topic Re: Help on appendpipe in Splunk Search

Help on appendpipe

jip31 — Fri, 24 Jul 2020 05:52:38 GMT

I use the code below

In the case of no FreeSpace event exists, I would like to display the message "No disk pace events for this host" in my single panel

How doing this please?

to4kawa — Fri, 24 Jul 2020 07:02:43 GMT

There must have been something made by @woodcock about it before, but I've forgotten.

woodcock — Fri, 24 Jul 2020 14:27:21 GMT

You've got it; that's the way to do it, but it was originally from @martin_mueller .

to4kawa — Fri, 24 Jul 2020 18:21:03 GMT

Every query has its own history. thanks @woodcock

jip31 — Sat, 25 Jul 2020 03:16:44 GMT

Thanks, it works fine but ..

In my xml , i format my single value like this

So if "No disk space for this events" is true what is displayed is "No disk space for this events GB".....

to4kawa — Sat, 25 Jul 2020 04:26:58 GMT

and delete option.

jip31 — Sun, 26 Jul 2020 08:03:25 GMT

Thanks Would you confirme that with this code the color palette will continue to work fine? ( i cant test ot today sorry)?

jip31 — Sun, 26 Jul 2020 08:06:30 GMT

Thanks Would you confirme that with this code the color palette will continue to work fine? ( i cant test ot today sorry)?

jip31 — Mon, 27 Jul 2020 04:06:07 GMT

it works but in this case I lost the color format vizualization I use

ex : 0 to 32 : red color

32 to 50 : orange color