{"id":18372,"date":"2020-08-17T14:36:06","date_gmt":"2020-08-17T14:36:06","guid":{"rendered":"https:\/\/merikebi.warrenmyers.com\/?p=18372"},"modified":"2020-08-17T14:36:06","modified_gmt":"2020-08-17T14:36:06","slug":"new-comment-on-reddit-1831","status":"publish","type":"post","link":"https:\/\/merikebi.warrenmyers.com\/?p=18372","title":{"rendered":"New comment on reddit"},"content":{"rendered":"<div class=\"md\">\n<p>Could you please edit this search into your question &#8211; so it&#39;s not a fifty-screen-wide string? \ud83d\ude42 <\/p>\n<pre><code>index=hcnc_rds_db sourcetype=rds_test | eval epoch_file_info_created_at=strptime(file_info_created_at, &quot;%Y-%m-%d %H:%M:%S.%3Q&quot;)-14400, epoch_file_info_modified_at=strptime(file_info_modified_at, &quot;%Y-%m-%d %H:%M:%S.%3Q&quot;)-14400 | streamstats latest(*) as * by interface_id, epoch_file_info_created_at | eval early_start_epoch=relative_time(epoch_file_info_created_at,&quot;@d&quot;), late_start_epoch=relative_time(epoch_file_info_created_at,&quot;@d&quot;), recurrence_pattern_epoch=relative_time(epoch_file_info_created_at,&quot;@d&quot;) | croniter iterations=1 input=early_file_delivery_time start_epoch=early_start_epoch | rename croniter_return as epoch_early_file | croniter iterations=1 input=late_file_delivery_time start_epoch=late_start_epoch | rename croniter_return as epoch_late_file | croniter iterations=1 input=recurrence_pattern start_epoch=recurrence_pattern_epoch | rename croniter_return as epoch_recurrence | fields - early_file_delivery_time | eval epoch_early_file=epoch_early_file+14400, epoch_late_file=epoch_late_file+14400, epoch_recurrence=epoch_recurrence+14400 | fieldformat epoch_early_file =strftime(epoch_early_file, &quot;%Y-%m-%d %H:%M:%S.%3Q&quot;) | fieldformat epoch_late_file =strftime(epoch_late_file, &quot;%Y-%m-%d %H:%M:%S.%3Q&quot;) | fieldformat epoch_recurrence =strftime(epoch_recurrence, &quot;%Y-%m-%d %H:%M:%S.%3Q&quot;) | eval date_reference=strftime(epoch_file_info_created_at, &quot;%Y-%m-%d&quot;), process_time=epoch_file_info_modified_at-epoch_file_info_created_at | eval results=case(validation_error=&quot;FILE_TYPE_MISMATCH&quot;, &quot;Failure&quot;, epoch_file_info_created_at&gt;epoch_early_file AND epoch_file_info_created_at&lt;epoch_late_file, &quot;Success&quot;, epoch_file_info_created_at&lt;epoch_early_file, &quot;Warn&quot;, process_time&gt;300 AND process_time&lt;1800, &quot;Success&quot;, 1=1, &quot;Not Run&quot;) | eval combined=interface_id.&quot;@&quot;.integration_name.&quot;@&quot;.priority.&quot;@&quot;.service_area.&quot;@&quot;.source_sys_name.&quot;@&quot;.target_sys_name.&quot;@&quot; | xyseries combined date_reference results | rex field=combined &quot;^(?&lt;interface_id&gt;[^\\@]+)\\@(?&lt;integration_name&gt;[^\\@]+)\\@(?&lt;priority&gt;[^\\@]+)\\@(?&lt;service_area&gt;[^\\@]+)\\@(?&lt;source_sys_name&gt;[^\\@]+)\\@(?&lt;target_sys_name&gt;[^\\@]+)\\@$&quot; | fillnull value=&quot;Not Run&quot; | eval alert_sent=if(isnull(alert_sent), &quot;No&quot;, alert_sent) | eval status=if(isnull(status), &quot;Not Run&quot;, status) | eval ticket_id=if(isnull(ticket_id), &quot;No&quot;, ticket_id) | table interface_id, integration_name, priority, service_area, source_sys_name, target_sys_name [ makeresults | addinfo | eval time = mvappend(relative_time(info_min_time,&quot;@d&quot;),relative_time(info_max_time,&quot;@d&quot;)) | fields time | mvexpand time | makecontinuous time span=1d | eval time=strftime(time,&quot;%F&quot;) | reverse | stats list(time) as time | return $time ] | rename interface_id as &quot;Service ID&quot;, integration_name as &quot;Service Name&quot;, priority as &quot;Priority&quot;, service_area as &quot;Service Area&quot;, source_sys_name as &quot;Source&quot;, target_sys_name as &quot;Target&quot; <\/code><\/pre>\n<\/p><\/div>\n<p>August 17, 2020 at 10:11AM<br \/>\nvia reddit https:\/\/www.reddit.com\/r\/Splunk\/comments\/iaceax\/populating_nonexistent_values_where_multiple\/g1uxoec?utm_source=ifttt<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Could you please edit this search into your question &#8211; so it&#39;s not a fifty-screen-wide string? \ud83d\ude42 index=hcnc_rds_db sourcetype=rds_test | eval epoch_file_info_created_at=strptime(file_info_created_at, &quot;%Y-%m-%d %H:%M:%S.%3Q&quot;)-14400, epoch_file_info_modified_at=strptime(file_info_modified_at, &quot;%Y-%m-%d %H:%M:%S.%3Q&quot;)-14400 | streamstats latest(*) as * by interface_id, epoch_file_info_created_at | eval early_start_epoch=relative_time(epoch_file_info_created_at,&quot;@d&quot;), late_start_epoch=relative_time(epoch_file_info_created_at,&quot;@d&quot;), recurrence_pattern_epoch=relative_time(epoch_file_info_created_at,&quot;@d&quot;) | croniter iterations=1 input=early_file_delivery_time start_epoch=early_start_epoch | rename croniter_return as epoch_early_file | croniter iterations=1 input=late_file_delivery_time start_epoch=late_start_epoch &hellip;<br \/><a href=\"https:\/\/merikebi.warrenmyers.com\/?p=18372\" class=\"more-link pen_button pen_element_default pen_icon_arrow_double\">Continue reading <span class=\"screen-reader-text\">New comment on reddit<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4],"tags":[972],"keyring_services":[],"class_list":["post-18372","post","type-post","status-publish","format-standard","hentry","category-blih","tag-reddit"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/18372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=18372"}],"version-history":[{"count":1,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/18372\/revisions"}],"predecessor-version":[{"id":18373,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/18372\/revisions\/18373"}],"wp:attachment":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=18372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=18372"},{"taxonomy":"keyring_services","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fkeyring_services&post=18372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}