Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About appleman
appleman
Contributor
Member since:
06-26-2013
06-05-2020
Community Statistics
| Posts | 122 |
| Solutions | 2 |
| Karma Given | 50 |
| Karma Received | 9 |
| Member Since | 06-26-2013 |
Activity Feed
- Karma Re: Search for non-matched values for Suda. 06-05-2020 12:47 AM
- Karma Re: Search for non-matched values for gfuente. 06-05-2020 12:47 AM
- Karma Re: Search for non-matched values for somesoni2. 06-05-2020 12:47 AM
- Karma Re: Search for non-matched values for Suda. 06-05-2020 12:47 AM
- Karma Re: How do you add additional sub search by check box on dashboard? for jeffland. 06-05-2020 12:47 AM
- Got Karma for Search for non-matched values. 06-05-2020 12:47 AM
- Got Karma for Search for non-matched values. 06-05-2020 12:47 AM
- Got Karma for Re: Search for non-matched values. 06-05-2020 12:47 AM
- Got Karma for How do you calculate the daily indexed events or volume on search head, not on license master?. 06-05-2020 12:47 AM
- Karma Re: How to make single value trend dashbaord? for bananaman. 06-05-2020 12:46 AM
- Karma Re: Drill down from pie chart for melonman. 06-05-2020 12:46 AM
- Karma Re: Edit csv file on splunk web for melonman. 06-05-2020 12:46 AM
- Karma Re: Edit csv file on splunk web for linu1988. 06-05-2020 12:46 AM
- Karma Re: search using join command for adityapavan18. 06-05-2020 12:46 AM
- Karma Re: search using join command for HiroshiSatoh. 06-05-2020 12:46 AM
- Karma Re: search using join command for melonman. 06-05-2020 12:46 AM
- Karma Re: How do I make transaction if the start_time and end_time fields has time value? for Ayn. 06-05-2020 12:46 AM
- Karma Re: Which column does it take for drilldown "click.value"? for melonman. 06-05-2020 12:46 AM
- Karma Re: Divide by quarter for somesoni2. 06-05-2020 12:46 AM
- Karma Re: How do I set drilldown if I want to set several pages to go? for gauldridge. 06-05-2020 12:46 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 2 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
12-23-2013
09:14 PM
index=test sourcetype=traffic | stats sum(A) as A sum(B) as B sum(C) as C sum(D) as D | transpose
上記の結果をtopコマンドで表示させると、ただ単に4分割されて、パーセンテージがすべて25%づつ表示されてしまいます。他の方法はございますでしょうか。
... View more
12-16-2013
08:06 PM
http://docs.splunk.com/Documentation/Splunk/6.0/SearchReference/Where
と
http://docs.splunk.com/Documentation/Splunk/6.0/SearchReference/CommonEvalFunctions
でいかがでしょ
... View more
12-11-2013
10:59 PM
もう一つ見つけました。
２つ目のサーチで、Single Valueとして引っ張ってくるフィールド名の指定が間違ってます。
optionのfield部分がcountになってますが、これをtotalに治す必要がありますな。
コードを見なおしてみてください。
... View more
12-12-2013
07:08 AM
I use the following in my javascript when using drilldown.
Not sure if this also applies to your scenario
value, value2, name, name2
... View more
12-11-2013
01:49 AM
strptime did work. Thank you!
... View more
12-11-2013
01:46 AM
So basically, I need to put the data in DB which I can connect with DB connect.... Thank you very much!
... View more
12-10-2013
08:34 PM
2 Karma
Maybe the following sample works for your case:
There is a pie chart in P1, and if you click pie chart, the value is passed to P2.
== pie1.xml
<form>
<label>pie1</label>
<description/>
<fieldset autoRun="true" submitButton="false">
<input type="time" searchWhenChanged="true">
<default/>
</input>
</fieldset>
<row>
<chart>
<title>pie</title>
<searchString>index=_* | top sourcetype</searchString>
<earliestTime>0</earliestTime>
<latestTime>now</latestTime>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.chart">pie</option>
<option name="charting.chart.nullValueMode">gaps</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">all</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.placement">right</option>
<drilldown>
<link>
<![CDATA[
/app/search/pie2?form.st=$click.value$
]]>
</link>
</drilldown>
</chart>
</row>
</form>
== pie2.xml
<form>
<label>pie2</label>
<description/>
<fieldset autoRun="true">
<input type="text" token="st">
<default>*</default>
</input>
</fieldset>
<row>
<chart>
<title>chart1</title>
<searchString>index=_* sourcetype=$st$ | timechart count by sourcetype</searchString>
<earliestTime>0</earliestTime>
<latestTime>now</latestTime>
</chart>
</row>
<row>
<event>
<title>raw</title>
<searchString>index=_* sourcetype=$st$ | head 10</searchString>
<earliestTime>0</earliestTime>
<latestTime>now</latestTime>
<option name="list.drilldown">full</option>
<option name="list.wrap">1</option>
<option name="maxLines">5</option>
<option name="raw.drilldown">full</option>
<option name="rowNumbers">0</option>
<option name="table.drilldown">1</option>
<option name="table.wrap">1</option>
<option name="type">list</option>
<fields>["host","source","sourcetype"]</fields>
</event>
</row>
</form>
... View more
12-06-2013
12:13 PM
I have converted mine comment as answer so that you can close the question.
... View more
12-10-2013
09:41 PM
Is it the same if I'm using SPlunk5?
... View more
12-10-2013
06:45 AM
ARr Cut&Paste do not work here..
sample post on my evernote on use checkbox on other app
https://www.evernote.com/shard/s202/sh/a8fc2f89-e1c6-4257-8a93-ec159b248c76/b709c8656a79289ee3bbc7bfc7b01e8c
... View more
11-24-2013
05:46 PM
I guess it's better to create summary index first to make your data smaller (summarize your data a bit) and search it again.
collect index = [summary]
... View more
12-10-2013
08:42 PM
1 Karma
this post should help 🙂
http://answers.splunk.com/answers/44618/export-link
... View more
10-10-2013
05:59 PM
私の構文もほぼ同じようなものなのですが、いまだになぜかエラーがでて、timerange picker以下のパネルが表示されません。。。。。
部分を取り除いても同じエラーはでております。
... View more
10-09-2013
06:21 PM
ご回答ありがとうございます。では、Search 2のほうが正確なマッピングのカウントと考えてよろしいでしょうか。
ちなみに、"geonormalize"を使用してサーチをしたのですが、結果がSearch 2と違う数字がでてきたのですが、この違いは何でしょうか。
... View more
10-09-2013
06:43 PM
1 Karma
Simple XMLのみではできませんが、以下のパーツのサンプルにUI制御がありますので、参考にしてみてください。
http://apps.splunk.com/app/1613/
インストールの際、Splunk6 であれば問題有りませんが、splunk5だとWeb Frameworkを別途Devサイトからダウンロードする必要があますので、Documentationを参考の上、挑戦してみてはいかがでしょうか。
＊基本的に、CSSやJavaScriptをいれていくことになります。
... View more
10-09-2013
06:46 PM
1 Karma
Simple XMLのみではできないと思いますが、JavaScriptをつかって上げれば大丈夫かと思います。
http://apps.splunk.com/app/1613/
上記のApp中に、UIの制御等のサンプルがありますので、ご参考にしてみてはいかがでしょうか。
... View more
- « Previous
-
- 1
- 2
- Next »
