Splunk Search

invalid search or missing required fields for thresholding

faizolsaidin
Explorer

Hi,

I'm using ad hoc search for a glass table. By search, when run i'm able to get the value that i want. But in the glass table, error appear as "invalid search or missing required fields for thresholding ". Any idea or opinion that i can start to look at?

0 Karma
1 Solution

faizolsaidin
Explorer

Thanks for your info. I'm still rookie in ITSI Splunk, based from the documentation, on step 3, it asked to check on Time Picker, may I know where can I find it?

alt text

View solution in original post

0 Karma

pleymort
Explorer

For info, the time picker is at the top of the glass table :
alt text

Just the "Now" button.

0 Karma

faizolsaidin
Explorer

Thanks for your info. I'm still rookie in ITSI Splunk, based from the documentation, on step 3, it asked to check on Time Picker, may I know where can I find it?

alt text

0 Karma

p_gurav
Champion

Hi

Please verify the threshold field you have to specify. Refer following link for Configure ad hoc search widgets:
https://docs.splunk.com/Documentation/ITSI/3.0.1/User/BuildGlassTable

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

AI is one of the biggest topics in the market today, and for security teams, its value goes far beyond the ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

[REGISTER HERE] This thread is for the Community Office Hours session on Detection Engineering Office Hours: ...