About kamlesh_vaghela

kamlesh_vaghela · ‎02-04-2024

Yes @willtseng0217 You can store data KV store. You have to just take care of a couple of things. create a lookup with a unique ID that can be used for updating records. call KVStore API with the click of a button. display status and action button value as per the KV Store. I hope this will help you to move further 🙂

kamlesh_vaghela · ‎02-04-2024

Now you can try Chat GTP. it will give this answer only. 😜 🤣

kamlesh_vaghela · ‎02-04-2024

@willtseng0217 Can you please try XML and js below? XML <dashboard version="1.1" theme="dark" script="test.js"> <label>js for button on table cell</label> <row> <panel> <table id="table1"> <search> <query>|makeresults count=5 | eval A=random(), B=random(), status=A, action=A</query> <earliest>-24h@h</earliest> <latest>now</latest> <sampleRatio>1</sampleRatio> </search> <option name="count">20</option> <option name="dataOverlayMode">none</option> <option name="drilldown">none</option> <option name="percentagesRow">false</option> <option name="rowNumbers">false</option> <option name="totalsRow">false</option> <option name="wrap">true</option> </table> </panel> </row> </dashboard> test.js require([ 'underscore', 'jquery', 'splunkjs/mvc', 'splunkjs/mvc/tableview', 'splunkjs/mvc/simplexml/ready!' ], function (_, $, mvc, TableView) { console.log("Hie 2"); var CustomCellRenderer = TableView.BaseCellRenderer.extend({ canRender: function (cell) { // Enable this custom cell renderer for the confirm field return _(["action", "status"]).contains(cell.field); }, render: function ($td, cell) { if (cell.field == "action") { let unique_id = cell.value; let button_id = "action_btn_" + unique_id; let div_id = "status_div_" + unique_id; let button = $('<button />', { value: 'Ack', id: button_id, on: { click: function () { console.log(unique_id, button_id); console.log(div_id); let div_value = $('#' + div_id).html(); if (div_value == "Ack") { $('#' + div_id).html("Unack"); $('#' + button_id).html("Ack"); } else { $('#' + div_id).html("Ack"); $('#' + button_id).html("Unack"); } } } }).addClass("extend_expiry btn-sm btn btn-primary").html("Ack"); $td.html(button) } if (cell.field == "status") { let div_id = "status_div_" + cell.value; let html = `<div id="` + div_id + `"></div>` $td.html(html) } } }); var sh = mvc.Components.get("table1"); if (typeof (sh) != "undefined") { sh.getVisualization(function (tableView) { // Add custom cell renderer and force re-render tableView.table.addCellRenderer(new CustomCellRenderer()); tableView.table.render(); }); } }); Screenshot Note: Just change the code as per your logic and feel free to ask. I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎01-26-2024

@Splunkanator Can you please share some sample events and expected output? KV

kamlesh_vaghela · ‎12-13-2023

@jason_hotchkiss QQ: Any custom JS you are using across dashboards? KV

kamlesh_vaghela · ‎12-05-2023

@quentin_young Use this link for Splunk Web Framework Component Reference. https://docs.splunk.com/DocumentationStatic/WebFramework/1.0/ JQuery: https://www.w3schools.com/jquery/default.asp Splunk UI Toolkit: https://splunkui.splunk.com/home Integrating jQuery DataTables Into Splunk: https://hurricanelabs.com/splunk-tutorials/integrating-jquery-datatables-into-splunk-tutorial-part-1/ and so on. Happy Learning if you face any issues, just let us know. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎11-30-2023

@quentin_young Sharing my sample code. please check the console for results. test_js_action.js require([ 'underscore', 'jquery', 'splunkjs/mvc', "splunkjs/mvc/searchmanager", 'splunkjs/mvc/simplexml/ready!' ], function (_, $, mvc, SearchManager) { var mySearch = new SearchManager({ id: "mysearch", autostart: "false", search: '| makeresults | eval test = "This is test" ', preview: false, }, { tokens: true, tokenNamespace: "submitted" }); var mySearchResults = mySearch.data("results"); mySearchResults.on("data", function () { resultArray = mySearchResults.data().rows; console.log("My Data", resultArray); }); $(document).ready(function () { $("#btn_submit").on("click", function () { // Capture value of the Text Area console.log("button clicked"); mySearch.startSearch(); }); }); }); XML <dashboard version="1.1" script="test_js_action.js"> <label>test_js_action</label> <row> <panel> <html> <div> <button id="btn_submit">submit</button> </div> </html> </panel> </row> </dashboard> I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎10-30-2023

@RSS_STT You can also try adding this in props.conf. [cluster_test] EXTRACT-fields = "CI":\s"(?<CI_V2>.*)\;(?<CI_1>.*)\;(?<CI_2>.*)\;(?<CI_3>.*)\;(?<CI_4>.*)\;(?<CI_5>.*)\", I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎09-27-2023

@alvesri It should work. Can you please just compare your code with my code. var mySearch = mvc.Components.get("mySearch"); var mySearchResults = mySearch.data("results"); mySearchResults.on("data", function () { resultArray = mySearchResults.data().rows; // Iterate Result set $.each(resultArray, function (index, value) { console.log(index, value) console.log(index, value[0]) console.log(index, value[1]) console.log(index, value[2]) }) }); I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎09-25-2023

@mad_splunker index=someindex cluster=api uuid=api_uuid [ search index=someindex cluster=gw uuid=gw98037234c6e51a48816016172b8a3c56 | eval uuid="gw"+reqid | table uuid ] Can you please try this? I have used different approach. thanks KV

kamlesh_vaghela · ‎09-11-2023

@smanojkumar It looks like you have a custom dashboard. So you can apply CSS by adding it to the HTML tag. Sample Code: Here I'm changing the background. <dashboard version="1.1"> <label>Demo</label> <row> <panel> <html depends="$alwaysHideCSSStyle$"> <style> .dashboard-body { background: #1E93C6 !important; } .dashboard-header h2{ color: #ffffff !important; } </style> </html> </panel> </row> </dashboard> To identify the element you can Use your Browser Inspector tool. Check this link for instructions. https://community.splunk.com/t5/Dashboards-Visualizations/How-do-I-update-panel-color-in-Splunk-using-CSS/m-p/364590/highlight/true#M23796 For further help on CSS, share sample code so we can replicate in our instance. I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎09-11-2023

@splunknoob_rip Can you please try this? require([ 'jquery', "underscore", 'splunkjs/mvc', "splunkjs/mvc/searchmanager", "splunkjs/mvc/simplexml/ready!" ], function ($, _, mvc, SearchManager) { var submittedTokens = mvc.Components.get('submitted'); console.log("Hiee 1"); // var defaultTokens = mvc.Components.get("default"); var mysearch = new SearchManager({ id: "mysearch", autostart: "false", search: '| makeresults | eval test = "$capturedValue$" | collect index = "test_index"', preview: false, }, { tokens: true, tokenNamespace: "submitted" }); $("#btn-submit").on("click", function () { // Capture value of the Text Area var captured = $("textarea#outcome").val(); tokens.set("capturedValue", captured); submittedTokens.set(tokens.toJSON()); mysearch.startSearch(); }); }); I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎09-10-2023

@Akmal57 I think you should remove numbering before stats. Can you please try this? YOUR SEARCH |rex field=ip_addr "(?<ip>\d+\.\d+\.\d+\.\d+)" |stats values(ip) as ip by hostname My Sample Search : | makeresults | eval _raw="hostname,ip_addr Host A,1) 10.0.0.0 Host A,2) 10.10.10.1 Host A,3) 10.0.0.2 Host B,1) 192.1.1.1 Host B,2) 172.1.1.1" | multikv forceheader=1 | table hostname,ip_addr |rex field=ip_addr "(?<ip>\d+\.\d+\.\d+\.\d+)" |stats values(ip) as ip by hostname I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎09-06-2023

@smanojkumar Can you please share more details like which info button you want to change color? A screenshot of a sample dashboard or panel would be helpful. KV

kamlesh_vaghela · ‎08-24-2023

@adamantium7706 Can you please try Variety_token IN ($Variety_token$) in your panel search. I think it should work. Example XML: <dashboard version="1.1"> <label>Demo</label> <fieldset submitButton="false"> <input type="dropdown" token="Variety_token" searchWhenChanged="true"> <label>Fruit List</label> <choice value="111,222,333,444">Mango</choice> <choice value="123,456,112">Apple</choice> <choice value="555,666,777,888,999">Banana</choice> <choice value="753,482">Grapes</choice> </input> </fieldset> <row> <panel> <table> <title>Fruit List</title> <search> <query>| makeresults | eval Variety_token=split("111,222,333,444,123,456,112,555,666,777,888,999,753,482",",") | rename comment as "Up to now is for sample data only" | stats c by Variety_token | search Variety_token IN ($Variety_token$) </query> <earliest>-1y@y</earliest> <latest>@y</latest> </search> <option name="drilldown">none</option> <option name="refresh.display">progressbar</option> </table> </panel> </row> </dashboard> Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎08-16-2023

@darljed Is it possible to share your full code? You can mask important fields & values in XML and JS. KV

kamlesh_vaghela · ‎08-15-2023

@darljed Can you please try this? It's worked for me. Just go through and do appropriate changes in your code. JS require([ 'underscore', 'jquery', 'splunkjs/mvc', 'splunkjs/mvc/tableview', 'splunkjs/mvc/simplexml/ready!' ], function (_, $, mvc, TableView) { var CustomCellRenderer = TableView.BaseCellRenderer.extend({ canRender: function (cell) { // Enable this custom cell renderer for the confirm field return cell.field === 'Expiry_Extension' }, render: function ($td, cell) { console.log(cell.value) if (cell.value != "") { const extension = cell.value.split("|")[0] const expiration_date = cell.value.split("|")[1] const order_id = cell.value.split("|")[2] let html = `` let button_html = ` <button class="extend_expiry btn-sm btn btn-primary"><i class="icon icon-plus-circle"></i></button>` if (extension == 'null') { html += button_html } else { html += extension html += button_html } $td.html(html) } } }); var sh = mvc.Components.get("summary_table"); if (typeof (sh) != "undefined") { sh.getVisualization(function (tableView) { // Add custom cell renderer and force re-render tableView.table.addCellRenderer(new CustomCellRenderer()); tableView.table.render(); }); } }); XML <dashboard version="1.1" script="addCellRenderer.js"> <label>addCellRenderer</label> <row> <panel> <table id="summary_table"> <search> <query>| makeresults count=10 | eval a=1 | accum a | eval Expiry_Extension="null|"+a | table _time a Expiry_Extension</query> <earliest>-24h@h</earliest> <latest>now</latest> <sampleRatio>1</sampleRatio> </search> <option name="count">100</option> <option name="dataOverlayMode">none</option> <option name="drilldown">none</option> <option name="percentagesRow">false</option> <option name="refresh.display">progressbar</option> <option name="rowNumbers">false</option> <option name="totalsRow">false</option> <option name="wrap">true</option> </table> </panel> </row> </dashboard> I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎08-04-2023

@gongya Can you please try below sample code? <form theme="dark" version="1.1"> <label>gongya-UWIT-NAT-DashBoard</label> <fieldset submitButton="true" autoRun="false"> <input type="text" token="var_OrigIP" searchWhenChanged="true"> <label>Original IP</label> <default>*</default> <initialValue>*</initialValue> </input> <input type="text" token="var_dstIP" searchWhenChanged="true"> <label>Destination IP</label> <default>*</default> <initialValue>*</initialValue> </input> <input type="radio" token="SPRT"> <label>$var_OrigIP$</label> <choice value="Yes">Yes</choice> <choice value="No">No</choice> <change> <condition value="Yes"> <set token="SPRTQuery">index=net_uwit_nat srcip=$var_OrigIP$ | table srcip, transip, dstip, dstport | stats count(dstip) as Count by srcip, transip, dstip, dstport</set> </condition> <condition> <set token="SPRTQuery">index=net_uwit_nat srcip=172.21.244.25</set> </condition> </change> </input> </fieldset> <row> <panel> <table> <title>$SPRTQuery$</title> <search> <query>$SPRTQuery$</query> <earliest>-240m@m</earliest> <latest>now</latest> </search> <option name="count">50</option> <option name="dataOverlayMode">none</option> <option name="drilldown">none</option> <option name="percentagesRow">false</option> <option name="refresh.display">progressbar</option> <option name="rowNumbers">false</option> <option name="totalsRow">false</option> <option name="wrap">true</option> </table> </panel> </row> </form> I think It should work for you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎07-10-2023

@kyoung2580 your Url decoding works fine. But your data is HTML encoded also. So you need to do html encoding. Let me check I have any solution for this, KV

kamlesh_vaghela · ‎07-10-2023

@maayan set " " (single space) instead of "" (empty). I don't have this example handy but you ask if you need help somewhere. Here I also suggest posting new questions to start a fresh thread. KV

kamlesh_vaghela · ‎07-09-2023

@maayan Yes, when you click on the tab, it will execute the search. The token 'tokSplit' which is set on click of the tab is used in search which makes it execute. So when you change the tab, tokSplit token will be changed and the search with tokSplit token will execute. If your charts don't change means you need to define a tab-specific token that will be used in the search. like, if tab = sourcetype then set tkn_sourcetype with " " values else unset tkn_sourcetype. do it for all tabs. and just put tkn_sourcetype token in your chart search. like, YOUR_SEARCH $tkn_sourcetype$ search login won't be impacted as tkn_sourcetype token value is " " (single space). I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎07-07-2023

@kakawun Can you please check the logged-in user's role and capabilities sufficient to write data? KV

kamlesh_vaghela · ‎07-06-2023

@denissotoacc Can you please share your sample code? KV

kamlesh_vaghela · ‎07-06-2023

@mvishal Can you please try the below student example? collections.conf [students] enforceTypes = true field.name = string field.age = number field.grade = string field.decision = string transforms.conf [student_lookup] external_type = kvstore collection = students fields_list = _key, name, age, grade, decision table_select.js require([ 'underscore', 'jquery', 'splunkjs/mvc', 'splunkjs/mvc/tableview', 'splunkjs/mvc/simplexml/ready!' ], function (_, $, mvc, TableView) { var service = mvc.createService({ owner: "nobody" }); console.log("Hello !!"); var CustomRangeRenderer = TableView.BaseCellRenderer.extend({ canRender: function (cell) { return _(['Decision']).contains(cell.field); }, render: function ($td, cell) { var cellValue = cell.value; // Create the select element var select = $('<select>'); // Add options to the select element select.append($('<option>', { value: 'No', text: 'Select' })); select.append($('<option>', { value: 'No', text: 'No' })); select.append($('<option>', { value: 'Yes', text: 'Yes' })); // Create the <td> element and append the select element to it var div = $('<div>').append(select); console.log("Hello 1223 !!"); // Add change event handler to the select element select.on('change', function () { var selectedValue = $(this).val(); console.log('Selected value:', selectedValue); console.log('Selected value:', cellValue); const collectionName = 'students'; const recordKey = cellValue.split("|")[1]; // The _key of the record you want to update updateCollectionData(collectionName, recordKey, selectedValue); }); // Append the <td> element to a table row or an existing <td> element $td.append(div); } }); function updateCollectionData(collectionName, recordKey, selectedValue) { console.log(collectionName, recordKey, selectedValue); service.get( "storage/collections/data/" + collectionName + "/" + recordKey, {}, function (err, response) { if (err) { console.error('Error:', err); } else { const data = response.data; console.log('Retrieved data:', data); data.decision = selectedValue; service.request( "storage/collections/data/" + collectionName + "/" + recordKey, "POST", null, null, JSON.stringify(data), { "Content-Type": "application/json" }, null ).done(function () { console.log('Updated data:', data); console.log("Done"); }); } } ); } //List of table IDs to add icon var tableIDs = ["base_table"]; for (i = 0; i < tableIDs.length; i++) { var sh = mvc.Components.get(tableIDs[i]); if (typeof (sh) != "undefined") { sh.getVisualization(function (tableView) { // Add custom cell renderer and force re-render tableView.table.addCellRenderer(new CustomRangeRenderer()); tableView.table.render(); }); } } }); XML <dashboard version="1.1" script="table_select.js" hideEdit="false" hideChrome="true"> <label>Checklist</label> <row> <panel> <table id="base_table"> <search id="bestMain"> <query>| inputlookup student_lookup | eval key=_key | eval Decision=decision."|".key | table name, age, grade Decision</query> <earliest>0</earliest> <latest>now</latest> <sampleRatio>1</sampleRatio> </search> <option name="count">50</option> <option name="dataOverlayMode">none</option> <option name="drilldown">none</option> <option name="percentagesRow">false</option> <option name="refresh.display">progressbar</option> <option name="rowNumbers">false</option> <option name="totalsRow">false</option> <option name="wrap">true</option> </table> </panel> </row> </dashboard> I hope this will help you. Let me know in case of any issues. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

kamlesh_vaghela · ‎07-04-2023

@farhad Can you please try this? YOUR_SEARCH | stats values(week) as weeks by EventID | eval status = case(mvcount(weeks)==2,"Available In Both",weeks="This week","Available In This Week",weeks="Previous Week","Available In Previous Week") | stats values(EventID) as EventIDs by status My Sample Search : | makeresults | eval _raw="week EventID This week 4624,4625,4627,4634,4647,4648,4656,4658,4661,4663,4664,4670,4672,4673,4674,4688,4689,4690,4692,4693,4698,100,102,103 Previous Week 4624,4625,4627,4634,4647,4648,4656,4658,4661,4663,4664,4670,4672,4673,4674,4688,4689,4690,4692,4693,4698,4702,4720,4722,4724,4725 " | multikv forceheader=1 | eval EventID=split(EventID,",") | mvexpand EventID | table week EventID | rename comment as "Upto now is for sample data only" | stats values(week) as weeks by EventID | eval status = case(mvcount(weeks)==2,"Available In Both",weeks="This week","Available In This Week",weeks="Previous Week","Available In Previous Week") | stats values(EventID) as EventIDs by status I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.

Posts	2660
Solutions	497
Karma Given	63
Karma Received	801
Member Since	‎09-23-2015

Online Status	Online
Date Last Visited	Wednesday

Why am I Receiving "A custom JavaScript error caus...

How can we delete particular data from KVStore usi...

How to restrict time range picker to specific peri...

Is there any way to send Splunk indexed Data to an...

Are there any limitations of search string length ...

Why am I getting an error to start a fresh Splunk ...

Why AppInspect tool Fails check_lookup_files check...

Got Error: "The splunk daemon (splunkd) is already...

How to add custom validation on Configuration Page...

How to change app banner css when open search in s...

Re: js for button on table cell

Re: js for button on table cell

Re: js for button on table cell

Re: Splunk query help - query for URL that have va...

Re: JavaScript Error on Dashboard Load

Re: How to use the JavaScript to send requests to ...

Re: How to use the JavaScript to send requests to ...

Re: Additional fields extraction from json data

Re: Javascript after upgrade Splunk 9.0.6

Re: Use eval field inside append search

Re: Info button

Re: Use Javascript Variable in Search Manager quer...

Re: Modify search result

Re: Info button

Re: How to Pass multiple values with each choice u...

Re: tableView.addCellRenderer not rendering on fir...

Re: tableView.addCellRenderer not rendering on fir...

Re: token inside radio button value does not work

Re: stats commands escape strings to html characte...

Re: How can we create Tabs using Link List in Splu...

Re: How can we create Tabs using Link List in Splu...

Re: User is not allowed to modify the job error

Re: Run makeresults command through REST API is gi...

Re: Checklist Table column with select Yes/No, but...

Re: Compare multivalues from different rows

Join the Conversation