<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: splunk single value in embed in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/splunk-single-value-in-embed/m-p/133486#M7909</link>
    <description>&lt;P&gt;Thanks sir. It get resolved.&lt;/P&gt;</description>
    <pubDate>Tue, 08 Jul 2014 14:27:28 GMT</pubDate>
    <dc:creator>rameshlpatel</dc:creator>
    <dc:date>2014-07-08T14:27:28Z</dc:date>
    <item>
      <title>splunk single value in embed</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/splunk-single-value-in-embed/m-p/133484#M7907</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;I have reports to show backlog count in numeric. I have used SPLUNK Single Value feature for that.&lt;/P&gt;

&lt;P&gt;Query : index="OCSMONITOR" source="dbmon-tail://ocsrpt_ocsmonitor/QBacklogCount" |  stats latest(BACKLOGCOUNT) as error | rangemap field=errors low=1-40 elevated=40-1500 default=severe&lt;/P&gt;

&lt;P&gt;Time range : 5 min Window (Real Time)&lt;/P&gt;

&lt;P&gt;But this are not giving me options of Schedule/ Embed report.&lt;/P&gt;

&lt;P&gt;Please suggest me how could i create this as Embed report?&lt;/P&gt;</description>
      <pubDate>Tue, 08 Jul 2014 12:53:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/splunk-single-value-in-embed/m-p/133484#M7907</guid>
      <dc:creator>rameshlpatel</dc:creator>
      <dc:date>2014-07-08T12:53:13Z</dc:date>
    </item>
    <item>
      <title>Re: splunk single value in embed</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/splunk-single-value-in-embed/m-p/133485#M7908</link>
      <description>&lt;P&gt;As per documentation, You can't embed a report until it is scheduled to run on a regular interval. And the scheduling is not applicable for realtime searches/reports. Hence, you're not getting any options to convert this to Embed scheduled report. &lt;/P&gt;

&lt;P&gt;Instead, convert this to a regular search with 5 min window (earliest=-5m@m) and have it scheduled to run every 5min.&lt;/P&gt;</description>
      <pubDate>Tue, 08 Jul 2014 13:57:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/splunk-single-value-in-embed/m-p/133485#M7908</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2014-07-08T13:57:42Z</dc:date>
    </item>
    <item>
      <title>Re: splunk single value in embed</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/splunk-single-value-in-embed/m-p/133486#M7909</link>
      <description>&lt;P&gt;Thanks sir. It get resolved.&lt;/P&gt;</description>
      <pubDate>Tue, 08 Jul 2014 14:27:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/splunk-single-value-in-embed/m-p/133486#M7909</guid>
      <dc:creator>rameshlpatel</dc:creator>
      <dc:date>2014-07-08T14:27:28Z</dc:date>
    </item>
  </channel>
</rss>

