ok so i have a drilldown so in this table there is a field solved which have default value 0 which means this particular severity is not solved . Now i want a button instead of 0 .like this now whenever a severity is being solved then when we click on this button it should change like this and this specific result  its value (solve field ) should be changed to 1. this is JS i am using but it is not working. plus ye script thi jo mai use kar raha hun   require([     'splunkjs/mvc/tableview',     'splunkjs/mvc/searchmanager',     'splunkjs/mvc',     'underscore',     'splunkjs/mvc/simplexml/ready!' ], function(     TableView,     SearchManager,     mvc,     _ ) {     var CustomLinkRenderer = TableView.BaseCellRenderer.extend({         canRender: function(cell) {             return cell.field === 'solved';         },           render: function($td, cell) {             var solved = cell.value;             var rowKey = cell.data.row.rowKey;               var icon = $('<a>')                 .attr("href", "#")                 .attr("title", "Mark as Solved")                 .css({                     "cursor": "pointer",                     "text-align": "center",                     "display": "inline-block",                     "width": "100%"                 });               icon.html('<i class="icon ' + (solved === "1" ? 'icon-check-circle' : 'icon-minus-circle') + '"></i>');               icon.on("click", function(e) {                 e.preventDefault();                   var $icon = $(this).find('i');                   // Only run update if not already solved                 if (solved === "1") {                     return; // Already marked as solved                 }                   $icon.removeClass("icon-minus-circle").addClass("icon-gear");                   var updateSearch = `                     | inputlookup sbc_major.csv                     | eval rowKey=tostring(rowKey)                     | eval match=if(rowKey="${rowKey}", "1", "0")                     | eval solved=if(match="1", "1", solved)                     | fields - match                     | outputlookup sbc_major.csv                 `;                   var updateManager = new SearchManager({                     id: "update-solved-" + _.uniqueId(),                     preview: false,                     cache: false,                     search: updateSearch                 });                   updateManager.on("search:done", function() {                     $icon.removeClass("icon-gear").addClass("icon-check-circle");                 });             });               $td.empty().append(icon);         }     });       var tableElement = mvc.Components.getInstance("sbc_alarm_table");     tableElement.getVisualization(function(tableView) {         tableView.table.addCellRenderer(new CustomLinkRenderer());         tableView.table.render();     }); });         ... View more

i want to implement it using JS is it possible? ... View more

result is coming but the ones with similar names are not coming . where in  dns field similar fields are not coming. ... View more

After running the search the "Company Code " field is empty ... View more

Oh yes , sorry I gave wrong search . This is the seach | inputlookup lkp-all-findings | lookup lkp-findings-blacklist.csv blfinding as finding OUTPUTNEW blfinding | lookup lkp-asset-list-master "IP Adresse" as ip OUTPUTNEW Asset_Gruppe Scan-Company Scanner Scan-Location Location "DNS Name" as dns_name Betriebssystem as "Operation System" | lookup lkp-GlobalIpRange.csv 3-Letter-Code as Location OUTPUTNEW "Company Code" | eval is_solved=if(lastchecked>lastfound OR lastchecked == 1,1,0),blacklisted=if(isnull(blfinding),0,1),timeval=strftime(lastchecked,"%Y-%m-%d") | fillnull value="NA" "Company Code", Scan-Location | search is_solved=0 blacklisted=0 Scan-Location="*" "Company Code"="*" severity="high" | fields "Company Code" timeval ip dns "Operation System" severity pluginname timeval Scan-Location is_solved blacklisted | sort severity ... View more

i am getting this error on health check Root Cause(s): Events from tracker.log have not been seen for the last 238401 seconds, which is more than the red threshold (210 seconds). This typically occurs when indexing or forwarding are falling behind or are blocked.     ... View more

is there a possibility to this using index? ... View more

when i am running this search it is giving 16GB as total_GB while our total size is 16Tb. ... View more

so after running this query i am not able to see 1 indexer . How can i resolve it. ... View more

Could you please tell me how to restore admin? ... View more

every command is giving results thats not the problem , problem the macro which is used in this search when i am searching this macro it is giving me no result.   ... View more

so i removed this stanza from default.meta file [savedsearches] owner = admin and it started working how ? ... View more