목록공부 (287)

잠토의 잠망경

[Splunk] eventstats

1. 목표 모든 행에 전체을 merge하는 결과를 라인별로 붙이고 싶을때 사용한다. col col1 원하는 형태 a 1,2,3 1,23;1,2;1,2,3,4,5 b 1,2 1,23;1,2;1,2,3,4,5 c 1,2,3,4,5 1,23;1,2;1,2,3,4,5 SPL | makeresults | eval col="a", col1="1,2,3,4,5" | append [| makeresults | eval col="b", col1="1,2,4,5"] `comment("sample 추가")` | append [| makeresults | eval col="c", col1="1,2,3,4,5"] `comment("sample 추가")` | table col, col1 | streamstats count as ..
공부/Splunk 2020. 4. 13. 20:55
[Splunk] DB Connect 02

1. Maria DB - 사전 준비 저장할 DB를 만든다. create table mellowlee.splunk_test_db( MASTER_ID BIGINT not null AUTO_INCREMENT, C_NAME VARCHAR(30), SUM_S_VOLUME BIGINT, IN_TIME DATE, PRIMARY KEY (MASTER_ID) ) COMMIT insert into mellowlee.splunk_test_db (C_NAME, SUM_S_VOLUME, IN_TIME) values("test1", 1323, CURRENT_TIMESTAMP) insert into mellowlee.splunk_test_db (C_NAME, SUM_S_VOLUME) values("test3", 1323) COMM..
공부/Splunk 2020. 4. 12. 10:56
[Splunk] DB Connect 01

1. 앱을 다운로드 https://splunkbase.splunk.com/app/2686/ Splunk DB Connect | Splunkbase Splunk DB Connect version 2.x reached its End of Life on July 7, 2019. For more information about this change and our app lifecycle, see https://www.splunk.com/blog/2019/03/18/end-of-availability-splunk-built-apps-and-add-ons.html?April. Splunk DB Connect splunkbase.splunk.com 들어가서 자신의 splunk에 맞는 version을 다운 받는다. 2..
공부/Splunk 2020. 4. 7. 20:51
[Splunk] splunk with python (numpy, pandas, etc)

0.Github https://github.com/yiwonjae/Project_Splunk_App 1. Python for Scientific Computing - 설치 우선 아래를 다운 받고 app 설치를 진행한다. Splunk_SA_Scientific_Python OS 설치 파일 URL linux https://splunkbase.splunk.com/app/2882/ window https://splunkbase.splunk.com/app/2883/ App 설치는 문안하니 쭉쭉진행한다. ※ 참고 다음 코드를 참고하자. https://github.com/j8lp/Jackson-Lane-W205-Repo/blob/f48a7667b863a40cd68bb903a5b40d95501fb9fd/Final_Pro..
공부/Splunk 2020. 4. 6. 22:09
[Python] pip 오류시 대안

문제 상황 오류 메시지 Could not fetch URL https://pypi.org/simple/sklearn/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/sklearn/ (Caused by SSLError(SSLError(1, '_ssl.c:499: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version'),)) - skipping python 2.7 종료 때문이지 pip download가 정상적으로 되지 ..
공부/Python 2020. 4. 5. 11:58
[Splunk] python 연계 01

https://youtu.be/dc89nCWY35c https://docs.splunk.com/Documentation/Splunk/latest/Search/Customsearchcommandshape Custom search command example - Splunk Documentation Download topic as PDF Custom search command example This following is an example of a custom search command called shape. The shape command categorizes events based on the event line count (tall or short) and line length (thin, wide..
공부/Splunk 2020. 4. 3. 21:29
[Splunk] forwarder 통한 Data 수집 과정

간략 1. splunk 수신 설정 port: 9997 2. Search - Index 설정 3. Search - Source Type 설정 4. Forwarder - Indexer 설정 C:\Program Files\SplunkUniversalForwarder\etc\system\local\outputs.conf [tcpout] defaultGroup = default-autolb-group [tcpout:default-autolb-group] server = 192.168.131.133:9997,127.0.0.1:9997 [tcpout-server://192.168.131.133:9997] [tcpout-server://127.0.0.1:9997] 5. Forwarder - Directory(Path)..
공부/Splunk 2020. 3. 28. 17:32
[Splunk] Splunk 설치(windows)

다운로드 및 설치 https://www.splunk.com/en_us/download/splunk-enterprise.html Download Splunk Enterprise for Free | Splunk Sign up now and receive a link to download Splunk Enterprise for free, and start collecting, analyzing and acting upon the untapped value of big data. www.splunk.com 로그인을 해야한다. http://localhost:8000/ko-KR/account/login?return_to=%2Fko-KR%2F
공부/Splunk 2020. 3. 28. 16:55
Prev 1 ··· 7 8 9 10 11 12 13 ··· 36 Next