• There are various errors in windows platform they are:

• • Processor overheating
  • Bad RAM
  • Hard disk issues
  • File system issues and display options

• Recently Chipmakers have been working to make processors more effective, which means they generate less heat.
• Now some modern processors still produce a lot of heat.

• • Dust is preventing the fan from spinning smoothly.
  • The fan motor has failed.
  • The fan bearings are loose and jiggling.

• Several conditions can lead to RAM-related performance problems with a particular machine:

• • RAM timing is slower than optimal machine spec.
  • RAM has minor faults that appear only on detailed testing.
  • RAM is overheating.

• Slow access times on the affected drive.
• An increasing number of bad sectors when running scandisk.
• Unexplained Blue Screens.
• Intermittent boot failures.
• An “Imminent Hard Disk Failure” warning.

• Some file systems work better than others for large disk dividers. Windows 7 should always use the NTFS file system for best performance.
• Cleaning up the file system will also help speed performance. We can use the Disk Clean-up tool to:

• • Remove temporary Internet files.
  • Remove downloaded program files (such as Microsoft ActiveX controls and Java applets).
  • Remove the Recycle Bin.
  • Remove Windows temporary files such as error reports.
  • Remove optional Windows components we don’t use.
  • Remove installed programs you no longer use.
  • Remove unused restore points and shadow copies from System Restore

• To run Disk Clean-up in Windows 7, click Start and type “Disk Clean-up” in the search box. Select the drive you want to clean up.

• Windows have corrupted in many problems we have use below steps, to overcome this issues.

• It will start Windows by using a minimum set of drivers and start up programs.
• It will also eliminate software conflicts that could occur when you install a program, or an update , or when you run a program in Windows.

• These are services that Windows Update needs to make sure it’s working effectively.

• Using Command Prompt running as Administrator, we can perform these commands that can fix issues on our system itself,

• Here, some of the key advantages of using splunk which will help you in understanding key features of splunk.

• Identify and resolve issues upto 70% faster.
• Reduces costly escalations by upto 90%.
• Splunk change difficult logs to visual graphs and reports resulting simplified analysis,reporting and troubleshooting

• No separate database requirements like oracle or SQL as splunk stores all data in its index
• Supports any format and any amount of data -enables centralized log management

• Simple to implement and scale
• Continually index all of your IT data in real time.
• Automatically search helpful information inserted in your data, therefore you can’t to spot yourself.
• Search your physical and virtual IT infrastructure for virtually something of interest and find results in seconds.
• Save searches and tag helpful information, to create your system smarter.
• Set up alerts to modify the observation of your system for specific continual events.
• Provide analytical reports with interactive charts, graphs, and tables.
• Share saved searches and reports with fellow Splunk users, and distribute their results to team members and project stakeholders via email.
• Design specialised, information-rich views and dashboards that work the wide-ranging desires of your enterprise.

• The application of splunk are Monitoring, Analyzes machines, security and business performance.
• With intuitive analysis features, machine learning, packaged applications and open APIs, Splunk Enterprise is a comfortable environment that scales from focused use cases to an enterprise-wide analytics backbone.

• A Splunk application is not much more than a structured set of configurations and assets help to achieve an end goal of data collection, indexing, and visualization.
• In order to make a valid Splunk application, you must include the ability to navigate. Without navigation in the application, you would be working on an add-on.
• The performance of application can be monitor vendors Dynatrace and Extrahop have developed apps for Splunk software to help the users to visualize their deep-dive application performance data in the event of all other application data like logs, events, infrastructure performance.

• Proxy logs : It’s better for C2 analysis of files, domains, downloads of DLL/EXE files.
• Anti‐virus logs : It’s good for analysis of malware, vulnerabilities of hosts, laptops, servers, monitor for suspicious file paths.
• Server Operating System logs : These logs are good for analysis of server activities such as users, runaway services, security logs.
• Firewall logs : Logs for network traffic of source/destination ip addresses, ports, protocols.
• Mail logs : Logs for inbound/outbound mail for malicious links, targeted recipients, unauthorized file out bound, data loss, bad attachments.
• Custom apps logs : Logs could be analyze for possible buffer overflow, code injection, SQL injection analyses.

• Intrusion Prevention System logs : To alert on signatures firing off, COTS signatures, threat analysis of bad network packets.
• Database logs : It’s can be capture for authorized access to critical data tables, authorized logons, op ports, admin accounts.
• Virtual Private Network(VPN) logs : Capture logs to analyze users coming into network for situational awareness, monitored foreign ip subnets, compliance monitoring of browsers/apps of connected hosts.
• Authentication logs : To monitor authorized/unauthorized users, times of day of connection, how often, logons/logoffs, BIOS analysis.
• Vulnerability Scan Data : Import data about assets, vulnerabilities, patch data, etc.
• Web Application logs : External facing logs to monitor suspicious SQL keywords, text patterns, REGEX for threats coming in through browser.
• DNS logs: To relate IP address what domain in a client level.
• DHCP logs : To monitor what systems are assign what IP address and how long, how often.

• Active Directory/Domain Controller logs : Monitor user accounts for AD admins, privilege accounts, remote access, multiple admins across the domain, new account creation, event ID’s.
• Badge Access logs : Logs to capture to correlate insider threat, situational awareness, correlate data with authentication logs.
• Router/Switch data (net-‐flow) : Capture this critical data source for APT monitoring, network monitoring, data exfiltration, flow analysis are very important data source.
• Packet Capture logs(PCAP): Very difficult data source to capture for Advanced Persistent Threats, packet analysis, deep packet inspection, malware analysis, etc.
• FW + AV : Will help detect and respond to viruses, worm propagation.
• IPS + AV + FW : Detect/alert on network based attacks such as buffer overflow, reconnaissance scans, code injection.
• PROXY : The web based/application layer is a majority attacks to monitor like: cross-site scripting, session hacking, browse redirects.
• AV + PROXY : Monitor/detect/respond to download of bad files, remote code execution…web-based attacks.
• FW + PROXY : Detect outbound data exfiltration, detect potentially misconfig fw rules.
• IPS + FW : Network packet of signature threats to be monitored.
• AD Server : All user/group modifications, deletes, updates for administrators to be monitored.
• AD + PROXY : Monitor/Detect/Alert on post compromise analysis, lateral movement.

• Splunk is a software environment to give search, analyze and event to machine-generated data collect from the websites, applications, sensors,devices etc.,It create for your IT environment and business.
• Splunk is an advanced,scalable and potent technology that system can be stored indexes and searches log files.It also search the machine-generated data to give operational intelligence.
• The below image will help you how to relate Splunk collects data.

• To report real time health condition.
• The patient’s health record and analyze patterns in the Delve deeper.
• When the patient’s health degrades to be Alarms/Alerts for both the doctor and patient.

• It work can be moved as the ‘Google’ for log files.
• Simpler terms to be searched with the use of Search Processing Language (SPL).
• If the Splunk file system to be store the data directly that means it does not require any back-end or any database
• It doesn’t against any single point of failure to be happened.

Some of the additional components that separately and collectively perform the major operations:

• It means that the ticket you’re currently in is automatically refreshed when it’s modified, with any changes highlighted in green.
• Sometimes, a different agent may submit a reply or change a ticket property (such as an assignee, tag or ticket type). Other times, ticket properties may be changed by a trigger, automation or a macro.
• It could even be a new reply from your customer. In either case, your agents will be able to see these changes reflected in their help desk instantaneously.
  • Ticket view
  • Ticket filters
  • Ticket list

• For example you’re viewing a ticket, here’s what will happen if another agent submits their own changes. All ticket property changes (including those changed by a trigger, automation or macro) will be highlighted in green & your previously made changes reset.
  • ticket status
  • assignee
  • email
  • CC
  • subject
  • tags
  • priority
  • type

• New replies will have a green background with “NEW” appearing in the ticket header. If you’ve been working on a reply, it will remain intact.
• New internal notes will have an orange background with “NEW” appearing in the ticket header. If you’ve been working on a reply, it will remain intact.
• If a ticket is deleted while you’re viewing it, the ticket will disappear and you’ll see “Ticket #123 has been deleted by (agent’s name)”.

• Ticket filters (also known as ticket views) organize tickets according to your workflows and also displayed in real-time.
• When a new, shared (i.e. visible to all agents) filter is created, a private filter is made shared or vice versa.
• When the filter’s name is changed. If the search query or sorting properties are changed, they will not be reflected in real-time.
• When a ticket appears or disappears from a filter, the number nearby the filter will be changed consequently.
• When a new ticket appears or disappears from a filter you’re currently in.

• The ticket list is the middle column which shows a list of tickets matching your current search query or filter. When new tickets are added, moved or deleted they will appear or disappear from the ticket list immediately.
• Finally, check out Agent collision detection in tickets. It helps you see who is viewing, updating or replying to a ticket.

• The Internet dealings Server (ITS) shopper is that the system shopper wherever the launch transactions area unit dead once agents use the IC WebClient.You would like to log in to the remote system (for example, SAP ERP) to assemble the data required to take care of the computer address, however the settings area unit created within the CRM system.
• The Interaction Center (IC) WebClient could be a thin-client, highly-optimized desktop application for interaction center agents. It provides a framework for process IC WebClient functions.

• SAP applications using the classic screen technology are displayed for the end user using the SAP GUI. The screen can contain a set of predefined elements or GUI controls.
• The SAP GUI is used to display selection screens, messages, and classic lists from an ABAP program on the user’s screen.
• Selection screens are special screens that can be defined without using Screen Painter. When an ABAP program is activated, the ABAP runtime environment activates all of the required screens with all of their parts.
• Messages are short texts that are displayed in a dialog box or in the status line of the current SAP GUI window.

• A procedure is a named PL/SQL block which performs one or more specific task.This is similar to a procedure in other programming languages.
• A procedure has a header and a body.
• The header consists of the name of the procedure and the parameters or variables passed to the procedure.
• The body consists declaration section, execution section and exception section similar to a general PL/SQL Block. A procedure is similar to an anonymous PL/SQL Block but it is named for repeated usage.

• A function is a named PL/SQL Block which is similar to a procedure.
• The major difference between a procedure and a function is, a function must always return a value, but a procedure may or may not return a value.

• The oracle is Unlimited of size.There is no limitations for row size in oracle 9i.

• Create two new value sets for the parameters that are to be used.
• Query the concurrent program definition.
• Go into Parameters window.
• Attach the value set to each of the parameters that are being used.

• The concurrent programe is nothing but instances of execution file along with parameter and incompatible programs.
• We can register 11 types of executable as Concurrent Programe.

• We can execute multi language programs as Concurrent Programe.
• When we run Concurrent Programe we can utilize 100% local machine hardware capacity.
• We can change the Concurrent Programe output based on employee profile.
• We can submit only Request.
• We can schedule the Concurrent Programe as per client requirement.

• Joins are SELECT commands that retrieve data from two or more tables.
• The WHERE clause usually gives the join conditions that determine how data is selected from each table in the join to fill in the specified columns in the select list.
• Joins are used to return rows.
• Join is an integral part of the select statement.

• Subquery is a SELECT statement within another SQL Statement.
• Subqueries structure a complex query into isolated parts.
• Subqueries allow you to use the results of another query in the outer query.

• • The currently running process may be interrupted and moved to the ready state by the OS.
  • The resources (mainly CPU cycles) are allocated to the process for the limited amount of time and then is taken away, and the process is again placed back in the ready queue if that process still has CPU burst time remaining.

• • That process stays in ready queue till it gets next chance to execute.
  • The decision to preempt may be performed when,
    • A new process arrives (with a higher priority than the current process)

Preemptive Scheduling

• • An interrupt occurs (fairness)
  • Periodically based on clock interrupt. (Eg: Round Robin)

• More robust, one process cannot monopolize the CPU.
• Fairness. The OS makes sure that CPU usage is the same by all running process.

• Context switch cost: Time taken by the scheduler to suspend the running task, switch the context, and dispatch the new incoming task.

• Memory management is the process of controlling and coordinating computer memory, assigning portions called blocks to various running programs to optimize overall system performance.
• Memory management resides in hardware, in the OS (operating system), and in applications.
• In hardware, memory management involves components that physically store data, such as RAM chips, memory caches,etc.,.
• In the OS, memory management involves the allocation (and constant reallocation) of specific memory blocks to individual programs as user demands change.
• At the application level, memory management ensures the availability of adequate memory for the objects and data structures of each running program at all times.Application memory management combines two related tasks, known as allocation and recycling.
  • Allocation : When the program requests a block of memory, a part of the memory manager called the allocator assigns that block to the program.
  • Recycling : When a program no longer needs the data in previously allocated memory blocks, those blocks become available for reassignment. This task can be done manually (by the programmer) or automatically (by the memory manager).

• As processes are loaded and removed from memory, the free memory space has broken into small pieces.
• That processes cannot be allocated to memory blocks considering their small size and memory blocks remains unused.
• This problem is known as Fragmentation.There are two types of fragmentation,
  • Internal fragmentation
  • External fragmentation

• Memory block assigned to process is lager. Memory is left unused in some portion as it cannot be used by another process.

• Total memory space is enough to satisfy a request or to reside a process in it, but it is not contiguous, so it cannot be used.