Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About erez10121012
erez10121012
Path Finder
Member since:
08-15-2019
01-13-2023
Community Statistics
| Posts | 41 |
| Solutions | 1 |
| Karma Given | 2 |
| Karma Received | 4 |
| Member Since | 08-15-2019 |
Activity Feed
- Posted Re: "Other" in timechart on Dashboards & Visualizations. 01-13-2023 05:20 AM
- Karma Re: "Other" in timechart for cmerriman. 01-13-2023 05:20 AM
- Posted Re: How to remove dashboard icons and buttons (first two rows)? on Dashboards & Visualizations. 05-06-2022 08:24 AM
- Posted How to remove dashboard icons and buttons (first two rows)? on Dashboards & Visualizations. 05-06-2022 06:51 AM
- Posted Re: what is the easiest way to make alert (sound, python script, ...) in Splunk search on Splunk Dev. 04-05-2022 06:02 AM
- Posted Re: what is the easiest way to make alert (sound, python script, ...) in Splunk search on Splunk Dev. 04-05-2022 04:54 AM
- Posted What is the easiest way to make alert (sound, python script, ...) in Splunk search? on Splunk Dev. 04-05-2022 03:08 AM
- Posted Re: Getting error: "Dag Execution Exception: Search has been cancelled. Search auto-canceled". on Dashboards & Visualizations. 08-03-2021 07:05 AM
- Got Karma for Getting error: "Dag Execution Exception: Search has been cancelled. Search auto-canceled".. 11-23-2020 12:44 AM
- Got Karma for Re: Getting error: "Dag Execution Exception: Search has been cancelled. Search auto-canceled".. 11-23-2020 12:44 AM
- Posted Re: Getting error: "Dag Execution Exception: Search has been cancelled. Search auto-canceled". on Dashboards & Visualizations. 09-04-2020 12:13 AM
- Tagged Re: Getting error: "Dag Execution Exception: Search has been cancelled. Search auto-canceled". on Dashboards & Visualizations. 09-04-2020 12:13 AM
- Posted Getting error: "Dag Execution Exception: Search has been cancelled. Search auto-canceled". on Dashboards & Visualizations. 08-31-2020 01:44 PM
- Posted Re: Create a Line-Chart from an Array within a Single Event on Splunk Enterprise. 08-25-2020 12:19 PM
- Posted Re: Create a Line-Chart from an Array within a Single Event on Splunk Enterprise. 08-25-2020 10:52 AM
- Posted Re: Create a Line-Chart from an Array within a Single Event on Splunk Enterprise. 08-25-2020 08:11 AM
- Posted Re: Create a Line-Chart from an Array within a Single Event on Splunk Enterprise. 08-25-2020 06:46 AM
- Posted Re: Create a Line-Chart from an Array within a Single Event on Splunk Enterprise. 08-25-2020 06:17 AM
- Posted Re: Create a Line-Chart from an Array within a Single Event on Splunk Enterprise. 08-25-2020 05:38 AM
- Posted Create a Line-Chart from an Array within a Single Event on Splunk Enterprise. 08-24-2020 01:00 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
05-06-2022
08:24 AM
thanks 🙂
... View more
05-06-2022
06:51 AM
hi
usually i use the dashboard in full screen mode (Firefox).
how can i remove the first two rows (splunk>enterprise...(in black) and Search Analytics....(in green))?
want this because i don't have a lot of space in the screen
... View more
Labels
- Labels:
-
panel
04-05-2022
06:02 AM
A bit difficult to execute, there is no simple way to execute any command through the search, maybe ping?
... View more
04-05-2022
04:54 AM
thanks for the detailed explanation. "In your rack cabinet? Kinda pointless, isn't it?" my "rack cabinet" is located close to my client computer, and the alert will reach to my client
... View more
04-05-2022
03:08 AM
hi,
want to make an alert in Splunk, for example:
if _raw>10
make alert.
what is the easiest way to make alert?
can I do it within the search comment?
play wav file?
play through the browser?
python script?
... View more
Labels
- Labels:
-
python
08-03-2021
07:05 AM
No just auto refresh the web page
... View more
09-04-2020
12:13 AM
1 Karma
i Understand that the problem is in the realtime search. i change one of the dashboard gauge to 2 sec (not realtime) and the Execution not shown on it. but steel realtime is problem. thanks
... View more
- Tags:
- search
08-31-2020
01:44 PM
1 Karma
Hi,
Every few minutes the dashboard shows me this error:
Dag Execution Exception: Search has been cancelled. Search auto-canceled.
I tried to change the dispatch.auto_cancel = 0, but the error returned.
Please help me find the solution for this error.
If it helps, this search is 30 seconds real time, and 1 min refresh.
Thanks.
... View more
- Tags:
- error
Labels
- Labels:
-
panel
08-25-2020
12:19 PM
thank you so much😀
... View more
08-25-2020
10:52 AM
thank you. its work if i tray to send 3 digit, i get strange results. please see the picture.
... View more
08-25-2020
08:11 AM
thanks for the explanation. i think my mistake is on the first step: when i search for y i see the event but cent do statistic like in your example what is my mistake? thanks
... View more
08-25-2020
06:46 AM
It is not clear what visualization you want - i want what you show in the first answer. y(x) do you want a line for each original row of your data-i want line for each event > y=1,2,3... does each row have a unique - no. i sent the data from matlab software (y=1,2...) thanks
... View more
08-25-2020
06:17 AM
still its not visualization thanks for the help
... View more
08-25-2020
05:38 AM
thanks what i need to add instead of "| eval log="y=1,2,3,4,5,6,7,8,9,10" ? if i delete this line, it not work. thanks
... View more
07-14-2020
02:45 AM
hi i just send simple TCP (even not syslog) to splunk: s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((host, port))
s.send(bytes(str(x=1), 'utf-8'))
... View more
07-13-2020
12:15 PM
thanks but i dont send the time to splunk, only the value. it is not windows time?
... View more
07-13-2020
03:33 AM
i sent tcp port 512 string "x=1" when i search in splunk for x i see all the message that i send.
... View more
07-13-2020
02:55 AM
hi, i sent Splunk value, for example x=1. after 10 milliseconds i send again x=2 etc. when i search for x. i see in the event viewer, time format of milliseconds. but its always .000, only the sec is increase. how i change Splunk time to show the real milliseconds and not .000? thanks
... View more
Labels
- Labels:
-
timechart
02-25-2020
10:39 PM
hi
i plot a graph in the dashboard, the x axis is series from 1 to 2001
i want to replace 1-2001 to 500-3000 (yes, the step is >1 because the array is 2000 steps)
the 500-3000 is only for the presentation in the dashboard if its help.
please see the picture and the code
source="tcp:514"
| streamstats values(_raw) as value
| makemv value
| mvexpand value
| search value<0
| rename _time AS series | fields - _time
| streamstats count AS series
| eval series=printf("%05d",series)
| eval series1=case(
series>=0 AND series<130,"Anomaly",
series>=131 AND series<250,"Cell_3G",
series>=250 AND series<999,"Anomaly",
series>=1000 AND series<1100,"Cell_4G",
series>=1101 AND series<1499,"Anomaly",
series>=1550 AND series<1650,"WIFI",
series>=1651 AND series<2001,"Anomaly")
| xyseries series series1 value| head 2001
... View more
08-25-2019
10:38 PM
1 Karma
thanks @niketnilay it works 🙂
source="tcp:514"
| streamstats values(_raw) as value
| makemv value
| mvexpand value
| search value<0
| rename _time AS series | fields - _time
| streamstats count AS series
| eval series=printf("%05d",series)
| eval series1=case(
series>=0 AND series<130,"Anomaly (Black)",
series>=131 AND series<250,"Cell (Blue)",
series>=250 AND series<999,"Anomaly (Black)",
series>=1000 AND series<1100,"Cell (Green)",
series>=1101 AND series<1499,"Anomaly (Black)",
series>=1550 AND series<1650,"WIFI (Red)",
series>=1651 AND series<2001,"Anomaly (Black)")
| xyseries series series1 value| head 2001</query>
... View more
08-24-2019
10:23 PM
thank for the help @ niketnilay
my raw data array of bytes sent from the client to spunk.
i receive the 2001 in one event. {-78 -79 -55 -60 ...}
to plot the data i must to do mvexpand.
about the flow "streamstats --> makemv --> mvexpand --> then search filter"
i dont know exactly why i do it like that, but if you can tell me A rule of thumb what the right order, i would be very grateful to you.
... View more
08-23-2019
06:08 AM
hi
my dashboard plot event by time. i change the time to look like serial (see image) and i plot 2001 events.
i want to paint by time, for example:
serial 0-199 red.
200-1000 blue.
1001 2001 green.
my search code:
source="tcp:514"
| streamstats values(_raw) as value
| makemv value
| mvexpand value
| search value<0
| streamstats count AS _time
| rename _time AS serial
| table serial value | head 2001
my plot:
thanks
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-13-2023
08:41 AM
|
