In the QueryString (url) it says https://na2.salesforce.com/_nc_external/identity/saml/SamlError?ErrorCode=23&ErrorDescription=Invalid+contact Login Error Your login attempt using single sign-on with an identity provider certificate has failed. Please contact your salesforce.com administrator for more information. Apparently it cannot find my contact within salesforce. ... View more

I'm getting the following spammed hundreds of thousands of time in my log splunkd.log file ERROR ProcessDispatchedSearch - PROCESS_SEARCH - Error opening C:\Program Files\Splunk\var\run\splunk\dispatch\{insertDirectoryNameHere}\search.log: The operation completed successfully. This is causing my indexer to become congested and frozen. Attempts to restart splunk fail and when running 'splunk restart' on the server says that port 8090 is in use and it will not allow me to start splunk back up. Restarting the machine brings the indexes back to life however this does not last long when using splunk and looking at dashboards etc. Splunk is running on a VM with Windows server 2008 R2 ... View more

I found a way to make it so that at anytime on my dashboard it can be switched to show results by toggling the drilldownRedirect on the chartview. The only issue I am having with the drilldownRedirect is that it redirects instead of opening another window. If the dashboard would save it's previous dropdown values etc then this would be no issue, but the user must click the dropdowns that they previously had selected (to set the token values) It would be nice if either going back would preserve the dashboard state or if the drilldownRedirect would open a new search window or tab. ... View more

Is it possible to use a splunk token as a boolean? For example, I have a chart that I would like to toggle between using my custom drilldown and showing the search results( because apparently there is no "view results" link at the bottom of the web framework charts). I have a dropdown that has "True" and "False" in it along with a chart as below. When setting drilldownRedirect="False" it redirects anyway, however drilldownRedirect=False works fine, which is why the below chart setup fails. {% chart id="volumeby-timechart" managerid="user-search" drilldown="all" drilldownRedirect="$drilldown$" |token_safe resizable=True preview=True type="bar" %} I would think that this functionality would be very helpful as you could set other True/False variables as well with tokens. Does anyone have a workaround for this? ... View more

Here is my query: "TSStart"="2013-10-14T18:35:03.487" | eval MyTime=strptime(TSStart,"%Y-%m-%dT%T") My Time Format for start time is in the format as above: 2013-10-14T18:35:03.487 The goal of this is to show the datetime in a format that is more readable, I want to first attempt to parse it into a timestamp format. This is not the same field I am using for my Timestamp value as there is also a TSEnd within the data that I will need to format. My query is not coming back with anything for "MyTime" and not throwing any errors in the logs. Is my date format string incorrect? I have tried several variations and cannot get this to work. ... View more