Dashboards & Visualizations

Renaming Dashboard Names

msarkaus
Explorer

Hello, 

I'm fairly new to Splunk and I'm hoping someone could help me rename the API names in my Dashboard.  I have several names associated with urlPthTxt. 

 

Splunk Dashbaord03.pngSplunk Dashbaord01.png

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

"renaming" refers to changing the identifier of a field, as you did by changing "urlPNthTxt" to "API".  What you seek, however, is a change in the values stored in a field.  That requires an eval, replace, or sed (perhaps other commands that escape me ATM).

| replace "/V1/" with "" in API

or

| rex field=API mode=sed "s;/V1/;;"
---
If this reply helps you, Karma would be appreciated.

View solution in original post

msarkaus
Explorer

Thank you, both suggestions worked.. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

"renaming" refers to changing the identifier of a field, as you did by changing "urlPNthTxt" to "API".  What you seek, however, is a change in the values stored in a field.  That requires an eval, replace, or sed (perhaps other commands that escape me ATM).

| replace "/V1/" with "" in API

or

| rex field=API mode=sed "s;/V1/;;"
---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...