야솔아빠의 블로그

index=msad | stats distinct_count(host) as host_name, count(eval(sourcetype="MSAD:NT6:Netlogon")) as index_name 이런 방법을 통해서 field 별 이벤트 개수를 count 할 수 있음

Splunk/Platform 2022. 6. 26. 22:22

Splunk/Platform 2022. 6. 24. 03:49

Splunk/Platform 2022. 6. 18. 10:28

.... earliest=-19d@d latest=@d | timechart span=1d count by host limit=1 | timewrap 1w | rename _time as Day | eval Day = strftime(Day, "%A") 1주전 데이터를 같이 비교해서 분석이 가능.

Splunk/Platform 2022. 6. 17. 23:39

https://docs.splunk.com/Observability/gdi/rabbitmq/rabbitmq.html#requirements RabbitMQ — Splunk Observability Cloud documentation Was this topic useful? Was this documentation topic helpful? Please select Yes No Please specify the reason Please select The topic did not answer my question(s) I found an error I did not like the topic organization Other Enter your email address, and som docs.splunk..

Splunk/Observability 2022. 6. 16. 15:45

1. O11y 화면에서 Data Setup > Amazon Fargate 선택 다음 단계에서 AWS 에서 아래 행위를 하라고 한다. Create a revision of your task definition (HowTo). Click Configure via JSON in the Create new revision of task definition page. Paste the container definition JSON in the containerDefinitions section. AWS ECS 화면으로 이동하고, 아래 json 포멧 containerDefinitions 이곳에 복사한 json을 추가 저장. 아래 코드는 오리지널 JSON FARGATE { "ipcMode": null, "execut..

Splunk/Observability 2022. 3. 31. 15:09

Settings > Forwarding and receiving > receive data

Splunk/Platform 2022. 3. 24. 21:02

1. Set send gmail server. Please refer below; https://devanswers.co/outlook-and-gmail-problem-application-specific-password-required/ Outlook and Gmail problem: "Application-specific password required" - DevAnswers.co 1. Generate an Application-specific password Visit your App passwords page. You may be asked to sign in to your Google Account. (If you see a message “The setting that you are look..

Splunk/Platform 2022. 3. 14. 21:47