Home Search
eval - search results
If you're not happy with the results, please do another search
Usage of Splunk commands : MAKERESULTS
Usage of Splunk commands : MAKERESULTS
Usage of Splunk makeresluts command is given as follows
Makeresults command generates the specified number of the search results...
Usage of Functions in SPLUNK: RELATIVE_TIME
Usage of Functions in SPLUNK: RELATIVE_TIME
This function takes the UNIX time.
This function takes the two argument.
X as first argument and Y...
How to Convert the Time in a Desired Format Using SPLUNK
How to Convert the Time in a Desired Format Using SPLUNK
Suppose we have a time format field in the SPLUNK. We want to convert...
How to Find the Difference between Opened Date of Tickets and Closed Date...
How to Find the Difference between Opened Date of Tickets and Closed Date of Tickets of any Incident Using SPLUNK
Lets says we are getting...
How to Extract The Initials of a Name Using SPLUNK
How to Extract The Initials of a Name Using SPLUNK
Lets say we have a field called Name. We want to extract the initials of...
How to get Month and Year in Calendar sorted format in SPLUNK
How to get Month and Year in Calendar sorted format in SPLUNK:
By default, splunk sorts field names in lexicographical order, so it becomes quite...
Usage of Splunk commands : HEAD
Usage of Splunk commands : HEAD
Usage of Splunk commands : HEAD is as follows
Head command returns the first N number of results...
Effective Usage of "STRPTIME" and "STRFTIME"
Effective Usage of "STRPTIME" and "STRFTIME"
Below is the effective usage of the "strptime" and "strftime"
function which are used with eval command in SPLUNK :
1....
Counting of a Particular Character in a Field
There are many ways to achieve the above scenario:
1. Using "mvcount and split"
index="_internal"
| head 4
|...
How to add Serial Number in each line of your event
There are many ways to achieve the above scenario :
1. Using "steamstats"
index="_internal" sourcetype=splunkd
| table log_level, splunk_server
|...