Jump to content

Splunk Janalu Ravali


puli_keka

Recommended Posts

to configure?

or just to use as google search for logs?

Infra team is there to configure.. I am looking for basics on indexing my application logs and querying(basics done, gone thru reference guide) and dashboards
Link to comment
Share on other sites

Infra team is there to configure.. I am looking for basics on indexing my application logs and querying(basics done, gone thru reference guide) and dashboards

it is very basic and self explanatory bro

 

Step 1: Retrieve Events

The simplest searches return events that match terms you type into the search bar:

terms: error login quoted phrases: "database error" boolean operators: login NOT (error OR fail) wildcards: fail* field values: status=404, status!=404, or status>200

Step 2: Use Search Commands

More advanced searches use commands to transform, filter, and report on the events you retrieved. Use the vertical bar | , or pipe character, to apply a command to the retrieved events.

 

http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial

 

http://docs.splunk.com/Documentation/Splunk/latest/Search/GetstartedwithSearch

 

Link to comment
Share on other sites

it is very basic and self explanatory bro

 

Step 1: Retrieve Events

The simplest searches return events that match terms you type into the search bar:

terms: error login quoted phrases: "database error" boolean operators: login NOT (error OR fail) wildcards: fail* field values: status=404, status!=404, or status>200

Step 2: Use Search Commands

More advanced searches use commands to transform, filter, and report on the events you retrieved. Use the vertical bar | , or pipe character, to apply a command to the retrieved events.

 

http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial

 

http://docs.splunk.com/Documentation/Splunk/latest/Search/GetstartedwithSearch

you work on splunk

Link to comment
Share on other sites

you work on splunk

i just use the splunk UI to trawl through the massive Junk ie log file

 

all our teams dump logs into corporate splunk instance, so it is easy to dig thru logs in case of an issue and debug, rather than having ssh access to each and every machine in all environments

Link to comment
Share on other sites

it is very basic and self explanatory bro

 

Step 1: Retrieve Events

The simplest searches return events that match terms you type into the search bar:

terms: error login quoted phrases: "database error" boolean operators: login NOT (error OR fail) wildcards: fail* field values: status=404, status!=404, or status>200

Step 2: Use Search Commands

More advanced searches use commands to transform, filter, and report on the events you retrieved. Use the vertical bar | , or pipe character, to apply a command to the retrieved events.

 

http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial

 

http://docs.splunk.com/Documentation/Splunk/latest/Search/GetstartedwithSearch

just started with dashboards.. patha client lo we used some proprietary tools similar to splunk.. splunk site lo videos chudali.. pluralsight lo no course on splunk.. sollu 

Link to comment
Share on other sites

just started with dashboards.. patha client lo we used some proprietary tools similar to splunk.. splunk site lo videos chudali.. pluralsight lo no course on splunk.. sollu 

Like spark?

Link to comment
Share on other sites

×
×
  • Create New...