Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About sravankaripe
sravankaripe
Communicator
Member since:
06-23-2016
09-24-2021
Community Statistics
| Posts | 191 |
| Solutions | 3 |
| Karma Given | 0 |
| Karma Received | 9 |
| Member Since | 06-23-2016 |
Activity Feed
- Got Karma for Could someone help me with this error in splunk DBX?. 10-15-2023 08:50 AM
- Posted Re: format my successRate query into a week over week comparison on Splunk Search. 05-06-2021 01:01 PM
- Posted Re: token on Dashboards & Visualizations. 05-06-2021 12:59 PM
- Posted Re: format my successRate query into a week over week comparison on Splunk Search. 05-06-2021 12:52 PM
- Posted Re: Drilldown options only include link to url on Dashboards & Visualizations. 05-05-2021 02:40 PM
- Posted Re: Alerting when a remote device shows zero bytes_seen at two different collectors for same remote device on Alerting. 05-05-2021 02:33 PM
- Got Karma for Re: measuring overall success rate based off two transactions present in logs, but want to group results by a field. 05-05-2021 02:05 PM
- Posted Re: search help on Splunk Search. 05-05-2021 02:00 PM
- Posted Re: measuring overall success rate based off two transactions present in logs, but want to group results by a field on Splunk Search. 05-05-2021 01:51 PM
- Posted Re: measuring overall success rate based off two transactions present in logs, but want to group results by a field on Splunk Search. 05-05-2021 01:30 PM
- Posted Re: rex -> spath -> field extract not working? on Splunk Search. 05-05-2021 01:28 PM
- Posted Re: Field diff search on Splunk Search. 05-05-2021 01:18 PM
- Posted Re: Wildcard search on non-existent field search on Splunk Search. 05-05-2021 01:10 PM
- Posted Re: Time token for date range and and relative time previous week on Dashboards & Visualizations. 05-05-2021 01:08 PM
- Posted Could someone help me with this error in splunk DBX? on Splunk Enterprise. 05-05-2021 12:00 PM
- Posted below drilldown match contain is not working on Dashboards & Visualizations. 08-13-2020 01:57 PM
- Posted could someone help me with Drilldown option on Dashboards & Visualizations. 08-13-2020 11:19 AM
- Posted how can I move my dashboard to another tab in Splunk app on Splunk Dev. 08-10-2020 12:39 PM
- Posted issue with dividing two numbers on Splunk Search. 08-10-2020 09:31 AM
- Posted i am seeing this error when i connected to Splunk DB connect could any one help with this on Splunk Enterprise. 07-24-2020 08:27 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
05-12-2017
11:40 AM
<input type="radio" token="period_tok">
<label>Select a time range</label>
<choice value="-24h@h">Last 24 Hours</choice>
<choice value="-7d@h">Last 7 Days</choice>
<choice value="-30d@h">Last 30 Days</choice>
<default>Last 24 Hours</default>
<!-- set condition based on the label defined by <choice> -->
<!-- Within each condition, specify a custom label for display -->
<!-- Capture the selected value in the token, earliest_tok -->
<change>
<condition label="Last 24 Hours">
<set token="date_label">Yesterday</set>
<set token="earliest_tok">$value$</set>
</condition>
<condition label="Last 7 Days">
<set token="date_label">Last week</set>
<set token="earliest_tok">$value$</set>
</condition>
<condition label="Last 30 Days">
<set token="date_label">Last month</set>
<set token="earliest_tok">$value$</set>
</condition>
</change>
</input>
... View more
05-12-2017
10:33 AM
index=ABC sourcetype=xyz | stats count by XID| table XID count
XID Count
101 2
102 3
103 4
index=ABC sourcetype=pqr | table MyID Name
MyID Name
101 jhgkjmhgku
102 jhkfythhgkk
103 kiugikyukhy
How to join this to get result.
MyID Name count
101 jhgkjmhgku 2
102 jhkfythhgkk 3
103 kiugikyukhy 4
... View more
05-10-2017
07:27 AM
Hi,
Pie Chart is not displaying all the value (where i have 11 values)
Pie chart is displaying "other" When the count of Statistics>10.
i want to diplay all the values in pie chart.
Please help me with this.
... View more
- Tags:
- help
- pie
- splunk-cloud
05-05-2017
10:21 AM
Yes,i am using time picker input
field1.earliest
field1.latest
... View more
05-05-2017
10:12 AM
i want to display earliest and latest time ranges in
mm/dd/yy hh:mm:ss format as a dynamic title to a panel
... View more
05-05-2017
07:48 AM
i want display the date range in a dashboard. please help me in doing this?
... View more
Labels
- Labels:
-
Dashboard Studio
05-04-2017
10:29 AM
No, its not working
i am got search result like this
Status: 200\nCount : 10
Status: 302\nCount : 20
... View more
05-04-2017
08:42 AM
----------------------| stats count by status | eval status=" Status: ".status.", Count : ".count|makemv delim="," status
in above pie chart it showing
Status: 200, Count: 10
---------------------------
Status: 400 Count: 20
---------------------------
i want to display it as
Status: 200
Count: 10
---------------------------
Status: 400
Count: 20
---------------------------
please help me with this
... View more
- Tags:
- pie
- search-help
05-04-2017
07:33 AM
-------------------------------------| stats count by status | eval status=" Status: ".status.", Count : ".count | fields status
the search result is like this
status
----------
Status: 200, Count: 10
--------------------------------
Status: 400 Count: 20
--------------------------------
But i need to display like this...
----------
Status: 200
Count: 10
----------
Status: 400
Count: 20
Please help me with this use case
... View more
05-04-2017
06:53 AM
thanks its working
... View more
05-03-2017
01:29 PM
05-02-2017
10:14 AM
thanks it working
... View more
05-02-2017
08:57 AM
Hi,
I have a dashboard with 10 panels in it.
i want to refresh specific panels in this dashboard
i even tried
but it is not working
can anyone help me to resolve this.
... View more
04-28-2017
07:23 AM
how can we add custom vertical scrollbar for a panels in a dashboard ?
we have pre-existing horizontal scrollbar
similarly i want vertical scrollbar how can i do it?
... View more
04-27-2017
11:01 AM
--------| transaction UserName |dedup ID| table UserName ID
UserName ID
abc 100
..... 103
Abc 101
xyz 200
Xyz 201
i want to group it by userName where abc and Abc are same user
... View more
04-25-2017
09:10 AM
index=oracle (INSTANCE_NAME="01" OR INSTANCE_NAME="02" OR INSTANCE_NAME="03") NOT [search index=oracle (INSTANCE_NAME="01" OR INSTANCE_NAME="02" OR INSTANCE_NAME="03")
| transaction SESSIONID maxspan=2m startswith=(ACT_NAME="LOGON") endswith=(ACT_NAME="LOGOFF BY CLEANUP")
| where eventcount = 2 | return 1000 $SESSIONID]
... View more
04-25-2017
08:54 AM
Is there any App which can run my dashboards in real time so that I can display it on a TV/projector?
my dashboard should refresh every time, it should not be static all the time.
... View more
04-25-2017
08:30 AM
How to write a cron schedule to execute a search everyday at 9:30am CST in reports ?
... View more
04-21-2017
05:00 PM
Is there any option other than transaction command to measure the time between events? because i am already using transaction command to group other events by ID.
... View more
04-21-2017
06:35 AM
Input type is Dropdown.
this dropdown should have two tokens.
1st token will go to first panel (say index= abc sourcetype=abc:abc $token1$)
2nd token will goes to second panel in the same dashboard.(say index=xyz sourcetype=xyz:xyz $token2$)
... View more
04-20-2017
02:24 PM
i have a use can pass two tokens by using one input type. how can we achieve this.
Please help me with sample Xml code
... View more
04-20-2017
10:34 AM
i want to retrive
BLOCKED_PARENT (This item is blocked because its parent cannot syndicate.) message from the below raw event. Please help me with this.
SC TYPE: BLOCKED_PARENT (This item is blocked because its parent cannot syndicate.)n*SC*
... View more
- Tags:
- rex
- splunk-enterprise
