About garumaru

garumaru · ‎09-09-2020

Thanks @thambisetty , I was using table but didn't think using stats.

garumaru · ‎09-09-2020

Hi Guys, I am working on searching data from Servicenow ticket, and tickets normally have some status for example: #Ticket #Status #Time Ticket1 Open Sep 01 Ticket1 Closed Sep 02 Ticket2 Open Sep 01 Ticket2 Pending Sep 03 How can I get a table only list the latest status like below: #Ticket #Status #Time Ticket1 Closed Sep 02 Ticket2 Pending Sep 03 Thank you!

garumaru · ‎05-15-2020

Hi Guys, I have a JSON file for OS type in some cluster like below: { "clusterA": ubuntu, "clusterA": ubuntu, "clusterA": rhel5, "clusterA": sles11, "clusterB": sles11, "clusterB": sles11, "clusterB": ubuntu, "clusterC": centos, "clusterC": ubuntu ... } I'd like sum the OS type for each cluster, like in above sample, 2 ubuntu in clusterA, 1 rhel5 in clusterA etc. Would you please kindly help out? Thank you!

garumaru · ‎01-07-2019

@renjith.nair, thanks for your reply, for the Disk_Space and Days, they will be using GB and days instead of TB and months. My sample log might be different from yours, which is my bad that I didn't explain it clearly at first. The amount of the monitor log file is only one, like /log/usage.log, and in this log file, it has the content like: Disk_Space Days Path 10G 4days /path/of/data/userA 20G 5days /path/of/data/userA/folderA 10G 4days /path/of/data/userB 20G 5days /path/of/data/userB/folderA 20G 5days /path/of/data/userB/folderB 20G 10days /path/of/data/userA/folderB/subfolder_a 30G 40days /path/of/data/userA/folderB/subfolder_a ..... So using the way you provided, I will have below result: source count Days Disk_Space /log/usage.log 2 1Days 2GB I think there must be something that still needs to be fixed in my log file, would you please share more ideas? Thank you!

garumaru · ‎01-07-2019

Hello, I had a custom log from a monitoring tool and the output looks like: Disk_Space Days Path 10G 4days /path/of/data/userA 20G 5days /path/of/data/userA/folderA 10G 4days /path/of/data/userB 20G 5days /path/of/data/userB/folderA 20G 5days /path/of/data/userB/folderB 20G 10days /path/of/data/userA/folderB/subfolder_a ..... Is it possible to sort the data, which is over 5days and over 10G for example, and send an email to userA, userB, and so on? Or do I have to rewrite this log to some other format like JSON? Thank you very much!

Posts	5
Solutions	0
Karma Given	2
Karma Received	1
Member Since	‎01-07-2019

Online Status	Offline
Date Last Visited	‎09-09-2020 03:49 AM

get the latest value in an array

how to sum the machine OS in a JSON file

How do you define a custom log in Splunk?

Re: get the latest value in an array

get the latest value in an array

how to sum the machine OS in a JSON file

Re: How do you define a custom log in Splunk?

How do you define a custom log in Splunk?