Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About amitlookin
amitlookin
Loves-to-Learn Lots
Member since:
03-24-2020
02-22-2022
Community Statistics
| Posts | 6 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 03-24-2020 |
Activity Feed
- Posted Re: How to configure the same alert for internal and external client on Alerting. 06-18-2020 07:35 PM
- Posted How to configure the same alert for internal and external client on Alerting. 06-15-2020 09:13 PM
- Posted Re: Data flows between index search and lookups on Knowledge Management. 03-25-2020 11:26 PM
- Posted Re: Data flows between index search and lookups on Knowledge Management. 03-25-2020 03:19 AM
- Posted Re: Data flows between index search and lookups on Knowledge Management. 03-25-2020 12:21 AM
- Posted Data flows between index search and lookups on Knowledge Management. 03-24-2020 10:49 PM
- Tagged Data flows between index search and lookups on Knowledge Management. 03-24-2020 10:49 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
06-18-2020
07:35 PM
The alert is same with same logic the only difference lies in the subject line and the message body depending upon to whom the alert will be send (Internal or External to the organisation). Thanks for responding.
... View more
06-15-2020
09:13 PM
i have a alert created in Splunk. Can anyone please guide as to what setting has to be done in Edit Alert->Trigger Alert-> Send Email section to make sure that when the alert triggers and if the email has to be sent internally then it should have subject line as [INTERNAL]{Subject line content} with defined recipient and if the email has to be sent outside the organisation the subject line should be {Subject line content} with its defined recipient list. Do i need to create 2 separate copies of same alert with these 2 configuration in Edit Alert setting defined or these both conditions can be saved in the configuration for single alert.
... View more
Labels
- Labels:
-
alert action
-
alert condition
03-25-2020
11:26 PM
As a beginner i appreciate these inputs and i am going to keep them in my mind going forward. Actually my intent was to understand the data flow, guess what i now know the data flow and the best practice as well. Thank you for the replies.
... View more
03-25-2020
03:19 AM
Thank you for the reply, i think this cleared my doubt about how the sub search flow is happening i.e. sub search result is acting like a criteria for the main search and then the results are returned.
... View more
03-25-2020
12:21 AM
Thank you for the response. Can you please explain how the search is working here in the join part:
search [index= sourcetype= source= [ | inputlookup bsl_project_host.csv | table host], i mean the data flow.
Thank in advance.
... View more
03-24-2020
10:49 PM
I have a whole lot of servers data indexed for our project (index=* sourcetype=* source=) that needs to be searched based on my look up file on basis of host. I have a join query mentioned below:
| inputlookup bsl_project_host.csv | table host
| join type=left host[search index= sourcetype=* source=* [ | inputlookup bsl_project_host.csv | table host]
It would be really nice, if some one could help me understand how exactly does the data flows in this query, specially the search statement in the query.
... View more
- Tags:
- flow
Labels
- Labels:
-
lookup
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-22-2022
04:14 AM
|
