Splunk Search

invalid search or missing required fields for thresholding

faizolsaidin
Explorer

Hi,

I'm using ad hoc search for a glass table. By search, when run i'm able to get the value that i want. But in the glass table, error appear as "invalid search or missing required fields for thresholding ". Any idea or opinion that i can start to look at?

0 Karma
1 Solution

faizolsaidin
Explorer

Thanks for your info. I'm still rookie in ITSI Splunk, based from the documentation, on step 3, it asked to check on Time Picker, may I know where can I find it?

alt text

View solution in original post

0 Karma

pleymort
Explorer

For info, the time picker is at the top of the glass table :
alt text

Just the "Now" button.

0 Karma

faizolsaidin
Explorer

Thanks for your info. I'm still rookie in ITSI Splunk, based from the documentation, on step 3, it asked to check on Time Picker, may I know where can I find it?

alt text

0 Karma

p_gurav
Champion

Hi

Please verify the threshold field you have to specify. Refer following link for Configure ad hoc search widgets:
https://docs.splunk.com/Documentation/ITSI/3.0.1/User/BuildGlassTable

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...

span_metrics: The OpenTelemetry-Idiomatic Way to See Inside Your Services

You open a trace in Splunk Observability Cloud and everything looks fine. One root span, order-pipeline, with ...