"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Nikita posted a discussionCount failures and success via transaction
Hi,I'm a new in Splunk so sorry for the stupid questions.I want to calculate failures in logs.For example we have request log and response log."request" OR ("fail" OR "response") |transaction startsWith=("request") endsWith=("fail" OR "response") maxpause=5s keepevicted=false maxspan=25s id |eval Failure=if(searchmatch("fail"),1,0)| eval Success=if(searchmatch("response"),1,0) | stats count(Failure) as FailureCount, count(Success) as SuccessCount | table FailureCount SuccessCountThat query…See More
Gifts Received
Mike Hartford has not received any gifts yet
Mike Hartford's Page
Latest Activity
Splunk Ninja - Basic Training: Splunk & LDAP Authentication
"I want to give LDAP access to my splunk servcie but I don't want the LDAP users to have admin capabilitys in Splunk. Can I keep the domain admins out of Splunk if I have LDAP authentication???"
"Helow Jonathan,
Glad to have another Splunker. I've been useing Splunk for 2 years and am hooked. I leared how to spell splunk and | transaction too. you'll learn that one soon.
Go over to Splunk…"
"
Holy Batskins Ninja, zzzzzwap zgruppp kapow a hidden stash, how great is that!!!!
The team that found them must have special bat senses and highly tooned Splunking skills
I like to wear Extra Lovable…"
Michael Wilde commented on Mike Hartford's blog post tees for the holy day"Update... what size were you looking for. Rumor has it there's been a stash uncovered."
"I think in with the new should be coupled with re outfit the old. We have seen that batman can be a timeless and highly technical superhero as is the cyber warier. Putting the batman tee out of productions was the wrong answer. …"
Michael Wilde commented on Mike Hartford's blog post tees for the holy day"i checked at Splunk HQ. It looks like batbelt is out of production. If i had one myself, i'd ship it to you... (i'll ask around and see if anyone has one stashed)."
tees for the holy day
I have several Splunk Tees, but I don't have the batbelt Tee I see the ninja has. Does anyone know how I can get a free version of that Tee? I am a devoted Splunk disciple and wear Splunk every Friday. I would cherish a new NO TIGHTS Tee to wear on that most holy day.See More
Profile Information
- Are you an existing splunk user?
- Licensed
- What do you do for your day job?
- Security Analyst
Mike Hartford's Blog
tees for the holy day
I have several Splunk Tees, but I don't have the batbelt Tee I see the ninja has. Does anyone know how I can get a free version of that Tee? I am a devoted Splunk disciple and wear Splunk every Friday. I would cherish a new NO TIGHTS Tee to wear on that most holy day.
Posted on January 25, 2012 at 11:00am — 4 Comments
Comment Wall
- No comments yet!
© 2012 Created by Michael Wilde.
