The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Michael Wilde replied to Nikita's discussion Count failures and success via transaction"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
Splunk Ninja - All My Regex's Live In Texas
This video helps you out with learning regex, some other vendors tools that help, and how you can use regex in Splunk with no fear at all!
Views: 495
-
Comment by A Grant on September 27, 2011 at 1:19am -
.. | kv reload=true ... Brilliant!
-
Comment by Michael Wilde on September 27, 2011 at 2:23pm -
for the most part, you shouldn't need to do that anymore. Splunk reloads from the config files everytime a search happens, but some times i still add it out of habit.
Comment
© 2012 Created by Michael Wilde.
You need to be a member of splunkninja to add comments!
Join splunkninja