Hey, Can someone please tell me what button/object matches the ResultsActionButtons .splViewEvents? Thanks in advance for your help. ... View more

Hey, I just created a new Role for my Splunk instance. Since I have created this role, the flashtimeline view will not load for this user. Instead users with this role receive the following message when the flashtimeline view is accessed: Splunk cannot find the "flashtimeline" view. It may have been renamed or moved. Try removing the page refrerence from this favourite address and refreshing. When I go to Manager->User interface->Views->flashtimeline permissions, read access is set to Everyone including the new role for All apps. What could be causing this message to appear? Is it a capability issue? (I doubt that the capability is the problem). When I look at the App dropdown list (top right of screen) the default Search app that comes with Splunk cannot be found in the list for users that have this new role. Could that be the problem? Help please 🙂 Thanks in advance for your help. ... View more

Hey, I know that you can set read/write permissions on views. Is it possible to set read permissions on indexes and sourcetypes? I ask this because it might be good to just prevent certain Splunk users from being able to read data from a particular index. It may be easier to have this functionality instead of turning off read/write access to every view that uses an index/sourcetype that you do not want certain users to have access to. Thanks in advance for your help. ... View more

Hey, In Splunk, I am aware that I can set read/write permissions for a view based on Splunk roles. Is it possible to set these kind of permissions based on specific users and not roles? For example, I may want only one end user in say the user role group to be able to do something that the other end users with the user role cannot do. I know that I could just create a new role for this specific user but I am just checking to see if I do not have to do this. Thanks in advance for your help. ... View more

Hi, I have a chart which contains many cells. When the chart has finished loading, some of the labels in the X-Axis are changed to include an ellipsis (...) in them as shown in the image below. How can I rotate the x-axis labels so that they are at a 90 degrees angle to this default horizontal position? I believe that the 'layoutTransform' property found here might help: http://www.splunk.com/base/Documentation/4.1.6/Developer/AdvChartingConfig-TextblockLayoutspriteSprite#Layout_sprite There is a method in the 'Transformation matrix' section called 'rotate' which I think I could use but I am not sure how to write the code or how to link it to 'param name="charting.axisLabelsX...". Please help. Thanks in advance for your help. ... View more

Hey, I am trying to change the following default behaviour spotted on charts in my Splunk instance: Sometimes when a chart has many cells in it, the cell labels change so that you cannot see the name of the cells in their entirety. I want to be able to see the full name 'PQRST4' and not a name with an ellipsis in the middle 'P...4'. How can I change the behaviour so that an ellipsis does not appear at all? Additionally, how could I change the alignment of a cell label so that it is not horizontal as shown above but it is say vertical instead or at a different angle where the ellipsis will not be seen? Thanks in advance for your help. ... View more

Hey, I want to place a HTML link in the position where the Help | About menu resides in Splunk Web. Does anyone know the layoutPanel value (e.g. appHeader) that will make this possible? Also does anyone know where I can get a list of all of the layoutPanel positions that I can use in Advanced XML? This will be useful for positioning modules in a view. Thanks in advance for your help. ... View more