The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Michael Wilde replied to Nikita's discussion Count failures and success via transaction"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
Alon Agmon's Discussions
Comparing events from 2 dates to detect new events
Hi,were using NMAP via scripted input to track live hosts on the networkim getting events formated using sed like:Fri Apr 9 16:11:50 IDT 2010 host=192.168.0.157 message= is up Fri Apr 9 16:11:50 IDT…Continue
Started Apr 10, 2010
Alon Agmon's Page
Gifts Received
Alon Agmon has not received any gifts yet
Latest Activity
Alon Agmon posted a discussionComparing events from 2 dates to detect new events
Hi,were using NMAP via scripted input to track live hosts on the networkim getting events formated using sed like:Fri Apr 9 16:11:50 IDT 2010 host=192.168.0.157 message= is up Fri Apr 9 16:11:50 IDT 2010 host=192.168.0.158 message= is upFri Apr 9 16:11:50 IDT 2010 host=192.168.0.185 message= is upnow how can i check if there are new hosts today compare to last week ?i tried using "diff" on a scenario when 192.168.0.185 was down in searchA and now is up in searchB:source="nmap-hosts" | diff…See More
Profile Information
- Are you an existing splunk user?
- Free
- What do you do for your day job?
- student
Comment Wall
- No comments yet!
© 2012 Created by Michael Wilde.
