Hi All,
We have set the data retention has 1 year (365 days) for in cluster master. But when we search the datain Search and Reporting app for an index then we can able to fetch data more than a...
Hi,
I am working on troubleshooting one issue where data from a particular sourcetype is not getting parsed correctly. Came across this page under Settings -> Sourcetypes and want to u...
...his view with an $application$ name set (so that I can use a HTTP request, either GET/POST). I'm able to land to the view with the view name, but I couldn't find how to populate the input field values w...
index=epaas_epaas2_idx ns=xyz365 (app_name="abc" OR app_name="xyz" OR app_name="lmn" OR app_name="deg") method!=GET (process=start OR (process=end AND (status="500"OR status="429" OR status="5...
Hi,
I just downloaded and installed Splunk Light on-prem and I'm trying to use HTTP Event Collector walk-through ( http://dev.splunk.com/view/event-collector/SP-CAAAE7F) with postman/curl. I t...
Hello! I am trying to use less static colors as possible ina dashboard so that users could switch between dark and light mode without dashboard looking odd. It would useful to have current theme in...
Hey,
I know that you can set read/write permissions on views.
Is it possible to set read permissions on indexes and sourcetypes?
I ask this because it might be good to just prevent c...
I have an advanced xml viewset up with some line graphs, but it seems that on the graphs that do not have a large dataset, it shows gaps in the graph. Also I can click around the chart area and s...