"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Nikita posted a discussionCount failures and success via transaction
Hi,I'm a new in Splunk so sorry for the stupid questions.I want to calculate failures in logs.For example we have request log and response log."request" OR ("fail" OR "response") |transaction startsWith=("request") endsWith=("fail" OR "response") maxpause=5s keepevicted=false maxspan=25s id |eval Failure=if(searchmatch("fail"),1,0)| eval Success=if(searchmatch("response"),1,0) | stats count(Failure) as FailureCount, count(Success) as SuccessCount | table FailureCount SuccessCountThat query…See More
Garth Jordan's Page
Gifts Received
Garth Jordan has not received any gifts yet
Latest Activity
Garth Jordan left a comment for Michael Wilde"Yeah, that would be great if you could give me access so I can check out the settings. Thanks again."
Michael Wilde left a comment for Garth Jordan"Jordan... I just configured Splunk 4.2 on Windows 2008 Server R2 up in SkyTap (cloud) and it seems to be working fine with AD. If you'd like to see my settings, i'll make you an account so you can check it out."
Garth Jordan left a comment for Michael Wilde"Hey Mike. Watched the Splunk & LDAP Authentication video. Did not work for me. Using Windows 2008 R2. I get 'LDAP-auth': Malformed search filter: objectClass=user. If I leave it out it works fine. Reason for watching the video is that…"
Profile Information
- Are you an existing splunk user?
- Licensed
- What do you do for your day job?
- Systems Engineer
Comment Wall (1 comment)
- At 9:25am on April 16, 2011, Michael Wilde said…
- Jordan... I just configured Splunk 4.2 on Windows 2008 Server R2 up in SkyTap (cloud) and it seems to be working fine with AD. If you'd like to see my settings, i'll make you an account so you can check it out.
© 2012 Created by Michael Wilde.
