Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About sidekix24
sidekix24
Path Finder
Member since:
09-09-2015
06-05-2020
Community Statistics
| Posts | 117 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 6 |
| Member Since | 09-09-2015 |
Activity Feed
- Got Karma for How to set a different drilldown for each cell in a table in my Simple XML dashboard?. 06-05-2020 12:48 AM
- Got Karma for How to set a different drilldown for each cell in a table in my Simple XML dashboard?. 06-05-2020 12:48 AM
- Got Karma for How to set 1 Search Head cluster member to send all alerts?. 06-05-2020 12:48 AM
- Got Karma for How to set 1 Search Head cluster member to send all alerts?. 06-05-2020 12:48 AM
- Got Karma for Re: How to set 1 Search Head cluster member to send all alerts?. 06-05-2020 12:48 AM
- Got Karma for Splunk App and Add-on for Unix and Linux: How to change the default index name and set retention policy?. 06-05-2020 12:48 AM
- Karma Re: How do I show more than 10 field values in a timechart? for Drainy. 06-05-2020 12:46 AM
- Posted DB Connect stop sending new data on All Apps and Add-ons. 01-26-2018 12:03 PM
- Posted Daily license usage by index on Splunk Cloud on Monitoring Splunk. 12-05-2017 12:18 PM
- Posted Login with local account with SSO Okta enabled on Security. 09-14-2017 10:53 AM
- Tagged Login with local account with SSO Okta enabled on Security. 09-14-2017 10:53 AM
- Posted Splunk/Pager Duty integration no results work around on All Apps and Add-ons. 07-20-2017 04:00 PM
- Posted Indexes appear in usage report but not in indexes.conf or on indexer on Getting Data In. 05-04-2017 03:37 PM
- Tagged Indexes appear in usage report but not in indexes.conf or on indexer on Getting Data In. 05-04-2017 03:37 PM
- Posted Disable index on Getting Data In. 04-05-2017 02:25 PM
- Tagged Disable index on Getting Data In. 04-05-2017 02:25 PM
- Posted Re: Splunk App and Add-on for Unix and Linux: How to change the default index name and set retention policy? on All Apps and Add-ons. 03-23-2017 01:47 PM
- Posted Splunk App and Add-on for Unix and Linux: How to change the default index name and set retention policy? on All Apps and Add-ons. 03-23-2017 10:25 AM
- Tagged Splunk App and Add-on for Unix and Linux: How to change the default index name and set retention policy? on All Apps and Add-ons. 03-23-2017 10:25 AM
- Posted Re: Hide Radio Input in Dashboard on Getting Data In. 03-22-2017 03:21 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 2 | |||
| 0 |
12-09-2016
11:11 AM
somesoni2,
This is basically an all or nothing setting, correct? Where you have to make the adjustment in XML in the dashboard/chart to hide this option. You can set it up where the "open in search" is available for some users and disabled for others?
Thanks
... View more
12-08-2016
03:04 PM
Do you guys have some next steps where we can validate the conf and ini files? Some entries that we'd need to look for in the Splunkd logs or something?
Thanks
... View more
12-08-2016
02:31 PM
We ran that curl command on one of our search heads and the Jira server return the expected data.
Thanks
... View more
12-08-2016
01:41 PM
Thanks...We'll try that and see what results we get.
Thanks again
... View more
12-08-2016
10:36 AM
We're installed the add on and followed the instruction to modify the config.ini and jira.conf but when we try the search below we get no results.
| jirarest MODE OPTIONS
Are we just missing a step somewhere?
... View more
12-08-2016
10:13 AM
We're trying to run it on a clustered environment Splunk Enterprise 6.4.
We're installed the add on and followed the instruction to modify the config.ini and jira.conf but when we try the search below we get no results.
| jirarest MODE OPTIONS
Are we just missing a step somewhere?
Thanks
... View more
12-07-2016
03:00 PM
We're trying to use the Add-on for JIRA and are not having any success. But when looking back on the link in splunkbase, the latest compatible version was 6.2. Was curious to see if our issue was because it's not compatible with the newer versions?
Thanks
... View more
11-18-2016
02:17 PM
We're experiencing the same issue....Has anyone figured out a fix yet?
... View more
11-09-2016
10:25 AM
Running that search in Verbose mode brings back the correct product and count
... View more
11-08-2016
12:43 PM
I'm having issues with this panel when using appendcols. Here's the search:
index="ai.snv.mon.query.25" ScanTime!="ScanTime" Product=an OR Product=s4 OR Product=buyer Filename="*is_up_on_*" Status="crit" | stats dc(Filename) AS Database by Product | appendcols[search index="ai.snv.mon.query.25" ScanTime!="ScanTime" Product=an OR Product=s4 OR Product=buyer Filename="*buyer_integrated_realms_front_door.query" OR Filename="*s4_integrated_realms_front_door.query" | eval Nstatus=if(Status== "info", 0, 1) | stats dc(Filename) AS iFrontdoors by Product] | appendcols [search index="ai.snv.mon.query.25" ScanTime!="ScanTime" Product=an OR Product=s4 OR Product=buyer DataBlob="*uiHint: General*" Status="crit" | stats dc(Filename) AS Frontdoors by Product ] | table Product Frontdoors iFrontdoors Database
and here's the table that comes out:
The issue is that the "1" in iFrontdoors for "an" should be in the cell for "s4" and the an/ifrontdoor cell should be blank. Everything else lines up correctly. I've tried re-ordering the searches but that doesn't fix the issue. By process of elimination, when I take out the search for "iFrontdoors" the numbers line up correctly.
Anyone have any suggestions?
Thanks
... View more
10-27-2016
11:36 AM
Weird question, but does anyone have a graceful procedure to go from clustered environment to stand alone?
Current setup:
1 master node
2 indexers clustered
1 stand alone search head
Company wants to go with:
2 search heads and 1 indexers to prepare for a multisite cluster down the road. Master Node will just sit idle for now. I know there's an "offline" command that we can run to take out the indexer from the cluster and then just need to re-point the search head to the correct peer, but I wanted to see if there's a graceful way to do this or if I'm going to run into any issues using the steps above.
thanks
... View more
10-19-2016
08:54 PM
That's a great idea....but you know I have to ask, do you know how to pass a token from one dashboard to another?
🙂
... View more
10-19-2016
04:06 PM
I think I may have it solved by combining the 2 solutions that you gave me. I'm going to try it out tonight/tomorrow to see if it fits what I'm trying to do.
Feel free to send any other suggestions though but I'll let you know if the combo solution works out in the end 🙂
Thanks again!!!
... View more
10-19-2016
02:16 PM
Thanks sundareshr,
I'm trying to redirect to different app/dashboards
like clicking on mongod takes you to: /app/Test/reports
Clicking on count in mongod row takes you to :/app/Test/searches
Scheduler takes you to: /app/Test/
Count in Scheduler row takes you to : /app/Test/reports
... View more
10-19-2016
02:06 PM
Thanks again for all the assistance
... View more
10-19-2016
02:05 PM
I just need them to go to a prebuilt dashboard when they click so a sample would be:
if you click on the count value in the mongod row you go to: /app/Test/table_cell_highlighting_test
If you click on mongod cell you go to:
/app/Test/alerts
If you click on scheduler cell you go to:
/app/Test/reports
if you click on the count value in the scheduler row you go to:
/app/Test/search
... View more
10-19-2016
10:59 AM
got it..ok, that makes sense for specific values but I'm trying to figure out how to assign a specific link to each cell.
Any ideas on that?
... View more
10-19-2016
10:19 AM
Thanks sundareshr,
I'm trying to figure this out. What condition directs you to the mongodb site in the sample above? I just keep going to the splunk site when I click on the table
Thanks again
... View more
10-19-2016
10:16 AM
so...I have an individual dashboard for Availability, performance, Host Health and Host Health 2 for each sourcetype and I to go to that dashboard when the value in that particular cell is clicked.
Thanks again
... View more
10-19-2016
09:46 AM
dedicated dashboard for each cell.
Thanks
... View more
10-18-2016
03:41 PM
I'd like to be able to configure each cell under availability, performance, Host Health and Host Health 2 to take me to a different page when I click on it.
So if I click on top cell under Availability, I can get taken to a dashboard for Availability for sourcetype mongod and so on.
Thanks
... View more
10-18-2016
03:08 PM
2 Karma
Does anyone know of a way or have a good link on how to set a different drilldown for each cell in a table? I'm using a Simple XML dashboard and I'm able to make a whole column to go to one page, but I wanted to see if I could do the same but by cell. Is that possible?
Thanks
... View more
10-18-2016
02:20 PM
I think I figured out what was going on. It was my scheduled report for the panel. I do have another question though.
We're using simple XML and 1 scheduled report for our dashboard to populate one big chart. The report is scheduled to run every 5 mins and if I try to refresh the dashboard while the report is running, the dashboard waits for the report to finish running before it loads. If you refresh it in between runs, it loads really fast. Its a huge search and the job takes about 2 mins.
Is there a way to set the chart to load cached data when the dashboard reloads while the report is running.
I tried adding this option with different values from the link that was suggested above but it didn't work.
scheduled
thanks
... View more
10-16-2016
08:04 PM
Hi,
I'm using scheduled reports to populate my panels on a dashboard. Since we've changed to this configuration, we now have progress bar that's stuck at the corner of each panel everytime the dashboard loads up. The data loads correctly but the progress stays there.
I've attached a screen shot. Anyone know how to hide that progress bar. We're using charts and single value panels in simple XML mode.
Thanks
... View more
10-10-2016
10:25 AM
Hello,
We want to move previously indexed data into a new Splunk instance and wanted to make sure that doesn't count against our daily license.
I found the link below in a previously asked question but the link was dead.
http://docs.splunk.com/Documentation/Splunk/6.3.1511/Installation/MigrateaSplunkinstance
Can anyone confirm that it doesn't count?
Thanks
... View more
