I have a search that is working great in the search app of splunk that includes and R script (through the R Project App). When I save it as a Dashboard Panel the search no longer works when I go to the dashboard, but it still works in the search app. Does anyone know why?
My hunch is that the dashboard is flattening out the lines of the R search and ignoring new lines. The search works like this:
...search... | r " source('predictR.r')
BUT not like this:
...search... | r " source('predictR.r') output=data.frame(predictR(input)) "
Which is why I think that the dashboard ignores new lines when the search app does not.
Any ideas? 🙂
Can we use Where condition here, so that we can get the results based on condition.???
if we can get that, can you please post the answer to