Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
All Posts
Find Answers
Ask questions. Get answers. Find technical product solutions from passionate members of the Splunk community.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- All Posts
All Posts
02-04-2024
10:54 PM
Hello Giuseppe, Thanks you for your reply .. I tried upgrading it but i am getting the following error : Error connecting to /services/apps/local: The read operation timed out..... Could you please ...
See more...
Hello Giuseppe, Thanks you for your reply .. I tried upgrading it but i am getting the following error : Error connecting to /services/apps/local: The read operation timed out..... Could you please suggest any solution?
02-04-2024
10:42 PM
Check this post for more technical details. https://community.splunk.com/t5/Dashboards-Visualizations/How-to-use-dynamic-checkbox-in-table/m-p/635091
02-04-2024
10:38 PM
1 Karma
Yes @willtseng0217 You can store data KV store. You have to just take care of a couple of things. create a lookup with a unique ID that can be used for updating records. call KVStore API with th...
See more...
Yes @willtseng0217 You can store data KV store. You have to just take care of a couple of things. create a lookup with a unique ID that can be used for updating records. call KVStore API with the click of a button. display status and action button value as per the KV Store. I hope this will help you to move further
02-04-2024
10:25 PM
@kamlesh_vaghela Sir really thank for response so quickly May I Know , is that possible to keep status field content when dashboard refresh ? for example , when I click that button , write _t...
See more...
@kamlesh_vaghela Sir really thank for response so quickly May I Know , is that possible to keep status field content when dashboard refresh ? for example , when I click that button , write _time, a , b , status to the lookup table or something, once dashboard refresh , I can lookup that and keep this status content alive
02-04-2024
10:17 PM
@Ryan.Paredez Thanks for your reply. I have gone thought all the post. They are mentioning about the incorrect configuration, could be possible reason of the error. The configuration look good from ...
See more...
@Ryan.Paredez Thanks for your reply. I have gone thought all the post. They are mentioning about the incorrect configuration, could be possible reason of the error. The configuration look good from our side i.e. same config is working other PODS. I have opened the support case and we are working on it. Regards, Amit Singh Bisht
02-04-2024
10:14 PM
Hi @RS, good for you, see next time! let me know if I can help you more, or, please, accept one answer for the other people of Community. Ciao and happy splunking Giuseppe P.S.: Karma Points are...
See more...
Hi @RS, good for you, see next time! let me know if I can help you more, or, please, accept one answer for the other people of Community. Ciao and happy splunking Giuseppe P.S.: Karma Points are appreciated
02-04-2024
10:10 PM
I appreciate your help very much
02-04-2024
10:06 PM
1 Karma
Now you can try Chat GTP. it will give this answer only.
02-04-2024
10:05 PM
1 Karma
@willtseng0217 Can you please try XML and js below? XML <dashboard version="1.1" theme="dark" script="test.js">
<label>js for button on table cell</label>
<row>
<panel>
<table id=...
See more...
@willtseng0217 Can you please try XML and js below? XML <dashboard version="1.1" theme="dark" script="test.js">
<label>js for button on table cell</label>
<row>
<panel>
<table id="table1">
<search>
<query>|makeresults count=5 | eval A=random(), B=random(), status=A, action=A</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
</row>
</dashboard> test.js require([
'underscore',
'jquery',
'splunkjs/mvc',
'splunkjs/mvc/tableview',
'splunkjs/mvc/simplexml/ready!'
], function (_, $, mvc, TableView) {
console.log("Hie 2");
var CustomCellRenderer = TableView.BaseCellRenderer.extend({
canRender: function (cell) {
// Enable this custom cell renderer for the confirm field
return _(["action", "status"]).contains(cell.field);
},
render: function ($td, cell) {
if (cell.field == "action") {
let unique_id = cell.value;
let button_id = "action_btn_" + unique_id;
let div_id = "status_div_" + unique_id;
let button = $('<button />', {
value: 'Ack',
id: button_id,
on: {
click: function () {
console.log(unique_id, button_id);
console.log(div_id);
let div_value = $('#' + div_id).html();
if (div_value == "Ack") {
$('#' + div_id).html("Unack");
$('#' + button_id).html("Ack");
} else {
$('#' + div_id).html("Ack");
$('#' + button_id).html("Unack");
}
}
}
}).addClass("extend_expiry btn-sm btn btn-primary").html("Ack");
$td.html(button)
}
if (cell.field == "status") {
let div_id = "status_div_" + cell.value;
let html = `<div id="` + div_id + `"></div>`
$td.html(html)
}
}
});
var sh = mvc.Components.get("table1");
if (typeof (sh) != "undefined") {
sh.getVisualization(function (tableView) {
// Add custom cell renderer and force re-render
tableView.table.addCellRenderer(new CustomCellRenderer());
tableView.table.render();
});
}
}); Screenshot Note: Just change the code as per your logic and feel free to ask. I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.
02-04-2024
09:59 PM
Any idea? how to hide in studio dashboard?
02-04-2024
08:13 PM
Is there a way to make the dashboard react to the scenario below? I have 3 panels for dropdown menu. if A is selected panel 1 shows Search A panel 2 shows Title and the link to URL panel ...
See more...
Is there a way to make the dashboard react to the scenario below? I have 3 panels for dropdown menu. if A is selected panel 1 shows Search A panel 2 shows Title and the link to URL panel 3 shows Another Search of its own (if "drop down" is selected A) if B is selected Panel 1 shows Search B Panel 2 Disappear Panel 3 Disappear if C is selected Panel 1 shows Search C Panel 2 Disappear Panel 3 Disappear if D is selected Panel 1 shows Search D Panel 2 Disappear Panel 3 Disappear This is what I have so far that doesn't seem to work as expected <input type="dropdown" token="tokenSearchOption1" searchWhenChanged="true"> <label>Sources</label> <choice value="A">A</choice> <choice value="B">B</choice> <choice value="C">C</choice> <choice value="D">D</choice> <change> <condition value="A"> <set token="tokenSearchQuery"> index= search query A</set> </condition> <condition value="B"> <set token="tokenSearchQuery">index= search query B</set> </condition> <condition value="C"> <set token="tokenSearchQuery">index=search query C</set> </condition> <condition value="D"> <set token="tokenSearchQuery">index= search query D</set> </condition> </change> <initialValue>"A"</initialValue> </input> </panel> </row> <row> <panel id="URL test"> <title>Title URL</title> <html> <!-- <style> .dashboard-row Title .dashboard-panel h2.panel-title { font-size: 40px !important; text-align:left; font-weight:bold; } </style>--> <center> <style>.btn-primary { margin: 5px 10px 5px 0;font-size: 40px !important; }</style> <a href="URL for a website" target="blank" class="btn btn-primary"> Click here </a> </center> </html> </panel> </row> <row> <panel depends=dropdown A> <title>Magic</title> <table> <search> <query>Index=Run this search when drop down A </query> <earliest>$tokTime.earliest$</earliest> <latest>$tokTime.latest$</latest> </search> <option name="drilldown">none</option> <option name="refresh.display">progressbar</option> <option name="wrap">false</option> </table> </panel>
02-04-2024
06:14 PM
Take a look at Ingest Actions
02-04-2024
06:06 PM
I was having the same issue. Looking in the code editor for the table showed that a field summary had been set somehow. Removing this seemed to fix my issue.
02-04-2024
05:36 PM
Is there any way to block logs coming from other servers, on a distributed server, with the debug level activated? I say this because our splunk is suffering performance degradation due to the amount...
See more...
Is there any way to block logs coming from other servers, on a distributed server, with the debug level activated? I say this because our splunk is suffering performance degradation due to the amount of DEBUG logs. I'm still studying the props.conf documentation, would this be the right way to do this?
Labels
- Labels:
-
data
02-04-2024
03:31 PM
Thanks @ITWhisperer that worked, Very help full
02-04-2024
03:14 PM
Thanks @gcusello. The given query helped me produce the required timechart.
02-04-2024
03:05 PM
1 Karma
Thanks for that! I need to find some time to invest in this.
02-04-2024
02:37 PM
WARNING! The new website is broken and cannot display newlines inside of double-quotes, even as a "code snippet" which is also moronic and inexcusable. So while my correct answer looked fine and w...
See more...
WARNING! The new website is broken and cannot display newlines inside of double-quotes, even as a "code snippet" which is also moronic and inexcusable. So while my correct answer looked fine and worked in the old answers site, the new one cannot be made to display a correct answer so I am going to DESSCRIBE IT. The space that you see in the double-quotes is actually supposed to be a newline as in <"></n><">. If you do that, it works. The stupid site is also forcing me to add an app, even this this Q/A has nothing to do with any app.
02-04-2024
02:34 PM
WARNING! The new website is broken and cannot display newlines inside of double-quotes, even as a "code snippet" which is also moronic and inexcusable. So while my correct answer looked fine and w...
See more...
WARNING! The new website is broken and cannot display newlines inside of double-quotes, even as a "code snippet" which is also moronic and inexcusable. So while my correct answer looked fine and worked in the old answers site, the new one cannot be made to display a correct answer so I am going to DESSCRIBE IT. The space that you see in the double-quotes is actually supposed to be a newline as in <"></n><">. If you do that, it works.
02-04-2024
12:38 PM
As @ITWhisperer suggested, you should check and post accuracy of relevant data. I highly doubt if you have a field called httpsCode. It is more likely httpCode, if the field is provided by Splunk a...
See more...
As @ITWhisperer suggested, you should check and post accuracy of relevant data. I highly doubt if you have a field called httpsCode. It is more likely httpCode, if the field is provided by Splunk at all. If it not already extracted, you need to first extract it. If you need help with extraction, you will need to post raw data (anonymize as needed). More than that, a good, answerable question should illustrate desired results and explain the logic between illustrated dataset and desired results. This relieves volunteers of the burden to read your mind. Statistically, mind reading is more wrong than correct. This said, I interpret your intention as to discern the count and average timetaken - again, if this field is named such and already extracted in Splunk, by "success" or "failure" status. Maybe this will help. | eval status = if(match(httpCode, "200|30[0-4,78]"), "success", "failure")
| stats avg(timetaken) count by status Note that 3xx return codes are generally success statuses. Unless you have specific reasons to classify them as "failure", they should be grouped into success. Hope this helps.
