Dashboards & Visualizations

Renaming Dashboard Names

msarkaus
Explorer

Hello, 

I'm fairly new to Splunk and I'm hoping someone could help me rename the API names in my Dashboard.  I have several names associated with urlPthTxt. 

 

Splunk Dashbaord03.pngSplunk Dashbaord01.png

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

"renaming" refers to changing the identifier of a field, as you did by changing "urlPNthTxt" to "API".  What you seek, however, is a change in the values stored in a field.  That requires an eval, replace, or sed (perhaps other commands that escape me ATM).

| replace "/V1/" with "" in API

or

| rex field=API mode=sed "s;/V1/;;"
---
If this reply helps you, Karma would be appreciated.

View solution in original post

msarkaus
Explorer

Thank you, both suggestions worked.. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

"renaming" refers to changing the identifier of a field, as you did by changing "urlPNthTxt" to "API".  What you seek, however, is a change in the values stored in a field.  That requires an eval, replace, or sed (perhaps other commands that escape me ATM).

| replace "/V1/" with "" in API

or

| rex field=API mode=sed "s;/V1/;;"
---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Bridging the Gap: Splunk Helps Students Move from Classroom to Career

The Splunk Community is a powerful network of users, educators, and organizations working together to tackle ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...