Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About txc168
txc168
Explorer
Member since:
04-24-2020
03-27-2023
Community Statistics
| Posts | 8 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 0 |
| Member Since | 04-24-2020 |
Activity Feed
- Tagged Can I monitor folder and when file is present zips and sends email? on Alerting. 12-18-2020 03:48 PM
- Tagged Can I monitor folder and when file is present zips and sends email? on Alerting. 12-18-2020 03:43 PM
- Posted Can I monitor folder and when file is present zips and sends email? on Alerting. 12-17-2020 10:56 PM
- Tagged Can I monitor folder and when file is present zips and sends email? on Alerting. 12-17-2020 10:56 PM
- Karma Re: How to return a row for each hour of the day when my alert is scheduled? for to4kawa. 06-05-2020 12:51 AM
- Karma Re: round fuction usage for avg command output for Drainy. 06-05-2020 12:46 AM
- Posted Re: Two dbqueries searches and return difference on same row as Total on All Apps and Add-ons. 04-29-2020 11:03 AM
- Posted Re: Two dbqueries searches and return difference on same row as Total on All Apps and Add-ons. 04-28-2020 06:05 PM
- Posted Re: Two dbqueries searches and return difference on same row as Total on All Apps and Add-ons. 04-28-2020 08:23 AM
- Posted Two dbqueries searches and return difference on same row as Total on All Apps and Add-ons. 04-28-2020 06:29 AM
- Tagged Two dbqueries searches and return difference on same row as Total on All Apps and Add-ons. 04-28-2020 06:29 AM
- Tagged Two dbqueries searches and return difference on same row as Total on All Apps and Add-ons. 04-28-2020 06:29 AM
- Posted Re: How to return a row for each hour of the day when my alert is scheduled? on Alerting. 04-24-2020 07:55 PM
- Posted Re: How to return a row for each hour of the day when my alert is scheduled? on Alerting. 04-24-2020 05:54 PM
- Posted How to return a row for each hour of the day when my alert is scheduled? on Alerting. 04-24-2020 03:36 PM
- Tagged How to return a row for each hour of the day when my alert is scheduled? on Alerting. 04-24-2020 03:36 PM
- Tagged How to return a row for each hour of the day when my alert is scheduled? on Alerting. 04-24-2020 03:36 PM
- Tagged How to return a row for each hour of the day when my alert is scheduled? on Alerting. 04-24-2020 03:36 PM
- Tagged How to return a row for each hour of the day when my alert is scheduled? on Alerting. 04-24-2020 03:36 PM
- Tagged How to return a row for each hour of the day when my alert is scheduled? on Alerting. 04-24-2020 03:36 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
12-17-2020
10:56 PM
I want to monitor a file share for when a file is loaded and then zip that file to send in email to internal users. Is this possible? The way our message server it can’t mail attachments larger than 5.5MB. Appreciate the assistance thank you.
... View more
Labels
- Labels:
-
email
04-29-2020
11:03 AM
I'll keep playing around with it. It returned the columns correctly but is only populating the records column. which is weird since its the 2nd query. Really appreciate the assistance so far.
... View more
04-28-2020
06:05 PM
Even if i'm only returning a count for each query? No type of join or union? Or I have to join on a ? Sorry new to the splunk world..
... View more
04-28-2020
08:23 AM
Ok. Yeah i had tried the appendcols but it is giving me an error.
Error in 'appendcols' command: You can only use appendcols after a reporting command (such as stats, chart, or timechart).
Am I missing some type of eval?
| dbxquery connection="searchDB" query="(SELECT count(1) AS records_cycling from get_work....."
|appendcols
[| dbxquery connection="searchDB" query="select count(*) as records from validation "]
| eval Difference = records - records_cycling | table records record_cycling Difference
Above gives error and then if i use appendpipe its returns below, which is close but no values populated for records_cycling and difference. I guess i'm misunderstanding what each type of append is doing.
|records | records_cycling | Difference
1.
2. 3454534
... View more
04-28-2020
06:29 AM
Trying to connect two queries returning counts from two different searches. I would like to return as one row where it takes count of
records_cycling and the count of records
This is what I was trying but when added the eval it only returned records_cycling value and nothing in other columns
| dbxquery connection="searchDB" query="(SELECT count(1) AS records_cycling from get_work....."
|append
[| dbxquery connection="searchDB" query="select count(*) as records from validation "]
| eval Difference = records - records_cycling
| table records records_cycling difference
Ideal results to return
records | records_cycling | difference
5 2 3
4 2 2
... View more
04-24-2020
07:55 PM
Awesome i was able to get it to work only fix was changing |tail = 25 . Might play around with it after i get a full 24h. Thank you so much for your help and suggestions.
... View more
04-24-2020
05:54 PM
Awesome that worked, but how do I keep my percentage count and total count? Need to know what percentage and total count the server is processing. This alert is sent to management they don't want to add.
... View more
04-24-2020
03:36 PM
Right now this is displaying what I want but how can I return a row for each hour of the day when my alert is scheduled?
index=records "ProcessRec: Total Recd"
| eval fields=split(_raw,"|")
| eval Machine=mvindex(fields,4)
| stats count(eval(Machine="SERVER1")) AS "SERVER1" count(eval(Machine="SERVER2")) AS "SERVER2"
| addtotals
| foreach "SERVER1", "SERVER2"
[| eval "<<FIELD>> %"=round((<<FIELD>>/Total)*100,2)]
... View more
Labels
- Labels:
-
other
