Monthly Archives: April 2014


Remove duplicate events from splunk

To remove duplicate events from splunk, follow these steps – Step 1 – Put all the duplicate events in lookup table. index=* sourcetype=[SourceType] | eval id=_cd.”|”.index.”|”.splunk_server | transaction _raw maxspan=1s keepevicted=true mvlist=t | search eventcount>1 | eval delete_id=mvindex(id, 1, -1) | stats c by delete_id | outputlookup delete_these.csv Step 2 – View the events stored […]


How to remove all the events from Splunk

To remove all events from host, we need to actually clean the index that is applied on that host. To clean the corresponding index, run this cli command – Open command prompt and navigate to %SPLUNKinstallationdirectory%/bin. splunk stop splunk clean eventdata -index [indexname] –f splunk start Example – To clean index named ‘default’ Splunk stop splunk clean eventdata […]

SharePoint Developement

How to connect SharePoint Filter WebParts with Custom webpart

This post explains how to enable your custom webpart to read selected values from SharePoint’s Out-of-the-box filter webparts such as Choice filter, List filter etc. Real life scenario can be that there is a custom webpart that displays SharePoint list data (with much better look and feel than OOB ListView webpart) and want to filter the list items based on the […]