Splunk Search

invalid search or missing required fields for thresholding

faizolsaidin
Explorer

Hi,

I'm using ad hoc search for a glass table. By search, when run i'm able to get the value that i want. But in the glass table, error appear as "invalid search or missing required fields for thresholding ". Any idea or opinion that i can start to look at?

0 Karma
1 Solution

faizolsaidin
Explorer

Thanks for your info. I'm still rookie in ITSI Splunk, based from the documentation, on step 3, it asked to check on Time Picker, may I know where can I find it?

alt text

View solution in original post

0 Karma

pleymort
Explorer

For info, the time picker is at the top of the glass table :
alt text

Just the "Now" button.

0 Karma

faizolsaidin
Explorer

Thanks for your info. I'm still rookie in ITSI Splunk, based from the documentation, on step 3, it asked to check on Time Picker, may I know where can I find it?

alt text

0 Karma

p_gurav
Champion

Hi

Please verify the threshold field you have to specify. Refer following link for Configure ad hoc search widgets:
https://docs.splunk.com/Documentation/ITSI/3.0.1/User/BuildGlassTable

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security: Your Command Center for PCI DSS Compliance

Every security professional knows the drill. The PCI DSS audit is approaching, and suddenly everyone's asking ...

Developer Spotlight with Guilhem Marchand

From Splunk Engineer to Founder: The Journey Behind TrackMe    After spending over 12 years working full time ...

Cisco Catalyst Center Meets Splunk ITSI: From 'Payments Are Down' to Root Cause in ...

The Problem: When Networks and Services Don't Talk Payment systems fail at a retail location. Customers are ...