Splunk Search

invalid search or missing required fields for thresholding

faizolsaidin
Explorer

Hi,

I'm using ad hoc search for a glass table. By search, when run i'm able to get the value that i want. But in the glass table, error appear as "invalid search or missing required fields for thresholding ". Any idea or opinion that i can start to look at?

0 Karma
1 Solution

faizolsaidin
Explorer

Thanks for your info. I'm still rookie in ITSI Splunk, based from the documentation, on step 3, it asked to check on Time Picker, may I know where can I find it?

alt text

View solution in original post

0 Karma

pleymort
Explorer

For info, the time picker is at the top of the glass table :
alt text

Just the "Now" button.

0 Karma

faizolsaidin
Explorer

Thanks for your info. I'm still rookie in ITSI Splunk, based from the documentation, on step 3, it asked to check on Time Picker, may I know where can I find it?

alt text

0 Karma

p_gurav
Champion

Hi

Please verify the threshold field you have to specify. Refer following link for Configure ad hoc search widgets:
https://docs.splunk.com/Documentation/ITSI/3.0.1/User/BuildGlassTable

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...