Hi,
I am currently trying to do a drill down for my panel when i click on each month. However when I click on the month , the month retrieve was in epoch time format. How do i work around this so ...
...n the input.. So I need to use eval to make idx=$index_name$ or something to reference the right idx from the log by using the input dropdown.
Any thoughts?
Thanks,
Hello, I have a token called range (assume it has a value of "123-456"), and I am trying to use it inside a token eval:
<eval token="start">replace($range$,"-.*","")</eval>
So s...
I recently saw a reference in slides from .conf 2016 (https://conf.splunk.com/files/2016/slides/dashboard-wizardry.pdf, slide 16) that suggests one can reference a specific token namespace in S...
...uper_important_field$" | <<SOMETHING>>
To at the end got a fields containing :
"Some interesting Rule Title about some_super_important_value"
Just like token replacement in d...
...lerts on the Incident Review dashboard. I've noticed that when the field name does not contain spaces, I can just reference the field name using its token, e.g. Excessive failed logins from $s...
I have a panel in a dashboard that parses xml, and displays them with transpose. This is a head 1, so there will only ever be one row. I want to set a token based on the row 1 value of column=A...