<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic create a dash board  from multiple csv files  by using lookup file with multiple drop down. in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/create-a-dash-board-from-multiple-csv-files-by-using-lookup-file/m-p/376851#M46275</link>
    <description>&lt;P&gt;Hi All&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;I have data in multiple csv files. I would like to create the dashboard from csv files(dynamic values) by using lookup file(static values).&lt;BR /&gt;
The dashboard should contain daily usage of inbound and outbound traffic of each node.&lt;/STRONG&gt;&lt;/P&gt;

&lt;P&gt;first csv name :node1.csv&lt;BR /&gt;
Time    Node Name   Inbound Outbound    Received Bandwidth  Transmit Bandwidth&lt;BR /&gt;
1/23/2019 15:03   node1 170323.766  208175.859    20.00 Mbps      20.00 Mbps&lt;BR /&gt;
1/23/2019 15:08   node2 58398.6836  117372.133    20.00 Mbps      20.00 Mbps&lt;/P&gt;

&lt;P&gt;second csv name :node2.csv&lt;BR /&gt;
Time    Node Name   Inbound Outbound    Received Bandwidth  Transmit Bandwidth&lt;BR /&gt;
1/23/2019 15:03 Node2   133894.9    171775.438    100.00 Mbps     25.00 Mbps&lt;BR /&gt;
1/23/2019 15:08 node2   78438.25    156584.391    100.00 Mbps     25.00 Mbps&lt;/P&gt;

&lt;P&gt;look up file is in csv format.&lt;BR /&gt;
lookup.csv&lt;/P&gt;

&lt;P&gt;SNO uid start_hour  end_hour    receivebandwidth    transmitbandwidth   node    location    tiers   threshold   start_wday  end_wday&lt;BR /&gt;
1   Node1.csv   8:00    17:00   40  40  node1   US  tiers1  70% 1   7&lt;BR /&gt;
2   node2.csv   8:00    17:00   40  40  node2   Canada  tiers2  70% 1   7&lt;BR /&gt;
3   node3.csv   0:00    23:59   10  10      India   tiers3  70% 1   7&lt;/P&gt;

&lt;P&gt;I have tried the below one. but no luck.&lt;/P&gt;

&lt;P&gt;|eval date_wday=strftime(_time,"%u")&lt;BR /&gt;&lt;BR /&gt;
|eval start_h=strptime(start_hour,"%H:%M")&lt;BR /&gt;
|eval start_e=strftime(start_e,"%H:%M")&lt;BR /&gt;
|eval end_h=strptime(end_hour,"%H:%M")&lt;BR /&gt;
|eval end_e=strftime(end_e,"%H:%M")&lt;/P&gt;

&lt;P&gt;|where time_custom&amp;gt;="start_h" AND  time_custom&amp;lt; "end_h" AND date_wday&amp;gt;= "start_wday" AND date_wday&amp;lt;= "end_wday" &lt;BR /&gt;
|eval Outtraffic= Outbound/1048576&lt;BR /&gt;
|timechart  span=1d MAX(Outtraffic) AS MAXOuttraffic ,values(Transmit Bandwidth) as MAXOUT-Bandwidth&lt;/P&gt;

&lt;P&gt;I have passed the data from input.conf file like below.&lt;/P&gt;

&lt;P&gt;[monitor:///C:/solar/*.csv]&lt;BR /&gt;
disabled = false&lt;BR /&gt;
host_regex = solar\(?\w+.+)&lt;BR /&gt;
index = main&lt;BR /&gt;
sourcetype = lookup&lt;BR /&gt;
host =  vm1&lt;/P&gt;

&lt;P&gt;Thanks in advance. &lt;/P&gt;

&lt;P&gt;Regards&lt;BR /&gt;
karteek.Korrapolu&lt;/P&gt;</description>
    <pubDate>Tue, 29 Sep 2020 23:11:31 GMT</pubDate>
    <dc:creator>kk185157</dc:creator>
    <dc:date>2020-09-29T23:11:31Z</dc:date>
    <item>
      <title>create a dash board  from multiple csv files  by using lookup file with multiple drop down.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/create-a-dash-board-from-multiple-csv-files-by-using-lookup-file/m-p/376851#M46275</link>
      <description>&lt;P&gt;Hi All&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;I have data in multiple csv files. I would like to create the dashboard from csv files(dynamic values) by using lookup file(static values).&lt;BR /&gt;
The dashboard should contain daily usage of inbound and outbound traffic of each node.&lt;/STRONG&gt;&lt;/P&gt;

&lt;P&gt;first csv name :node1.csv&lt;BR /&gt;
Time    Node Name   Inbound Outbound    Received Bandwidth  Transmit Bandwidth&lt;BR /&gt;
1/23/2019 15:03   node1 170323.766  208175.859    20.00 Mbps      20.00 Mbps&lt;BR /&gt;
1/23/2019 15:08   node2 58398.6836  117372.133    20.00 Mbps      20.00 Mbps&lt;/P&gt;

&lt;P&gt;second csv name :node2.csv&lt;BR /&gt;
Time    Node Name   Inbound Outbound    Received Bandwidth  Transmit Bandwidth&lt;BR /&gt;
1/23/2019 15:03 Node2   133894.9    171775.438    100.00 Mbps     25.00 Mbps&lt;BR /&gt;
1/23/2019 15:08 node2   78438.25    156584.391    100.00 Mbps     25.00 Mbps&lt;/P&gt;

&lt;P&gt;look up file is in csv format.&lt;BR /&gt;
lookup.csv&lt;/P&gt;

&lt;P&gt;SNO uid start_hour  end_hour    receivebandwidth    transmitbandwidth   node    location    tiers   threshold   start_wday  end_wday&lt;BR /&gt;
1   Node1.csv   8:00    17:00   40  40  node1   US  tiers1  70% 1   7&lt;BR /&gt;
2   node2.csv   8:00    17:00   40  40  node2   Canada  tiers2  70% 1   7&lt;BR /&gt;
3   node3.csv   0:00    23:59   10  10      India   tiers3  70% 1   7&lt;/P&gt;

&lt;P&gt;I have tried the below one. but no luck.&lt;/P&gt;

&lt;P&gt;|eval date_wday=strftime(_time,"%u")&lt;BR /&gt;&lt;BR /&gt;
|eval start_h=strptime(start_hour,"%H:%M")&lt;BR /&gt;
|eval start_e=strftime(start_e,"%H:%M")&lt;BR /&gt;
|eval end_h=strptime(end_hour,"%H:%M")&lt;BR /&gt;
|eval end_e=strftime(end_e,"%H:%M")&lt;/P&gt;

&lt;P&gt;|where time_custom&amp;gt;="start_h" AND  time_custom&amp;lt; "end_h" AND date_wday&amp;gt;= "start_wday" AND date_wday&amp;lt;= "end_wday" &lt;BR /&gt;
|eval Outtraffic= Outbound/1048576&lt;BR /&gt;
|timechart  span=1d MAX(Outtraffic) AS MAXOuttraffic ,values(Transmit Bandwidth) as MAXOUT-Bandwidth&lt;/P&gt;

&lt;P&gt;I have passed the data from input.conf file like below.&lt;/P&gt;

&lt;P&gt;[monitor:///C:/solar/*.csv]&lt;BR /&gt;
disabled = false&lt;BR /&gt;
host_regex = solar\(?\w+.+)&lt;BR /&gt;
index = main&lt;BR /&gt;
sourcetype = lookup&lt;BR /&gt;
host =  vm1&lt;/P&gt;

&lt;P&gt;Thanks in advance. &lt;/P&gt;

&lt;P&gt;Regards&lt;BR /&gt;
karteek.Korrapolu&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 23:11:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/create-a-dash-board-from-multiple-csv-files-by-using-lookup-file/m-p/376851#M46275</guid>
      <dc:creator>kk185157</dc:creator>
      <dc:date>2020-09-29T23:11:31Z</dc:date>
    </item>
  </channel>
</rss>

