ..) without using Rest command ?
... View more
10-03-2016
11:05 PM
do we have any internal logs to get server role information using search query but not using rest command?
... View more
08-03-2016
04:51 AM
1 Karma
HI David ,
You check in uploader app in the splunk base.
https://splunkbase.splunk.com/app/1707/
Thanks
Sathish rangan
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-09-2023
06:12 PM
|
Karma from
Karma given to
