Is there a way to create a report similar to a stacked bar timechart using the pivot model? ... View more

I am getting this error on some data I am trying to push into a Teradata database: command="dboutput", Unexpected error while performing dboutput: java.lang.NullPointerException This is a little confusing, mostly because when I do a search of the data without the | dboutput command there are not any NULL fields. This is the Log 2014-04-04 17:42:02.188 dbx8261:ERROR:SQLInsertHandler - Error occurred while performing database output: java.lang.NullPointerException java.lang.NullPointerException 2014-04-04 17:42:02.188 dbx8261:INFO:Database - Rolling back changes... 2014-04-04 17:42:02.434 dbx8261:ERROR:DatabaseOutputCommand - Error while executing command: Unexpected error while performing dboutput: java.lang.NullPointerException 2014-04-04 17:42:02.434 dbx8261:INFO:BridgeSession - Execution finished in duration=3640 ms with status=0 2014-04-04 17:42:02.435 dbx8261:INFO:ExecutionContext - Execution finished in duration=3642 ms Is there anything I can do to get more information on this error? I have JDK 1.7 u51 installed on the server. Additionally, I have 16GB dedicated to the JVM. ... View more

I am trying to drilldown to another view and pass 2 variables in the process. This is what it looks like in Advanced XML (Sideview Utils) and it works: <module name="Redirector"> <param name="url">capsule_ad_floor_drill</param> <param name="arg.fact_facility_desc">$fact_facility_desc$</param> <param name="arg.patient_location_mnemonic">$click.value$</param> </module> My interperation of it in Simple XML: <drilldown> <link> <![CDATA[ /app/hca_capsule_web/capsule_adoption_unit?form.fact_facility_desc=$fact_facility_desc$&patient_location_mnemonic=$row.Nursing Unit$ ]]> </link> </drilldown> This seems to be working correctly, based on what I see in the next screen's URL: app/hca_capsule_web/capsule_adoption_unit?form.fact_facility_desc=Alaska%20Regional%20Hospital&patient_location_mnemonic=L.ORT&earliest=-1d%40d&latest=%40d So I assume the problem is with the target view... Below is the code. It populates a Facility, just not the location. Any ideas? <fieldset autoRun="true" submitButton="false"> <input type="time" searchWhenChanged="true"> <label>Select a Time Range:</label> <default>Yesterday</default> </input> <input type="dropdown" token="fact_facility_desc" searchWhenChanged="true"> <label>Select a Facility</label> <populatingSearch fieldForValue="fact_facility_desc" fieldForLabel="Facility"> <![CDATA[| `new_get_facility_list` | `capsule_eval_facility` | sort Facility ]]> </populatingSearch> </input> <input type="dropdown" token="patient_location_mnemonic" searchWhenChanged="true"> <label>Select a Nursing Unit</label> <populatingSearch fieldForValue="patient_location_mnemonic" fieldForLabel="patient_location_mnemonic"> <![CDATA[| `capsule_unit_include_inputlookup($fact_facility_desc$)` ]]> </populatingSearch> </input> </fieldset> ... View more

I am using Splunk DB Connect to push data into a Teradata database, the limitation of the ODBC driver is that is can only handle 64K bytes of data in a single field... which on this data set (HL7) is fairly common. Is there a command I can use in Splunk to strip out the remaining data so this will not fail? I was thinking SED but I do not know how to set that up for bytes... ... View more

I need to output 65 Million rows to a database table, I see the default per transaction is 50K. Is there a good way to do this? ... View more

I am setting up a database connection to Teradata with the DBX app. I need to insert data from Splunk into this database for tracking purposes. I setup the Teradata database type in Splunk and things seem to be working correctly from a connection standpoint. How do I do an insert into this database? Is it as simple as writing the SQL or do I have to do something special in Splunk? ... View more

I am monitoring several BizTalk\MSMQ perfmon counters (Host Counters, General Counters, MSMQ Queue, MSMQ Service). I have setup field extraction based on the header row of this file, and it is garbage! For the General Counters, I was able to setup a transform in the props.conf to rip out the header and setup field extraction via KV because the column names never change. For the other 3, that is not the case. Is there a way to setup some sort of regular expression to dynamically extract field names based on the header row? Example: "\\hostname\BizTalk:Message Box:Host Counters(HOST_COUNTER_NAME:biztalkmsgboxdb:HOSTNAME.test.test.net,56219)\Host Queue - Number of INSTANCES" Becomes -> host_counter_name_instances I have CAPITALIZED the location of the identifiers I need in the default header. ... View more