"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Nikita posted a discussionCount failures and success via transaction
Hi,I'm a new in Splunk so sorry for the stupid questions.I want to calculate failures in logs.For example we have request log and response log."request" OR ("fail" OR "response") |transaction startsWith=("request") endsWith=("fail" OR "response") maxpause=5s keepevicted=false maxspan=25s id |eval Failure=if(searchmatch("fail"),1,0)| eval Success=if(searchmatch("response"),1,0) | stats count(Failure) as FailureCount, count(Success) as SuccessCount | table FailureCount SuccessCountThat query…See More
Splunk read the Domino NSF file log
Hi,
Can someone share about how to integrate Splunk with Domino?
I need Splunk to reach the message log in domino format ( .NSF ) in realtime method; i mean, no manual activity, like manually converting the NSF format to CSV.
If the method using phyton script or else, would you show me the script? thx.
Views: 57
Replies to This Discussion
-
Permalink Reply by Michael Wilde on -
Andi..
Since an NSF file is a binary database, what you might consider doing is taking the console log and sending it to a text file:
Enable the Console Log via notes.ini (CONSOLE_LOG_ENABLED=1) or from the server console (start consolelog). You can then have Splunk tail the data\IBM_TECHNICAL_SUPPORT\console.log file.
See: http://www.lntoolbox.com/en/notesini-reference/bycategory/logging/2...
Will that fit the bill?
© 2012 Created by Michael Wilde.
