Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About rhugo
rhugo
Observer
Member since:
10-29-2019
02-04-2022
Community Statistics
| Posts | 15 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 10-29-2019 |
Activity Feed
- Posted Splunk Phantom on Splunk SOAR (f.k.a. Phantom). 08-31-2020 01:14 AM
- Posted Re: Checklist For Troubleshoot Splunk Enterprise Environments on Splunk Enterprise Security. 03-17-2020 02:01 AM
- Posted Microssoft SOC Intergrated With Splunk on Splunk Enterprise Security. 03-16-2020 09:11 AM
- Tagged Microssoft SOC Intergrated With Splunk on Splunk Enterprise Security. 03-16-2020 09:11 AM
- Tagged Microssoft SOC Intergrated With Splunk on Splunk Enterprise Security. 03-16-2020 09:11 AM
- Posted Checklist For Troubleshoot Splunk Enterprise Environments on Splunk Enterprise Security. 03-16-2020 07:03 AM
- Tagged Checklist For Troubleshoot Splunk Enterprise Environments on Splunk Enterprise Security. 03-16-2020 07:03 AM
- Tagged Checklist For Troubleshoot Splunk Enterprise Environments on Splunk Enterprise Security. 03-16-2020 07:03 AM
- Posted Re: Integration of Splunk and Freshdesk on Splunk Search. 01-19-2020 03:06 PM
- Posted Re: Integration of Splunk and Freshdesk on Splunk Search. 01-19-2020 03:04 PM
- Posted How can I integrate Splunk and Freshdesk? on Splunk Search. 01-19-2020 12:14 PM
- Tagged How can I integrate Splunk and Freshdesk? on Splunk Search. 01-19-2020 12:14 PM
- Posted Re: Field Extraction And Evaluation on Splunk Search. 12-10-2019 04:05 PM
- Posted Field Extraction And Evaluation on Splunk Search. 12-08-2019 12:47 PM
- Tagged Field Extraction And Evaluation on Splunk Search. 12-08-2019 12:47 PM
- Posted Change the background colour on my dashborad depending on the text displaying on Dashboards & Visualizations. 10-30-2019 11:44 PM
- Tagged Change the background colour on my dashborad depending on the text displaying on Dashboards & Visualizations. 10-30-2019 11:44 PM
- Posted Re: Help extracting from L15= so on Splunk Search. 10-30-2019 06:34 PM
- Posted Re: Help extracting from L15= so on Splunk Search. 10-30-2019 01:13 PM
- Posted Re: Help extracting from L15= so on Splunk Search. 10-30-2019 01:12 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
08-31-2020
01:14 AM
Can one use Splunk phantom for auto-remediation? What real-life use cases are applicable to the use of Phantom?
... View more
Labels
- Labels:
-
other
-
using Phantom
03-17-2020
02:01 AM
Thank you @amankhan1. The link is just what I needed and I also got to see Splunk's troubleshooting manual
https://docs.splunk.com/Documentation/Splunk/8.0.2/Troubleshooting/IntrototroubleshootingSplunk
... View more
03-16-2020
09:11 AM
Please how can I integrate Microsoft SOC as a Service with Splunk? what are the business benefits
... View more
03-16-2020
07:03 AM
Please, is there any checklist or guideline for troubleshooting or running a maintenance check on an enterprise Splunk environment?
... View more
01-19-2020
03:06 PM
The site says "This integration is currently in development and will be available soon."
... View more
01-19-2020
03:04 PM
The app is not available on the automate.io platform, or is there something i am missing out?
... View more
01-19-2020
12:14 PM
How can I integrate Splunk and Freshdesk? I have not seen anything meaningful online so far.
... View more
- Tags:
- splunk-enterprise
Labels
- Labels:
-
other
12-08-2019
12:47 PM
From the screenshot, i would like to achieve the below;
LCU04 = 500 x 00000
LCU03 = 500 x 01985
LCU02 = 500 x 01985
LCU01 = 500 x 01985
Then, LCU = (LCU04 + LCU03 + LCU02 + LCU01)
Please help me achieve this.
Thank you.
... View more
- Tags:
- splunk-enterprise
10-30-2019
11:44 PM
I want to build this dashboard such that when Healthy shows as the status of the cassette the background colour will be green and when it is showing Inoperative the background color will be red etc.
The code behind the dashboard is;
<dashboard>
<label>ATM</label>
<description>ATM DEVICE AND MEDIA MONITOR DASHBOARD</description>
<row>
<panel>
<title>AVAILABLE CASH IN ATM</title>
<single>
<search>
<query>(L15=* sourcetype=IdejoATM "total cash in atm") | rex "<Total Cash in ATM:\s*(?<TotalCash_In_ATM>[^>]+)" | eval TotalCash_In_ATM = trim(replace(TotalCash_In_ATM, "NGN", "")) | stats latest(TotalCash_In_ATM)</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
<refresh>2m</refresh>
<refreshType>delay</refreshType>
</search>
<option name="colorBy">value</option>
<option name="colorMode">none</option>
<option name="drilldown">none</option>
<option name="numberPrecision">0</option>
<option name="rangeColors">["0xdc4e41","0xf8be34","0x53a051"]</option>
<option name="rangeValues">[200000,500000]</option>
<option name="refresh.display">progressbar</option>
<option name="showSparkline">1</option>
<option name="showTrendIndicator">1</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
<option name="trendColorInterpretation">standard</option>
<option name="trendDisplayMode">absolute</option>
<option name="underLabel">Total Cash In ATM</option>
<option name="unitPosition">after</option>
<option name="useColors">1</option>
<option name="useThousandSeparators">1</option>
</single>
</panel>
</row>
<row>
<panel>
<title>CASSETTE 1</title>
<single>
<search>
<query>sourcetype="idejoatm"
| stats latest(cashcassette1_devicestatus)</query>
<earliest>rt-1h</earliest>
<latest>rt</latest>
<sampleRatio>1</sampleRatio>
<refresh>5m</refresh>
<refreshType>delay</refreshType>
</search>
<option name="colorBy">value</option>
<option name="colorMode">block</option>
<option name="drilldown">none</option>
<option name="numberPrecision">0</option>
<option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
<option name="rangeValues">[0,30,70,100]</option>
<option name="refresh.display">progressbar</option>
<option name="showSparkline">1</option>
<option name="showTrendIndicator">1</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">large</option>
<option name="trendColorInterpretation">standard</option>
<option name="trendDisplayMode">absolute</option>
<option name="underLabel">Cassette 1 Device Status</option>
<option name="unitPosition">after</option>
<option name="useColors">1</option>
<option name="useThousandSeparators">1</option>
</single>
</panel>
<panel>
<title>CASSETTE 2</title>
<single>
<search>
<query>sourcetype="idejoatm"
| stats latest(cashcassette2_devicestatus)</query>
<earliest>rt-1h</earliest>
<latest>rt</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="colorBy">value</option>
<option name="colorMode">block</option>
<option name="drilldown">none</option>
<option name="numberPrecision">0</option>
<option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
<option name="rangeValues">[0,30,70,100]</option>
<option name="showSparkline">1</option>
<option name="showTrendIndicator">1</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
<option name="trendColorInterpretation">standard</option>
<option name="trendDisplayMode">absolute</option>
<option name="underLabel">Cassette 2 Device Status</option>
<option name="unitPosition">after</option>
<option name="useColors">1</option>
<option name="useThousandSeparators">1</option>
</single>
</panel>
<panel>
<title>CASSETTE 3</title>
<single>
<search>
<query>sourcetype="idejoatm"
| stats latest(cassette3_devicestatus)</query>
<earliest>rt-1h</earliest>
<latest>rt</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="colorBy">value</option>
<option name="colorMode">block</option>
<option name="drilldown">none</option>
<option name="numberPrecision">0</option>
<option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
<option name="rangeValues">[0,30,70,100]</option>
<option name="showSparkline">1</option>
<option name="showTrendIndicator">1</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
<option name="trendColorInterpretation">standard</option>
<option name="trendDisplayMode">absolute</option>
<option name="underLabel">Cassette 3 Device Status</option>
<option name="unitPosition">after</option>
<option name="useColors">1</option>
<option name="useThousandSeparators">1</option>
</single>
</panel>
<panel>
<title>CASSETTE 4</title>
<single>
<search>
<query>sourcetype="idejoatm"
| stats latest(cashcassette4_devicestatus)</query>
<earliest>rt-1h</earliest>
<latest>rt</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="colorBy">value</option>
<option name="colorMode">block</option>
<option name="drilldown">none</option>
<option name="numberPrecision">0</option>
<option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
<option name="rangeValues">[0,30,70,100]</option>
<option name="showSparkline">1</option>
<option name="showTrendIndicator">1</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
<option name="trendColorInterpretation">standard</option>
<option name="trendDisplayMode">absolute</option>
<option name="underLabel">Cassette 4 Device Status</option>
<option name="unitPosition">after</option>
<option name="useColors">1</option>
<option name="useThousandSeparators">1</option>
</single>
</panel>
</row>
</dashboard>
... View more
- Tags:
- splunk-enterprise
10-30-2019
06:34 PM
Okay, I think I got it now
... | rex " [^>]+)" | eval TotalCash_In_ATM = trim(replace(TotalCash_In_ATM, "NGN", ""))
... View more
10-30-2019
01:13 PM
What if i want to just extract 4000000 with out the NGN in front of it, please how do i achieve that?
... View more
10-30-2019
01:12 PM
What if i want to just extract 4000000 with out the NGN in front of it, please how do i achieve that?
... View more
10-29-2019
10:15 AM
Please help me extract NGN4000000 from L15= so I can have a field of
TotalCash_In_ATM=NGN4000000 .
2019-10-29 12:58:04.040 8 ResourceMgr ->KalReceiptPrinterImpl.Print( "GenericForm_ReceiptPrinter", "L00=<Daily Service - Final Cassettes Counts>,L01=<Cass id LCU01 LCU02 LCU03 LCU04>,L02=<Currency NGN NGN NGN NGN>,L03=<Denom 500 500 500 500>,L04=<Init count 2000 2000 2000 2000>,L05=<Left cass 1999 1999 1999 1999>,L06=<Reject 1 1 1 1>,L07=<Left in ATM 2000 2000 2000 2000>,L08=<Dispensed 0 0 0 0>,L09=<Recycled 0 0 0 0>,L10=<Retract 0 0 0 0>,L11=<Adjustment 0 0 0 0>,L12=<PwrF adjust 0 0 0 0>,L13=<>,L14=<Retract Events: 0>,L15=<Total Cash in ATM: NGN4000000>,L16=<>,L17=<>,L18=<SIGNATURE: ....................>,L19=<BRANCH: 0029 some location >,L20=<ATM Id: 005 29/10/19 12:58 Page 02>,", 10000, True )
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-04-2022
10:24 AM
|
