Hi Team I'd like to know how to integrate Splunk with Jira, to send splunk alerts or raise an incidents/issue on Jira for each Splunk alert from Splunk Cloud/Splunk Enterprise. Is there any recommended app or way for this integration? Best Regards

  Hello Splunker!! My Splunk Enterprise license expired on January 29th, and because of that, I have renewed the license. But I missed some events during the license expiration period. How can I get back missed events so they will show up in the below graph?      

I need to be able to add a tip when hovering over a single value viz. It's just a basic SVV, with code like this: { "type": "splunk.singlevalue", "dataSources": { "primary": "ds_some_number" }, "title": "", "options": { "majorValue": "> sparklineValues | lastPoint()", "trendValue": "> sparklineValues | delta(-2)", "sparklineValues": "> primary | seriesByName('floor')", "unitPosition": "before", "unit": "$", "majorFontSize": 36, "backgroundColor": "transparent", "showSparklineTooltip": true }, "description": "", "context": {}, "showProgressBar": false, "showLastUpdated": false }   I need the tool tip to explain how the number is calculated to the user, so just text. It is to run in Splunk Cloud. Anybody got any insight, please?    And yes, I need this to be done in Dashboard Studio, so no need to spend your effort advising me to use simple xml dashboards!   

Hi,  Im trying to create a dashboard that easily presents api endpoint performance metrics  I am generating a summary index using the following search   index=my_index app_name="my_app" sourcetype="aws:ecs" "line.logger"=USAGE_LOG | fields _time line.uri_path line.execution_time line.status line.clientId ``` use a regex to figure out the endpoint from the uri path``` | lookup endpoint_regex_lookup matchstring as line.uri_path OUTPUT app endpoint match | rename line.status as http_status, line.clientId as client_id | fillnull value="" http_status client_id | bin _time span=1m | sistats count as volume p50(line.execution_time) as P50 p90(line.execution_time) as P90 p95(line.execution_time) as P95 p99(line.execution_time) as P99 by _time app endpoint http_status client_id   and i can use searches like this    index=summary source=summary-my_app | timechart $t_span$ p50(line.execution_time) as P50 p90(line.execution_time) as P90 p95(line.execution_time) as P95 p99(line.execution_time) as P99 by endpoint | sort endpoint --- index=summary source=summary-my_app | timechart span=1m count by endpoint   so i can generate a dashboard using a trellis layout that maps the performance of our endpoints without having to hard-code a bunch of panels. im trying to add a chart that displays the http_status counts over time for each endpoint (similar to the latency chart). Ive tried a number of different things, but cant get it work. i know i cant use the following:    index=summary source=summary-my_app | timechart count by endpoint http_status   so thought the following might work:   index=summary source=summary-my_app | stats count by endpoint http_status _time   but this shows me the http_status counts on a single line rather than as seperate series. Does anyone know how i could get this work?