Learning, learning, learning . . . Our Splunk "expert" is gone, and the non-programmer gets to learn the task! How do you spell SPLUNK?
The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Michael Wilde commented on Michael Wilde's video
Sure... When you do group mapping, map them to groups that don't have the domain admins in them. I have a separate OU=Groups that has "Splunk Users, Splunk Admins, Splunk Power Users" as group names, and specific users…
Mike Hartford commented on Michael Wilde's video
I want to give LDAP access to my splunk servcie but I don't want the LDAP users to have admin capabilitys in Splunk. Can I keep the domain admins out of Splunk if I have LDAP authentication???
Mike Hartford left a comment for Jonathan Hawes
Helow Jonathan,
Glad to have another Splunker. I've been useing Splunk for 2 years and am hooked. I leared how to spell splunk and | transaction too. you'll learn that one soon.
Go over to Splunk…
Mike Hartford commented on Mike Hartford's blog post 'tees for the holy day'
Holy Batskins Ninja, zzzzzwap zgruppp kapow a hidden stash, how great is that!!!!
The team that found them must have special bat senses and highly tooned Splunking skills
I like to wear Extra Lovable…
Ian Hoffman's Discussions
Combining 'timechart' and 'top' in a report? (looking for printers with most pages printed)
2 Replies
I'm a very beginning Splunk user. My main job is on the phones/email in the call center, but I'm also involved with all the printer maintenance on project. Got into Splunk in an effort to build some…Continue
Started this discussion. Last reply by Ian Hoffman Jan 21, 2010.
Ian Hoffman's Page
Gifts Received
Ian Hoffman has not received any gifts yet
Latest Activity
Ian Hoffman replied to Ian Hoffman's discussion 'Combining 'timechart' and 'top' in a report? (looking for printers with most pages printed)'
That is... EXCELLENT! Thanks!
That also got me going on some other stuff I'm working with, hadn't realized being able to chain the commands like that. Also doing the chart command with 'as' and 'over', going to be able…
Bob Munson replied to Ian Hoffman's discussion 'Combining 'timechart' and 'top' in a report? (looking for printers with most pages printed)'
Ian
The timechart command can do a lot more than you are asking of it for instance if you want daily totals split by printer, you can use
host="printserver" source="WinEventLog:System" Pages="*" | timechart span=1d…
Combining 'timechart' and 'top' in a report? (looking for printers with most pages printed)
I'm a very beginning Splunk user. My main job is on the phones/email in the call center, but I'm also involved with all the printer maintenance on project. Got into Splunk in an effort to build some reports on printer usage, and later on reporting frequent printer errors in an effort to find problem printers early. We've had it running for awhile, but I'm really the first person here to start messing with it.Anyway, I've managed fairly easily to get a search/report on pages…See More
Discussion posted by Ian Hoffman
Profile Information
- Are you an existing splunk user?
- Licensed
- What do you do for your day job?
- Tech Support
Comment Wall
- No comments yet!
© 2012 Created by Michael Wilde.
