About guilmxm

guilmxm · ‎03-07-2014

Hi ! Thanks you very very much, so fast so effective 🙂 Works like a charm, i was getting crazy looking for the way Splunk was generating this automatically

guilmxm · ‎03-07-2014

Hi, Does anyone knows how i could get a chart in simple xml to render as the same it automatically does when using the predit command ? To illustrate, when using the predict command (whenever you are in inline search or a dashboard you saved), a nice chart is being generated with transparency between lower and upper data: I have other data i want to chart the same way, let's i have 4 series: the main serie, as for example cpu consummation 3 series that will represent min, avg and max of previous periods: lower, middle and upper Currently, the result i have is as expected: So my goal is to get the same chart result than predict command automatically generates, but the simple xml code have no differences between the one that generates the transparency between ranges and the one that does not... Thank you very much for your help !

guilmxm · ‎02-11-2014

Hi, Many thanks for your answer. Indeed i think this is the solution, however something inherited by an other css file seems to prevent it to work as for now. (even with important statement within the css) Still working on it and will revert

guilmxm · ‎02-11-2014

Hi All, I would like to able to colorize the "TOTAL" line in simple xml tables as follows: <table> <searchString>MYSEARCH | addcoltotals labelfield="myfield" label=TOTAL</searchString> <earliestTime>$earliest$</earliestTime> <latestTime>$latest$</latestTime> <option name="wrap">true</option> <option name="rowNumbers">false</option> <option name="dataOverlayMode">none</option> <option name="drilldown">row</option> <option name="count">10</option> </table> The addcoltotals will add a line called TOTAL at the end of my table, i would like to floddlight this line with a specific color, is there a way to achieve it ? Using css maybe ? Thanks for your help

guilmxm · ‎01-23-2014

Thanks, this is indeed what i was looking for, i missed this view within the Framework toolkit 😉

guilmxm · ‎01-22-2014

Hi, I have the same requirement, can you achieve the same thing (for both tables and charts) when using the django request to render the item ? As for an example: {% table id="table1-info-hosts" managerid="info-hosts" resizable="true" drilldown="cell" pageSize="20" %} I've tried: splunkjs.mvc.Components.getInstance("table1-info-hosts").settings.set({ ... }); But does not work

guilmxm · ‎01-21-2014

You can also (this is the way i did) create a symbolic link and then perform upgrade. I have several splunk instance with a common root dir (let's say /opt/splunk/instance_A /opt/splunk/instance_B, and so on) I just create a symbolic link to /opt/splunk/splunk corresponding to the instance i need to upgrade and then achieve it. (untar in the instance common root dir)

guilmxm · ‎01-21-2014

Yes you're definitively right, this search has to be improved 🙂 I'll take note of your comment thanks

guilmxm · ‎01-21-2014

Let me give you an example of what i called a very long and complex search, in the present case this concerns a prediction interface about IBM Mainframes CPU consummation, the user has various setting choices downstreamed by forms. Also some periods (4) will provide the user a way to influence the result. (to integrate projects prevision and so on) This kind of complex search will necessary be quite long... search='index=$index$ report=$report$ PSERIES=$valuespseries$ curr_shared_proc_pool_name="DefaultPool" OR "Not_Applicable" earliest="$earlyval$" latest="$lateval$" PoolIdle>0 | eval conso=round(max_conso_pool,2) | eval percent_conso=(conso/CPU_active)*100 | eval percent_conso=round(percent_conso,2) | eval percent_conso_installed=(conso/CPU_installed)*100 | eval percent_conso_installed=round(percent_conso_installed,2) | where ( conso>0) AND ( percent_conso<100 ) | dedup _time,PSERIES | timechart span=$span$ max(conso) As max_conso | predict max_conso As Projection lower30=low upper30=high future_timespan=$future_timespan$ algorithm=$algorithm$ holdback=$holdback$ | eval Projection=if(_time>if("$manualtime_period1$" == "now", now(),strptime("$manualtime_period1$", "%d/%m/%Y")),Projection+$manualcpus_period1$,Projection) | eval Projection=if(_time>if("$manualtime_period2$" == "now", now(),strptime("$manualtime_period2$", "%d/%m/%Y")),Projection+$manualcpus_period2$,Projection) | eval Projection=if(_time>if("$manualtime_period3$" == "now", now(),strptime("$manualtime_period3$", "%d/%m/%Y")),Projection+$manualcpus_period3$,Projection) | eval Projection=if(_time>if("$manualtime_period4$" == "now", now(),strptime("$manualtime_period4$", "%d/%m/%Y")),Projection+$manualcpus_period4$,Projection) | eval low=if(_time>if("$manualtime_period1$" == "now", now(),strptime("$manualtime_period1$", "%d/%m/%Y")),low+$manualcpus_period1$,low) | eval low=if(_time>if("$manualtime_period2$" == "now", now(),strptime("$manualtime_period2$", "%d/%m/%Y")),low+$manualcpus_period2$,low) | eval low=if(_time>if("$manualtime_period3$" == "now", now(),strptime("$manualtime_period3$", "%d/%m/%Y")),low+$manualcpus_period3$,low) | eval low=if(_time>if("$manualtime_period4$" == "now", now(),strptime("$manualtime_period4$", "%d/%m/%Y")),low+$manualcpus_period4$,low) | eval high=if(_time>if("$manualtime_period1$" == "now", now(),strptime("$manualtime_period1$", "%d/%m/%Y")),high+$manualcpus_period1$,high) | eval high=if(_time>if("$manualtime_period2$" == "now", now(),strptime("$manualtime_period2$", "%d/%m/%Y")),high+$manualcpus_period2$,high) | eval high=if(_time>if("$manualtime_period3$" == "now", now(),strptime("$manualtime_period3$", "%d/%m/%Y")),high+$manualcpus_period3$,high) | eval high=if(_time>if("$manualtime_period4$" == "now", now(),strptime("$manualtime_period4$", "%d/%m/%Y")),high+$manualcpus_period4$,high)'|token_safe Even with some optimization that would always be possible (and even without the story of four manual periods), you can easily see how it can be quite hard to read within a same string line

guilmxm · ‎01-21-2014

Hi, Thank you for answering. The second, i mean i can't break the search line string within a search manager into multiple lines for more visibility in a django view. It seems we have to keep all the command line on the same line or it breaks the page and generates some Django error page. In a simple or advanced xml view, you can simply use a line return in the same command. As far an other example, in savedsearches.conf you can break (split) search line into multiple by suffixing with a backslash until the last line. I have several views with complex searches that cannot be decomposed more than than they already are (forms downstreaming variables depending on users choices and various reasons due to the data itself and operation required) That would be much better to be able to split a search line into multiple line until the end of the search, is it impossible in django html view ? Thanks for you help

guilmxm · ‎01-20-2014

Hi All, I have a very simple question, i could not yet answer myself, how can we achieve to split commands within a Django view into multiple lines for more readability and visibility ? I have some views with commands becoming more and more complex while my Django dev increased, one command per line becomes very hard to read, a backslash "\" does not work and generates a page error, a line return doesn't work either... Thanks a lot!

guilmxm · ‎01-02-2014

Hi All, I am currently trying with no success to convert the view "Table Icon Set (Inline)" provided by the app Splunk 6 Dashboard Examples into a django / javascript view using the new Web framework. This view provides a very interesting way (and important to our requirements) to add custom icon visualizations of specific values ranges into a table to much improve its visibility: This uses a Javascript code (file: table_icons_inline.js) as follows (with fields name adapted to my requirements): require([ 'underscore', 'jquery', 'splunkjs/mvc', 'splunkjs/mvc/tableview', 'splunkjs/mvc/simplexml/ready!' ], function(_, $, mvc, TableView) { var CustomIconRenderer = TableView.BaseCellRenderer.extend({ canRender: function(cell) { return cell.field === 'Percent_Used'; }, render: function($td, cell) { var Percent_Used = cell.value; // Compute the icon base on the field value var icon; if(Percent_Used > 90) { icon = 'alert-circle'; } else if(Percent_Used > 70) { icon = 'alert'; } else { icon = 'check'; } // Create the icon element and add it to the table cell $td.addClass('icon-inline numeric').html(_.template('<%- text %> <i class="icon-<%-icon%>"></i>', { icon: icon, text: cell.value })); } }); var CustomIconRenderer2 = TableView.BaseCellRenderer.extend({ canRender: function(cell) { return cell.field === 'Percent_OverProvisionning'; }, render: function($td, cell) { var Percent_OverProvisionning = cell.value; // Compute the icon base on the field value var icon; if(Percent_OverProvisionning > 90) { icon = 'alert-circle'; } else if(Percent_OverProvisionning > 70) { icon = 'alert'; } else { icon = 'check'; } // Create the icon element and add it to the table cell $td.addClass('icon-inline numeric').html(_.template('<%- text %> <i class="icon-<%-icon%>"></i>', { icon: icon, text: cell.value })); } }); mvc.Components.get('table1').getVisualization(function(tableView){ // Register custom cell renderer tableView.table.addCellRenderer(new CustomIconRenderer()); // Force the table to re-render tableView.table.render(); }); mvc.Components.get('table1').getVisualization(function(tableView){ // Register custom cell renderer tableView.table.addCellRenderer(new CustomIconRenderer2()); // Force the table to re-render tableView.table.render(); }); }); This works very well into my simple xml view, but when i try to add it into my django view, the table works ok but not the icon customization. Inspecting the page using my browser, i can see some related errors into the console which i don't have when launching the simple xml page that works fine: Failed to load resource: the server responded with a status of 404 (Not Found) http://guilhem-xxxxx:8000/en-us/splunkd/__raw/servicesNS/admin/xxxxxxxxxxxxxx/data/ui/views/HDS_Dashboard?output_mode=json&_=1388709272893 event.returnValue is deprecated. Please use the standard event.preventDefault() instead. mvc.js:1 Uncaught Error: Load timeout for modules: splunkjs/mvc/simplexml/ready!_unnormalized4,splunkjs/mvc/simplexml/ready! http://requirejs.org/docs/errors.html#timeout config.js:1 4 Uncaught TypeError: Object [object Array] has no method 'attrTween' d3chartview.js:1 I tried to adapt and play with library launched inside the js code (require...) with no success. I'm unfortunately not (yet) a javascript expert, that is why i would appreciate your help on this, i guess the javascript is maybe not totally compatible with a django view and has to be adapted... The error message shown in the console talks about the splunkjs/mvc/simplexml/ready! library that cannot be loaded, off course if i delete loading this library, then other error will append (ex. Uncaught TypeError: Cannot call method 'extend' of undefined ) I notably tried replacing require with and example coming from django views: require([ "splunkjs/ready!", "splunkjs/mvc/utils", "underscore", "jquery", "splunkjs/mvc/tableview" With no success. Last thing, the simple xml view can be converted into an html view that works perfectly, in this html view the js code is called differently like: <script src="{{SPLUNKWEB_URL_PREFIX}}/static/app/xxxxxxxxxxxxxx/table_icons_inline.js" type="text/javascript"></script> I also tried to integer this into my django view javascript block with no success... Here is an example of js code part i tried with no success : {% block js %} {{ block.super }} <script> require([ "splunkjs/ready!", "splunkjs/mvc/utils", "underscore", "jquery", "splunkjs/mvc/dropdownview" ], function( mvc, utils, _, $, DropdownView ){ var chart = mvc.Components.getInstance('chart-info-pool'); chart.settings.set("setup", function(chart){ chart.showLabels(true); chart.showLegend(false); }); }); </script> <script> require([ 'underscore', 'jquery', 'splunkjs/mvc', 'splunkjs/mvc/tableview', 'splunkjs/mvc/simplexml/ready!' ], function(_, $, mvc, TableView) { var CustomIconRenderer = TableView.BaseCellRenderer.extend({ canRender: function(cell) { return cell.field === 'Percent_Used'; }, render: function($td, cell) { var Percent_Used = cell.value; // Compute the icon base on the field value var icon; if(Percent_Used > 90) { icon = 'alert-circle'; } else if(Percent_Used > 70) { icon = 'alert'; } else { icon = 'check'; } // Create the icon element and add it to the table cell $td.addClass('icon-inline numeric').html(_.template('<%- text %> <i class="icon-<%-icon%>"></i>', { icon: icon, text: cell.value })); } }); var CustomIconRenderer2 = TableView.BaseCellRenderer.extend({ canRender: function(cell) { return cell.field === 'Percent_OverProvisionning'; }, render: function($td, cell) { var Percent_OverProvisionning = cell.value; // Compute the icon base on the field value var icon; if(Percent_OverProvisionning > 90) { icon = 'alert-circle'; } else if(Percent_OverProvisionning > 70) { icon = 'alert'; } else { icon = 'check'; } // Create the icon element and add it to the table cell $td.addClass('icon-inline numeric').html(_.template('<%- text %> <i class="icon-<%-icon%>"></i>', { icon: icon, text: cell.value })); } }); mvc.Components.get('table1').getVisualization(function(tableView){ // Register custom cell renderer tableView.table.addCellRenderer(new CustomIconRenderer()); // Force the table to re-render tableView.table.render(); }); mvc.Components.get('table1').getVisualization(function(tableView){ // Register custom cell renderer tableView.table.addCellRenderer(new CustomIconRenderer2()); // Force the table to re-render tableView.table.render(); }); }); </script> {% endblock js %} Many thanks in advance for any help !!!

guilmxm · ‎12-24-2013

index=_internal source=*metrics.log group=per_index_thruput series=* | eval MB = round(kb/1024,2) | timechart sum(MB) as MB by series Will return data indexing informations

guilmxm · ‎12-24-2013

I'm sorry i think i misunderstood your question, as you seem to want to chart an indexed log file and not the index itself. You could create a simple shell script that will output time, logfile name, and size, (script input) and index where you want, and then generates charts as you need

guilmxm · ‎12-24-2013

Hi, You can use the following request to get the current index size (size in MB): | eventcount summarize=false report_size=true index=* | eval size_MB = round(size_bytes/1024/1024,2) | fields index, size_MB At this point, you can schedule a savedsearch that will populates a summary index including a _time data extracted from the search time itself: | eventcount summarize=false report_size=true index=* | addinfo | eval _time=info_search_time | eval size_MB = round(size_bytes/1024/1024,2) | fields _time,index,size_MB And then finally generates chart based on this summary index.

guilmxm · ‎12-24-2013

Hi, That's no big deal, and the answer is NO you won't loose your change: custom config files in "local" dir (eg. system/local...) App installed ans associates files indexes... But if you have modified system files whitout creating the overwritten version in local dirs, yes these changes will probably be lost. As for an example, if you have custom limits configuration, don't modify system/defaults/limits.conf but create a new files including your setting in system/local/limits.conf To upgrade from previous release when you installed through the tarball Archive: Stop Splunk Backup your current install using tar Extract the tar.gz where splunk is installed, only splunk files will be overwritten, you won't loose any thing. (even if backing up is always a good idea) Let's say you installed by default, splunk is installed in /opt/splunk In terminal, go at top of splunk dir (cd /opt) and extract files (tar -xvf ) Start Splunk and accept changes

guilmxm · ‎12-23-2013

Hi, You can do it easily, append a "where" condition after the predict command to exclude non predicted data. In you example, append: | where isnull(aantal)

guilmxm · ‎12-16-2013

You have to manage it using JS, i managed it in some Django HTML views (using the new Web framework) See: http://answers.splunk.com/answers/112539/web-framework-django-and-3dchart-modifying-default-chart-settings-and-options Example code: var chart = mvc.Components.getInstance('d3chart1'); chart.settings.set("setup", function(chart){ chart.color(d3.scale.category10().range()); chart.staggerLabels(true); chart.showValues(true); });

guilmxm · ‎12-03-2013

Hi, I'll redo some test and will let you know, but yes i mean that when applying the d3chart part js code after the bubbles.on ... then this wasn't being applied (as far an example activating show values within the chart) But i agree it shouldn't, maybe a mistake of mine Yes with pleasure, (to accept the answer), but a stupid question how do you achieve this ? i've looked everywhere but couldn't find how !

guilmxm · ‎11-27-2013

Hi, Many many thanks ! You actually solved my issue and i took control over chart settings. It seems i am in the case you mentionned, i had to move the JS code that sets the chart option from bottom to top of JS Block for it to work successfully (can't get to understand why in fact ?) Here is my complete view: {% extends "BubbleCharts_PSeriesAll_common.html" %} {% load splunkmvc %} {% load splunk_wftoolkit %} {% block css %} {{block.super}} <style type="text/css"> #bubble1{ height: 600px; } #d3chart1{ height: 400px; } </style> {% endblock css %} {% block heading %}Analyse de la consommation CPU Global du parc Pseries {% endblock heading %} {% block example %} <div class="panel-body"> <h3><p><p>Consommation CPU PSeries (Pourcentage ConsoPool/CPU Activés)</h3> </div> {% bubblechart id="bubble1" managerid="post1" valueField="percent_conso" labelField="PSERIES" categoryField="PSERIES" %} {% endblock example %} {% block chart %} <div class="panel-body"> <h3><p><p>Top 15 Consommation CPU PSeries (En valeurs CPU - Top Pourcentage ConsoPool/CPU Activés)</h3> </div> {% d3chart id="d3chart1" managerid="post2" type="discreteBarChart" valueField="conso" labelField="PSERIES" categoryField="PSERIES" %} {% endblock chart %} {% block table %} {% table id="table1" managerid="post3" pageSize="100" %} {% endblock table %} {% block usage%} <p>Sélectionner les critères souhaités pour démarrer le traitement:</p> <p> </p> <table class="table table-striped table-bordered"> <tr> <td> <p></p> <b>Sélection de la période:</b>. </td> <td> <p></p> {% timerange id="example-timerange" managerid="example-search" preset="J-2" earliest_time="$earlyval$"|token_safe latest_time="$lateval$"|token_safe %} <p></p> </td> </tr> <tr> <td> <b>Critères de statistiques:</b>. </td> <td> <p> </p> {% radiogroup id="statmode-radiogroup" default="max(consopool) As conso" value="$statmode$"|token_safe %} </td> </tr> <tr> <td> <b>Filtrage Horaire:</b>. </td> <td> <p> </p> {% radiogroup id="filtertime-radiogroup" default="`No_Filter`" value="$filtertime$"|token_safe %} </td> </tr> </table> {% searchcontrols id="searchcontrol1" managerid="search1" %} {% endblock usage%} {% block managers %} {% searchmanager id="search1" search='index=myindex sourcetype=mysourcetype ( PSERIES=* ) earliest="$earlyval$" latest="$lateval$" | $filtertime$ | eval consopool=(RPI_NUM_POOL-RPI_NUM_APP) | search curr_shared_proc_pool_name="DefaultPool" OR "Not_Applicable" | search RPI_NUM_APP>0 | stats $statmode$ , max(cpu_active) as CPU_active, max(cpu_installed) as CPU_installed by PSERIES,LPAR | eval conso=round(conso,2) | eval percent_conso=(conso/CPU_active)*100 | eval percent_conso=round(percent_conso,2) | eval percent_conso_installed=(conso/CPU_installed)*100 | eval percent_conso_installed=round(percent_conso_installed,2) |sort - percent_conso,PSERIES,LPAR | dedup PSERIES | fields PSERIES,LPAR,percent_conso,percent_conso_installed,conso,CPU_active,CPU_installed'|token_safe preview=True %} {% postprocessmanager id="post1" managerid="search1" search='| fields PSERIES,percent_conso' %} {% postprocessmanager id="post2" managerid="search1" search="| sort - percent_conso | fields PSERIES,conso | head 15" %} {% postprocessmanager id="post3" managerid="search1" search='| sort - percent_conso | rename LPAR As LPAR_referent | strcat conso " cpu" conso | eval CPU_active=round(CPU_active,0) | eval CPU_installed=round(CPU_installed,0) | strcat CPU_active " cpu" CPU_active | strcat CPU_installed " cpu" CPU_installed | strcat percent_conso " %" percent_conso | strcat percent_conso_installed " %" percent_conso_installed | fields PSERIES,LPAR_referent,conso,percent_conso,percent_conso_installed,CPU_active,CPU_installed' %} {% endblock managers %} {% block js %} {{ block.super }} <script type="text/javascript"> require([ "splunkjs/ready!", "splunkjs/mvc/utils", "underscore", "jquery", "splunkjs/mvc/dropdownview" ], function( mvc, utils, _, $, DropdownView ){ var chart = mvc.Components.getInstance('d3chart1'); chart.settings.set("setup", function(chart){ chart.color(d3.scale.category10().range()); chart.staggerLabels(true); chart.showValues(true); }); var choices = [ {label: " Pics de consommation CPU", value: "max(consopool) As conso"}, {label: " Moyenne de consommation CPU", value: "avg(consopool) As conso"}] // Assign them to the button group splunkjs.mvc.Components.getInstance("statmode-radiogroup").settings.set("choices", choices); var choices = [ {label: " Pas de filtrage (24/24 7/7)", value: "`No_Filter`"}, {label: " Période TP Semaine (Lundi-Vendredi 08h à 20h)", value: "`TP_BusinessDays_8h-20h`"}, {label: " Période TP WeekEnd (Samedi-Dimanche 08h à 20h)", value: "`TP_WeekEnd_8h-20h`"}, {label: " Période TP (Lundi-Dimanche 08h à 20h)", value: "`TP_AllDays_8h-20h`"}, {label: " Période Batch Semaine (Lundi-Vendredi 20h à 08h)", value: "`Batch_BusinessDays_20h-8h`"}, {label: " Période Batch WeekEnd (Samedi-Dimanche 20h à 08h)", value: "`Batch_WeekEnd_20h-8h`"}, {label: " Période Batch (Lundi-Dimanche 20h à 08h)", value: "`Batch_AllDays_20h-8h`"}, ] // Assign them to the button group splunkjs.mvc.Components.getInstance("filtertime-radiogroup").settings.set("choices", choices); var bubbles = mvc.Components.getInstance("bubble1"); var valuedd = mvc.Components.getInstance("value-dropdown"); var categorydd = mvc.Components.getInstance("category-dropdown"); var namedd = mvc.Components.getInstance("name-dropdown"); // Set Value field statmode-radiogroup.on("change", function(){ bubbles.settings.set("valueField", statmode-radiogroup.val()); }); var nameChoices = categoryChoices; namedd.settings.set("choices", nameChoices); namedd.on("change", function(){ bubbles.settings.set("labelField", namedd.val()); }); bubbles.on("click", function(e){ console.log("Click Event"); console.log(e); }); }); </script> {% endblock js %} Everything works now and i can set chart option but only in the portion of JS Code in on top on JS block section, if this is moved down (i haven't tried every position, only bottom and top) then settings are not being applied on the chart. I haven't tried the JS code for searches because i like django syntax that i feel being more clean and simple than its JS version, very cool 🙂 Keep on this excellent work ! Perhaps that lack shall be integrated into the component reference in Splunk Dev under the d3chart section which only covers d3charting options when the search is being run using JS Again thanks.

guilmxm · ‎11-26-2013

I found the solution to show search evolution by simply adding a search control within my view: {% searchcontrols id="searchcontrol1" managerid="search1" %} Still i can't get the control over the discretebarchart 😞

guilmxm · ‎11-25-2013

Up Up !! No one ?

guilmxm · ‎11-25-2013

Hi All, I have generated a view in html that uses Django and the all new (and very cool) Web framework. I have some issue to apply custom settings to my chart (actually a discretebar d3chart) using django... The doc (http://docs.splunk.com/Documentation/WebFramework) says how to modify chart settings (like activating the option showvalue=true) when using JS but not when using Django. Based on an example taken in the Web Framework Toolkit (essentially the view d3chart), my view generates my charts as follows: The django block that sets the chart itself (based on a postprocess search): {% block chart %} {% d3chart id="d3chart1" managerid="post1" type="discreteBarChart" valueField="conso" labelField="LPAR" categoryField="LPAR" %} {% endblock chart %} - The block managers thats sets associated searches (based it self on various dropdown): {% block managers %} {% searchmanager id="search1" search='index=nmon_lpar sourcetype=nmon_lpar PSERIES=$valuespsearies$ earliest="$earlyval$" latest="$lateval$" | eval conso=((EC_User_PCT+EC_Sys_PCT+EC_Wait_PCT+EC_Idle_PCT)*entitled/100) | $filtertime$ | stats $statmode$ by LPAR | eval conso=round(conso,2)'|token_safe preview=True %} {% postprocessmanager id="post1" managerid="search1" search="| sort - conso | head 8" %} {% searchmanager id="single1" search='index=nmon_lpar sourcetype=nmon_lpar PSERIES=$valuespsearies$ earliest="$earlyval$" latest="$lateval$" | head 1 | fields PSERIES | dedup PSERIES'|token_safe preview=True %} {% searchmanager id="pseriessearch" search="| inputlookup sysplan_pseries_config | fields PSERIES | dedup PSERIES | sort PSERIES" preview=True %} {% endblock managers %} This works as expected and generates that kind of views (a bubblechart associated with a discretebarchart): I have 2 related problem, the first one is to be able to set various custom chart settings. As mentioned in the Framework doc, i've tried to adapt the JS section: exemple of the doc: donut_chart.settings.set("setup", function(chart){ chart.color(d3.scale.category10().range()); chart.staggerLabels(true); chart.showValues(true); }); To things like: var d3chart = mvc.Components.getInstance("d3chart1"); d3chart.settings.set("setup", function(chart){ chart.color(d3.scale.category10().range()); chart.staggerLabels(true); chart.showValues(true); }); With no results... (i'm taken for example the activation of show values which is currently off) And tried others things but still with no results. Does anyone knows how to deal with it ? I would greatly appreciate ! 🙂 I guess that my main issue comes from the fact that i use django to iniate both the search and the graph (and not JS) but the Framework components reference doc does not specify how to do it when using django and not JS for this... (i would have to rewrite all the view using JS...) The second question is related to the search itself, is there any JobProgressIndicator like module for django and JS views ? The search (based on TimeRange and other pulldown) may require time to be fully executed, the only for the user to know when the search is terminated is when charts stop to move! (sic!) Many thanks in advance for any help ! The Web Framework is very interesting and i'm dealing to globalize it to my views...

guilmxm · ‎11-22-2013

I should have found that 🙂 Many Thanks!

guilmxm · ‎11-21-2013

Hi, Iv'e create a very cool view using the all new Web Framework but i can't get to understand how to access from it within my standard application What the good way to achieve this ? My goal is to reference my new django view (which works accessing the dj URL) within my app's homepage (URL Link and Nav bar) My dj view URL dj/en-us/MYAPP/UI_Collect_Analysis My standard URL en-US/app/MYAPP/Home I've read the doc still can't get the trick...! (modifying urls.py ? views.py ?) Thanks a lot!

Posts	597
Solutions	84
Karma Given	52
Karma Received	204
Member Since	‎11-22-2012

Online Status	Offline
Date Last Visited	‎07-10-2025 05:07 AM

Rapid7 TA Python script gets stuck and blocks next...

jquery vulnerability for the horseshoe viz

Splunk for k8s - please review savedsearches.conf ...

Splunk for k8s - incorrect search syntax will prod...

Splunk for K8s - typo in savedsearches "Pod CPU/Me...

There are several issues to be fixed in the curren...

Why does 3D Scatterplot fail to load with Splunk 7...

Why should only the Splunk_TA_vmware be deployed o...

instrospection data generation will fail in Splunk...

tstats behaviour change in Splunk 6.6, expected ch...

Re: Get a Chart rendering as when using predict co...

Get a Chart rendering as when using predict comman...

Re: Simple xml table - Colorize the Total line

Simple xml table - Colorize the Total line

Re: Splunk Web Framework - Converting Table Icon S...

Re: Django TableView: Open in search/Export option

Re: Upgrading from Splunk 6.0 to 6.0.1 in custom h...

Re: Django - Web Framework - Split very long comma...

Re: Django - Web Framework - Split very long comma...

Re: Django - Web Framework - Split very long comma...

Django - Web Framework - Split very long command i...

Splunk Web Framework - Converting Table Icon Simpl...

Re: How can I statistic daily indexed log size

Re: How can I statistic daily indexed log size

Re: How can I statistic daily indexed log size

Re: Update from 6.0 to 6.0.1

Re: Predict: Can I show only the predicted events ...

Re: how to disable legends in chart using D3ChartV...

Re: Web Framework - django and 3dchart - Modifying...

Re: Web Framework - django and 3dchart - Modifying...

Re: Web Framework - django and 3dchart - Modifying...

Re: Display Icons in table as range states (low, h...

Web Framework - django and 3dchart - Modifying def...

Re: Web FrameWork - Access a django view within a ...

Web FrameWork - Access a django view within a stan...

Are you a member of the Splunk Community?