Hi, I have a dashboard with a number of panels. One of the panels needs to output all events for an index under certain conditions like certain src, port, sourcetype, etc. The other panels in the dashboard uses base searches and outputs only counts. These panels work. However, the panel outputting the events uses a saved search and NEVER finishes, even when I change the time range to VERY small time ranges like 30 seconds. I need the panel's search to complete as the stakeholder wants to export the panel's results.. The following is the slow panel on the Dashboard: And here is the respective Saved Search: Can you please help?  Thank you, Patrick ... View more

Hi, The search on one of my dashboard panel is outputting log events ..... BUT it is still processing the search, even when I change the time range to just 1 minute or even 30 seconds. Is there any way I can get the search to complete as I need the option to export the panel's events to be available?   Thanks, Patrick ... View more

Hey, In a dashboard, I need a panel where it gives the user an option to download EVERY field of a specific index. Now, this index has over 100 fields. Can I use the Events Panel on the dashboard to show all the fields (admittedly a small view due to the volume of the fields) and then the user can export the respective results from the given panel? Many thanks, Patrick ... View more

Hey, Is it possible to export every field from a Splunk Search via a Dashboard? Thanks, Patrick ... View more

Hi, I am unable to create a timechart for specific field value aggregations. I have one field with 4 possible values. One timechart needs to be the total number across all 4 values and the second timechart meeds to be the total over 2 field values. The only thing on the legend should be TOTAL from the timechart. Here is what my timechart and XML code currently looks like: And Can you please help? Thanks, Patrick ... View more

Hi, I have a dashboard and I need to be able to have an option to export the actual log entries from a dashboard. The dashboard in question performs a number of aggregations and the export option I currently have just exports these aggregation results. What I actually need is an export of the corresponding events/ log entries of these aggregation results. Like one of the aggregations on the dashboard is a count of the number of firewalls on a each host. How can I export all the respective log entries for those specific firewalls on that host? At the moment, I can get these logs when I perform a search but I need the option on the actual dashboard to export these logs? Can you please help? Many thanks, Patrick   ... View more

Hi, How can I enable the export functionality on my panels? These panels are using a base search and I am struggling with using a savedsearch with the multiple tokens the panel uses. ... View more

Hi, I have created a dashboard to filter firewall statuses. One of the inputs I need is a checkbox to eliminate duplicates based on host, source IP, destination IP and destination port.  However, the checkbox input is not working and every time the use checks and unchecks the box, it has no effect on the dashboard. The following is my dashboard and the XML code, respectively: Can you please help? Thank you! ... View more

Hi, I am relatively new to creating forms in Splunk. At the moment, I am creating a form which contains a radio button called "Dedup". The function of this radio button is is to remove all duplicate events which are identical with respect to sourcetype, source IP, dest IP, and dest port. Furthermore, the radio button should be empty by default. At the moment, the radio button is simply greyed out on the UI. I am unsure whether I need to extend the base search already defined on the form? Can you please help? Attached is an image of the XML code and the UI output. ... View more