Splunk Search

invalid search or missing required fields for thresholding

faizolsaidin
Explorer

Hi,

I'm using ad hoc search for a glass table. By search, when run i'm able to get the value that i want. But in the glass table, error appear as "invalid search or missing required fields for thresholding ". Any idea or opinion that i can start to look at?

0 Karma
1 Solution

faizolsaidin
Explorer

Thanks for your info. I'm still rookie in ITSI Splunk, based from the documentation, on step 3, it asked to check on Time Picker, may I know where can I find it?

alt text

View solution in original post

0 Karma

pleymort
Explorer

For info, the time picker is at the top of the glass table :
alt text

Just the "Now" button.

0 Karma

faizolsaidin
Explorer

Thanks for your info. I'm still rookie in ITSI Splunk, based from the documentation, on step 3, it asked to check on Time Picker, may I know where can I find it?

alt text

0 Karma

p_gurav
Champion

Hi

Please verify the threshold field you have to specify. Refer following link for Configure ad hoc search widgets:
https://docs.splunk.com/Documentation/ITSI/3.0.1/User/BuildGlassTable

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...