The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Michael Wilde replied to Nikita's discussion Count failures and success via transaction"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
Ian Hoffman's Discussions
Combining 'timechart' and 'top' in a report? (looking for printers with most pages printed)
2 Replies
I'm a very beginning Splunk user. My main job is on the phones/email in the call center, but I'm also involved with all the printer maintenance on project. Got into Splunk in an effort to build some…Continue
Started this discussion. Last reply by Ian Hoffman Jan 21, 2010.
Ian Hoffman's Page
Gifts Received
Ian Hoffman has not received any gifts yet
Latest Activity
Ian Hoffman replied to Ian Hoffman's discussion Combining 'timechart' and 'top' in a report? (looking for printers with most pages printed)"That is... EXCELLENT! Thanks!
That also got me going on some other stuff I'm working with, hadn't realized being able to chain the commands like that. Also doing the chart command with 'as' and 'over', going to be able…"
Bob Munson replied to Ian Hoffman's discussion Combining 'timechart' and 'top' in a report? (looking for printers with most pages printed)"Ian
The timechart command can do a lot more than you are asking of it for instance if you want daily totals split by printer, you can use
host="printserver" source="WinEventLog:System" Pages="*" | timechart span=1d…"
Ian Hoffman posted a discussionCombining 'timechart' and 'top' in a report? (looking for printers with most pages printed)
I'm a very beginning Splunk user. My main job is on the phones/email in the call center, but I'm also involved with all the printer maintenance on project. Got into Splunk in an effort to build some reports on printer usage, and later on reporting frequent printer errors in an effort to find problem printers early. We've had it running for awhile, but I'm really the first person here to start messing with it.Anyway, I've managed fairly easily to get a search/report on pages…See More
Profile Information
- Are you an existing splunk user?
- Licensed
- What do you do for your day job?
- Tech Support
Comment Wall
- No comments yet!
© 2012 Created by Michael Wilde.
