I have a time picker on my dashboard called timePicker. There are some pie charts that are populated based on the earliest and latest of the time picker. That part works great. However, I have on the same dashboard a line graph that shows counts over hour by day for the last 7 days. That earliest and latest is set static like this ...   earliest=-7D@d latest=now   Ideally I would like the line graph to not just show the previous seven days before now, but the previous seven days based on the time picker. The latest part is easy. I could do this ...   earliest=-7D@d latest=$timePicker.latest$   My trouble is with earliest. I need to subtract 604800 from  it (seven days worth of seconds). I tried this, but it doesn't seem to work.   [stats count | eval early=$$timePicker.earliest$$ | eval earliest=early-604800 | fields earliest] latest=$timePicker.latest$   I doubled $ for the earliest token to escape it out because it is used in a dashobard ... I read somewhere that  $ needs to be escaped. Anyway, I get no results. I'm sure my syntax is wrong or maybe I'm going about it wrong. Anyone have any thoughts on how to do this? I guess another thought would be to create a token when the time picker is selected that calculates $timePicker.earliest$ - 604800 but I'm not sure if that is possible or how to do it. Any help would be much appreciated. Thanks.

Hi, everyone. I am new to Splunk. I have an environment with 3 nodes indexer cluster + cm + Search Head. I am wondering which instance I should send my request to when using REST API?  I have checked API reference and API User tutorial, try to figure it out which endpoint for which instance, but no luck. It seems all HTTPS request send to localhost:8089? Please help. Thanks.

Hi, I want to count the LOGLEVEL only for weekdays.  If there's not logs then the query should return '0'.  Can you please help me to correct this query. index="XYZ" sourcetype=Logs LOGLEVEL=ERROR OR LOGLEVEL=FATAL OR LOGLEVEL=INFO|eval Day=strftime(_time,"%w")| eval DayType=if((Day >=0) AND (Day <=6) ,"WeeekDay","WeekEnd") | If(DayType=="WeekDay", count(LOGLEVEL=ERROR OR LOGLEVEL=FATAL OR LOGLEVEL=INFO),'0')   Regards, Syed

hello I use a click value token on my timechart in order to display details it works but now what I need is when I click on a specific bar of my timechart (it means a bar for a specific day) I need to display only the data for this date how to do this please <search> <query>index=tutu sourcetype=toto ezconf=$ezconf$ | timechart span=1d count(hang)as hang</query> <earliest>-7d@h</earliest> <latest>now</latest> </search> <drilldown> <set token="hang">$click.value$</set> </drilldown> </chart> </panel> </row> <row> <panel depends="$hang$"> <title></title> <table> <title></title> <search> <query>index=toto sourcetype=tutu ezconf=$ezconf$ | eval time = strftime(_time, "%d-%m-%y %H:%M") | sort - time | table time hang</query> <earliest>-7d@h</earliest> <latest>now</latest> </search> <option name="drilldown">none</option> <option name="refresh.display">progressbar</option> </table> </panel>  

Hi, I recently updated my AppDynamics package for nodejs from version 4.x.x to 20.4.0 and tested it out locally it works perfectly but when I created a docker image to deploy on my server it seems to not work. The main issue I think is due to MongoDB. Can someone please take a look and tell me what the issue could be?  I found a ticket "NODEJS-103" in the past resolved issue so anyone can explain this ticket in detail. I have provided a stack trace of my nodejs API.   stack trace ----------------------------------------------- qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:15.99 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:15.992Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:17.06 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:17.064Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:17.06 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:17.067Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:23.33 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:23.333Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:23.33 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:23.335Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:23.61 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:23.618Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:23.61 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:23.619Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:25.13 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:25.136Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:25.13 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:25.138Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | Returning an existing Mongo instance qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:29.90 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:29.906Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:29.90 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:29.907Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:39.92 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:39.924Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:18:39.92 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:18:39.926Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | Returning an existing Mongo instance qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:19:0.33 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:19:00.330Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:19:0.33 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:19:00.332Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:19:1.62 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:19:01.626Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | 17.01.2022 10:19:1.62 | error | RestInterface | app.js | uncaughtException | uncaught exception qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | {"name":"RestInterface","hostname":"15e77919f4f4","pid":1,"level":50,"fs":"app.js","func":"uncaughtException","error":{},"stack":"TypeError: Cannot read property 'api' of undefined\n at Profiler.agent.profiler.addExitCall (/opt/app-root/node_modules/appdynamics/lib/libagent/libagent-connector.js:562:21)\n at MongodbProbe.addExitCall (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:364:14)\n at Instrumentation.<anonymous> (/opt/app-root/node_modules/appdynamics/lib/probes/mongodb-probe.js:120:14)\n at Instrumentation.emit (events.js:182:13)\n at MongoClient.on.event (/opt/app-root/node_modules/mongodb/lib/apm.js:18:60)\n at MongoClient.emit (events.js:182:13)\n at ReplSet.topology.on (/opt/app-root/node_modules/mongodb/lib/operations/connect.js:661:19)\n at ReplSet.emit (events.js:182:13)\n at ReplSet.<anonymous> (/opt/app-root/node_modules/mongodb/lib/topologies/replset.js:281:14)\n at ReplSet.emit (events.js:182:13)\n at Server.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Server.emit (events.js:182:13)\n at Pool.listener.on.event (/opt/app-root/node_modules/mongodb/lib/core/utils.js:34:71)\n at Pool.emit (events.js:182:13)\n at operation.cb (/opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:928:16)\n at /opt/app-root/node_modules/mongodb/lib/core/connection/pool.js:420:18\n at appd_proxy (/opt/app-root/node_modules/appdynamics/lib/core/appDProxy.js:431:22)\n at process._tickCallback (internal/process/next_tick.js:61:11)","msg":"uncaught exception","time":"2022-01-17T10:19:01.628Z","v":0} qa_recon_api_internal_api-internal.1.mspid2qxv9kz@adkqwk04 | Returning an existing Mongo instance ^ Edited by @Ryan.Paredez for formatting 

Dear Splunk Community, I'm trying to extract a list of changed fields, but they should only be listed if they have a value.     <mysearch> | eval _raw="DeviceName:" . host ." " . if(len(srcaddr)>0,"PolicySrc:" . srcaddr,"") ." " . if(len(dstaddr)>0,"PolicyDst:" . dstaddr,"") ." " . if(len(service)>0,"PolicySvc:" . service,"") ."     With len>0 I managed to hide the fields that have not changed, but in the results they are still there as a line break, e.g.     DeviceName: test PolicyDst: dest1 PolicySvc svc1     How can I get rid of these line break(s)?

Hi, have CLIENT_CONNECT_AUTH_FAIL log entries in Splunk for different usernames. Would like to send an alert when the count of CLIENT_CONNECT_AUTH_FAIL entries for a specific username exceeds a threshold (say 10 within the last 5 min), an alert should be generated for every user that exceeded a threshold (1 alert per the corresponding username). Trying to achieve that I've used `| stats count by username` and then put trigger `search count > 10`, but results are not as expected Consider an example. Stats query produces the following results: username     count user1              20 user2              15 user3              5 If I set `Trigger` = `Once` then I get an alert for only user1 despite that count of CLIENT_CONNECT_AUTH_FAIL for `user2` also exceeded threshold. If I set `Trigger` = `For each result` then I get an alert for every username despite that threshold is not exceeded for `user3`. What is the right way to do this in Splunk?

  <panel depends="show_panel"> <title>xyz</title> <search base="main_base"> <progress> <condition> <set token="show_panel">true</set> <condition> <condition> <unset token="show_panel"></unset> <condition> </progress> <query> | search months="$tok_mon$" </query> </search> </panel>     can anyone explain what the above xml code is doing with the token show_panel and what the progress Tag is doing or does? this is a drilldown xml code .

Hi,  I want to create the following excel table using splunk. The first 3 columns are based on the output of a query, something like this:  <query>index=mfpublic sourcetype=SMF100 IFCID=1 DB2_SHARING_GROUP_NAME=$ssid_tok$ DB2_SUBSYSTEM="DBXH" | table _time DB2_SSID CPU_accumulated </query> The last column is the result of a math operation between first row and second row. Using Excel, column D has the formula: C2-C3 in the first row, then C3-C4 in the second, then C4-C5, and so on.  (A) Time (B) DB2_SSID (C) CPU_accumulated (D) Difference 17-1-2022 11:20 DBXH 355363188 19569 17-1-2022 11:19 DBXH 355343619 19437 17-1-2022 11:18 DBXH 355324182 21579 17-1-2022 11:17 DBXH 355302603 22657 17-1-2022 11:16 DBXH 355279946 19793 17-1-2022 11:15 DBXH 355260153 -   Is it possible to do this math operation between columns from different rows to create another column ?  After having this "column D" I want to create a line chart based on this information.  Thanks a lot for your help !! 

Hello,  i have a question regarding the usage of the results of a join within an eval if. I have a couple of responses, to which I am joining their preceeding requests (written in another source)   index="index1" sourcetype="sourcetype1" Response... |table rcvTime Command |join type=left left=response right=request usetime=true earlier=true where response.ID=request.ID [search index="index2" sourcetype="sourcetype2" Request ....|table rcvTime Command|sort _time-]   The issue is, that sometimes I get a wrong match, hence a request, that is not connected to the response and was a few days ago. The reason, why they are matched, is because it is the same device ID.  Thats why I am trying to have an eval for the timediff. If I am using the variable request.command within the if, I will receive empty results:   index="index1" sourcetype="sourcetype1" Response... |table rcvTime Command |join type=left left=response right=request usetime=true earlier=true where response.ID=request.ID [search index="index2" sourcetype="sourcetype2" Request ....|table rcvTime Command|sort _time-] |....(commands calculating timediff) | request.command=if(timediff<300,request.command,"")   If I am saving the value within a field that contains no point in the name, it works properly:   index="index1" sourcetype="sourcetype1" Response... |table rcvTime Command |join type=left left=response right=request usetime=true earlier=true where response.ID=request.ID [search index="index2" sourcetype="sourcetype2" Request ....|table rcvTime Command|sort _time-] |....(commands calculating timediff) |rename requestCommand as request.command | requestCommand=if(timediff<300,requestCommand,"")   Does someone have an idea, why I cannot use request.command within the eval (but on other commands I can use it)? Thanks and best Regards