Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About appache
appache
Path Finder
Member since:
11-29-2015
06-05-2020
Community Statistics
| Posts | 18 |
| Solutions | 1 |
| Karma Given | 0 |
| Karma Received | 5 |
| Member Since | 11-29-2015 |
Activity Feed
- Got Karma for Re: Splunk IT Service Intelligence: How is the Importance Value for KPIs calculated that contribute to the Service Health Score?. 06-05-2020 12:48 AM
- Got Karma for Re: Splunk IT Service Intelligence: How is the Importance Value for KPIs calculated that contribute to the Service Health Score?. 06-05-2020 12:48 AM
- Got Karma for Re: Splunk IT Service Intelligence: How is the Importance Value for KPIs calculated that contribute to the Service Health Score?. 06-05-2020 12:48 AM
- Got Karma for Re: Splunk IT Service Intelligence: How is the Importance Value for KPIs calculated that contribute to the Service Health Score?. 06-05-2020 12:48 AM
- Got Karma for Re: How to remove characters in my json raw data so it can be indexed in son formate?. 06-05-2020 12:48 AM
- Posted Re: My Finance Tracker: How to configure the app to input a CSV file? on All Apps and Add-ons. 02-15-2017 09:57 AM
- Posted My Finance Tracker: How to configure the app to input a CSV file? on All Apps and Add-ons. 02-15-2017 09:18 AM
- Tagged My Finance Tracker: How to configure the app to input a CSV file? on All Apps and Add-ons. 02-15-2017 09:18 AM
- Tagged My Finance Tracker: How to configure the app to input a CSV file? on All Apps and Add-ons. 02-15-2017 09:18 AM
- Tagged My Finance Tracker: How to configure the app to input a CSV file? on All Apps and Add-ons. 02-15-2017 09:18 AM
- Tagged My Finance Tracker: How to configure the app to input a CSV file? on All Apps and Add-ons. 02-15-2017 09:18 AM
- Posted Re: How to remove characters in my json raw data so it can be indexed in son formate? on Getting Data In. 11-23-2016 08:36 AM
- Posted Re: How to remove characters in my json raw data so it can be indexed in son formate? on Getting Data In. 11-23-2016 06:55 AM
- Posted How to remove characters in my json raw data so it can be indexed in son formate? on Getting Data In. 11-21-2016 04:48 PM
- Tagged How to remove characters in my json raw data so it can be indexed in son formate? on Getting Data In. 11-21-2016 04:48 PM
- Tagged How to remove characters in my json raw data so it can be indexed in son formate? on Getting Data In. 11-21-2016 04:48 PM
- Tagged How to remove characters in my json raw data so it can be indexed in son formate? on Getting Data In. 11-21-2016 04:48 PM
- Tagged How to remove characters in my json raw data so it can be indexed in son formate? on Getting Data In. 11-21-2016 04:48 PM
- Posted Re: Splunk IT Service Intelligence: How is the Importance Value for KPIs calculated that contribute to the Service Health Score? on Splunk IT Service Intelligence. 09-21-2016 06:57 AM
- Posted Re: ITSI Threshold based on trend on Splunk IT Service Intelligence. 09-13-2016 07:50 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
02-15-2017
09:57 AM
i have tried both add data winzard and also copy/pasted the csv file in Financetracker/inputs this is the monitoring path in inputs.conf
... View more
02-15-2017
09:18 AM
Hello,
According to the details provided in the My Finance Tracker app, i have created an Excel spreadsheet and saved it as CSV
Here is my sample data but it never shows anything. i have created the datasets/datamodel/pivot out of this and also tries copying the file in to FinanceTracker inputs.
Can someone give me the steps to configure it?
Salary Interest Bonus Category A Category B Category C Spent Earned Received
5000 1000 2000 1600 400 200 2200 5000 7000
Thanks in Advance
... View more
11-23-2016
08:36 AM
1 Karma
Thankyou gokadroid Got it 🙂
... View more
11-23-2016
06:55 AM
Thankyou for you quick response, but there is no difference in my data its still the same i have tried masking another fields also but even that didnt work and also i have tried indexed_extractions=json. Is there any other way to do it.
... View more
11-21-2016
04:48 PM
{"ts":"11 03 2016 06:03:56.390","th":"sample-product","user":"apple","device":"iphone","errorCode":"","level":"INFO","msg":"Publishing event to cache "TimeZones" with message "Message@4eedf6e5"."}
If we remove the quotes for TimeZones and Message@4eedf6e5 it will be converted as son formate as below
{
"ts":"11 03 2016 06:03:56.390",
"th":"sample-product",
"user":"apple",
"device":"iphone",
"errorCode":"",
"level":"INFO",
"msg":"Publishing event to cache TimeZones with message Message@4eedf6e5."
}
Can someone could help me out in this....
Thanks in advance.
... View more
09-21-2016
06:57 AM
YES if the (service A) do not have any kpi's to consider into the service health score if the (service B) turns critical the service health score for service A will also turn critical.
... View more
09-13-2016
07:50 AM
In your case you could use adaptive threshold option in services OR you could set up custom threshold values and set the importance to it so that KPI and service analyzer will show up the colors you want.
... View more
08-31-2016
08:07 AM
index=* | regex _raw!=".2016-\d{2}-\d{2}." | stats list(source) as sources by host
... View more
08-30-2016
12:07 PM
Hi, YES it is possible to do in ITSI.
when you said you gonna use base search in regular dashboard use the same search in ITSI with out using stats, timechart or chart or table etc and select the aggregation values. which ITSI provides and select the field which you want to have thresholds on in the thresholds field and the you should be good to go. BUT dont forget to have your entities(host, IP etc) in your entities tab.
... View more
08-30-2016
11:52 AM
Hi, i had the same issue long time ago, so what we did is i have enabled real-time searches in the back end since ITSI is purely works based on Real Time. it should work it worked fine for me. and make sure you have enough cores for ITSI to run.
it shouldnt be an issue after you enable the real-time in your on your search head
... View more
08-30-2016
11:31 AM
4 Karma
Hi,
Importance of KPI's are ranged to 0 - 11, from 0-10 it will give you the simulated value of the health score and if you put it up to 11 no mater what if the KPI goes to critical stage according to the thresholds fields have been specified, health score also pops up to critical stage. if the importance is 10 and KPI is critical health score will based on all the KPI's and gives you the aggregated value. But with 11 health scores shows parallel to the KPI's threshold by not considering other KPI's. you can check the simulated severity tag which was provided right next to it.
... View more
08-28-2016
10:46 AM
I apologize for not being clear appreciate your help, i need to compare avg(responsetime) of only last week (ex: monday - sunday), compare with avg(responsetime) of last min by application and calculate the variance(difference) of both avg_responsetime fields in percentage.
last week field should change be static through out the week and it should change only on every monday giving last monday to sunday avg_responsetime. and the current fields should be dynamic every min as well as variance%.
... View more
08-27-2016
02:32 PM
Thankyou sundareshr, it did work, how do i specify latest time in the query to limit to only last week (august 14 -aug 21), now its taking till today. if iam adding latest=@w1 i am not able to get "current" field
... View more
08-27-2016
11:35 AM
even like the above example if we divide the field into two separate fields again we have two sub fields in Current and LastWeek. this doesnt work in ITSI. because we cant use any aggregations in ITSI except eventstats. Until unless we have Current and LastWeek as an separate fields intresting fields on our left hand side without having sub fields "0" and "1" i wont be able to use this query
... View more
08-27-2016
11:23 AM
When we do (| chart avg(responseTime) AS one by application when )
"when" populates two sub fields "Current" and "Lastweek"
instead of having sub fields in "when" is it possible to have "Current" and "Lastweek" as a separate fields like "when".
... View more
08-27-2016
10:53 AM
No, when had (| chart avg(responseTime) AS one by application when) we get Current and Lastweek fields out of it. even if we separate "when" into current and lastweek it still gives o and 1 for both.
Now "When" is a field in interesting fields on our left. Instead of that i need Current and Lastweek as a fields
i am expecting as below
|chart avg(responseTime) AS one by application Current LastWeek
application Current LastWeek
1 values values
2 values values
3 values values
... View more
08-27-2016
09:50 AM
Thankyou so much sundareshr, your query did helped me out appreciate your quick response. i need to have this query in ITSI in ITSI i need to specify threshold field "Current" and "Last week" as kpi to monitor real time.
is there a way i could divide the field "when" into two separate fields "Current" and Last week".
... View more
08-27-2016
08:46 AM
Hello, I have a problem comparing responseTime field last minute with last week (monday - sunday).
Below query give the results what i am seeking for, but append command limits to 50000 events, So avg(responseTime) is not accurate for the last week.
index=abc sourcetype=123
| eval responseTime1=responseTime/1000
| append [search index=abc earliest=-1w@w1 latest=@w1 sourcetype=123 | eval responseTime7=responseTime/1000 ]
| stats avg(responseTime1) AS one avg(responseTime7) AS two by application
I have tried many examples which i found in splunk answers but none of them are suitable for my requirement.
Can someone help me with this one?
Thank you very much in advance!...
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
Karma from
