Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About anooshac
anooshac
Communicator
Member since:
11-26-2019
03-19-2025
Community Statistics
| Posts | 306 |
| Solutions | 2 |
| Karma Given | 10 |
| Karma Received | 1 |
| Member Since | 11-26-2019 |
Activity Feed
- Posted Re: How to download the result of a search in csv using rest api or curl command? on Dashboards & Visualizations. 02-20-2025 09:42 PM
- Posted Re: How to download the result of a search in csv using rest api or curl command? on Dashboards & Visualizations. 02-20-2025 02:35 AM
- Posted How to download the result of a search in csv using rest api or curl command? on Dashboards & Visualizations. 02-19-2025 07:40 PM
- Posted timechart count and stats count are not matching on Splunk Search. 12-19-2024 10:04 PM
- Tagged timechart count and stats count are not matching on Splunk Search. 12-19-2024 10:04 PM
- Posted Re: how to color a column with custome value? on Dashboards & Visualizations. 12-11-2024 08:30 PM
- Posted how to color a column with custome value? on Dashboards & Visualizations. 12-11-2024 07:47 PM
- Posted Combine 2 events by a matching field without using join. on Dashboards & Visualizations. 12-02-2024 04:11 AM
- Posted Re: Find the difference between 2 tables. on Dashboards & Visualizations. 11-22-2024 02:31 AM
- Posted Find the difference between 2 tables. on Dashboards & Visualizations. 11-22-2024 02:15 AM
- Posted Re: How to calculate the count of a field for multivalued data? on Dashboards & Visualizations. 10-15-2024 08:49 PM
- Posted How to calculate the count of a field for multivalued data? on Dashboards & Visualizations. 10-15-2024 03:25 AM
- Posted Re: Create a table with Json data on Dashboards & Visualizations. 10-07-2024 04:19 AM
- Posted Re: Create a table with Json data on Dashboards & Visualizations. 10-07-2024 04:02 AM
- Posted Re: Create a table with Json data on Dashboards & Visualizations. 10-07-2024 03:30 AM
- Posted Create a table with Json data on Dashboards & Visualizations. 10-07-2024 02:51 AM
- Posted Re: Macro not working while used in dashboard, while it is working in search bar. on Splunk Search. 09-19-2024 03:22 AM
- Posted Re: Macro not working while used in dashboard, while it is working in search bar. on Splunk Search. 09-18-2024 11:01 PM
- Posted Macro not working while used in dashboard, while it is working in search bar. on Splunk Search. 09-18-2024 10:09 PM
- Posted Re: what is the alternative command to use for mvzip? on Dashboards & Visualizations. 09-17-2024 09:43 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-06-2023
07:41 AM
hi @gcusello , still i am not able to extract.
... View more
09-06-2023
06:51 AM
hi @gcusello , I am not able to get the path \xyz\abc.h using this regex..
... View more
09-06-2023
06:03 AM
Hi @gcusello , Thanks for the response.. I don't want to extract the first 4 folders.. I want to skip them and extract the rest of the path.. I was finding hard writing a regex.. How can i do this?
... View more
09-06-2023
02:55 AM
Hi Everyone, I have to extract a file path from a path. The path will be in the format C:\a\b\c\abc\xyz\abc.h. I want to skip first 4 folders. That is in this example i want to extract \abc\xyz\abc.h. How can i dot it using regex?
... View more
Labels
- Labels:
-
chart
-
simple XML
09-05-2023
12:38 AM
Hi @bowesmana the data comes from Splunk index and it is csv file
... View more
09-04-2023
11:24 PM
Hi @bowesmana , the method you mentioned is working fine.. Sorry for not mentioning before, the column VALUE can have data like {'a','b'} or a. In such cases how can i change the regex?
... View more
09-04-2023
10:56 PM
Should the csv file uploaded as lookup file? Can we avoid that? Also the strings can contain _ as well as they can be capital letters and small letters.. how can i do this? This [A-Za-z_] regular expression is fine?
... View more
09-04-2023
10:12 PM
I have a CSV file which has a some columns. There is one column named GROUP and the data in that column are in the format {'a':1,'b':2}, there can be any number of strings. There is another column VALUE and the data are in the format {'a','b'}. I want to check if the strings in VALUE column are present in GROUP column and create a separate column named DATA with the strings not present. I am not sure how to achieve it in Splunk using commands. Can anyone have any suggestions? Example: Group Value Data {'a':'1','b':'2'} {'a','b'} {'a':1,'b':'2'} {'a'} {'b'} {'a':1,'b':'2','c':'3'} {'a'} {'b','c'} There are many columns like these and strings present in GROUP column can be more.
... View more
Labels
- Labels:
-
chart
-
simple XML
08-29-2023
10:18 PM
Hi Everyone,
Is it possible to create a button similar to edit button and place it near edit button using html and css?
I was able to create a button, but it is big and also i was not able to place it near edit button.
can anyone help me?
... View more
07-10-2023
09:50 PM
@VatsalJagani,Yeah Sure. I had one more doubt. Is it possible to export only the tables present in the dashboard? Will it be possible using rest api or javascript?
... View more
07-03-2023
01:04 AM
Hi @VatsalJagani , Thanks for the input. Is it going to be a big task which requires so much effort? Also how can i use those apps? does this require any change in the Splunk settings side? Thank you..
... View more
06-27-2023
10:47 PM
Hi Everyone,
I have a dashboard which has pie chart , table and line chart etc. I want create a button so that i can export the dashboard as pdf with the content only i want. For example i want to remove the drop downs and i want alter the font size etc. I know that this is not possible directly in Splunk. Is it possible using JavaScript. I m trying out JavaScript for the first time and need some inputs. How can i achieve this?
thanks in advance.
... View more
Labels
- Labels:
-
CSS
-
javascript
-
simple XML
06-14-2023
08:51 PM
This is such nice way! The results won't be affected by this calculation right?
... View more
06-14-2023
05:19 AM
Hi All,
i have created a bar chart using stats Count by ID. I have a field "status" in my data. Is it possible to add this status along with ID in the axis of the bar chart. I want my label field to be ID(status). ID and status both are varying data. Is it possible to do in Splunk anyhow?
... View more
Labels
- Labels:
-
chart
-
simple XML
06-14-2023
03:46 AM
Thank you so much @ITWhisperer , It is working.
... View more
06-12-2023
01:00 AM
@ITWhisperer, But if i don't do that the table comes as empty. Is there any other way to do this?
... View more
06-12-2023
12:06 AM
@ITWhisperer, Thank you so much it is working.. I was also creating another table for the data, NAME ITEM_ID FILE abc 2782508 file1 abc 2782508 file2 abc 2782508 file1 abc 2782508 file3 xyz 2811478 file2 using the below query, myindex...| mvexpand COMPONENTS{}.NAME
|mvexpand COMPONENTS{}.Tasks{}.ITEM{}
|rename COMPONENTS{}.NAMEas NAME COMPONENTS{}.Tasks{}.ITEM{}.ITEM_ID as ITEM_ID COMPONENTS{}.Tasks{}.ITEM{}.FILE as FILE | eval x=mvzip(ITEM_ID,FILE)|mvexpand x| eval ITEM_ID=mvindex(split(x,","),0)| eval FILE=mvindex(split(x,","),1)
| table NAME, ITEM_ID FILE instead of 5 entries i am getting 10 entries. I am not sure what is the mistake here. Can you please tell if there is any?
... View more
06-08-2023
03:17 AM
hi @ITWhisperer {
"NUM": "#7",
"TIME": "May 23, 2022, 09:24:40 PM",
"STATUS": "SUCCESS",
"DURATION": "2 hours, 13 minutes",
"URL": "abc.com",
"COMPONENTS": [{
"NAME": "abc",
"Tasks": [{
"ITEM": [{
"ITEM_ID": "2782508",
"FILE": "file1"
},
{
"ITEM_ID ": "2782508 ",
"FILE": "file2"
},
{
"ITEM_ID": "2782508",
"FILE": "file1"
},
{
"ITEM_ID": "2782508",
"FILE": "file3"
}
]
}]
},
{
"NAME": "xyz",
"tasks": [{
"ITEM": [{
"ITEM_ID": "2811478",
"FILE": "file2"
}]
}]
}
]
} this is the correct JSON file and the table required is, NUM STATUS TIME DURATION NAME ITEM_ID FILE #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file1 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file2 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file1 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file3 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes xyz 2811478 file2 and also i have individual JSON file for "NUM".
... View more
06-08-2023
02:02 AM
Hi @gcusello , this is how the resutls should come. And also i have individual JSON file for each "NUM" . NUM STATUS TIME DURATION NAME ITEM_ID FILE #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file1 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file2 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file1 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file3 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes xyz 2811478 file2
... View more
06-08-2023
02:00 AM
@ITWhisperer,The same search which yo have provided gives me this results. the desired output should be , sorry for not mentioning clearly. NUM STATUS TIME DURATION NAME ITEM_ID FILE #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file1 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file2 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file1 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes abc 2782508 file3 #7 SUCCESS May 23, 2022, 09:24:40 PM 2 hours, 13 minutes xyz 2811478 file2
... View more
06-08-2023
01:35 AM
@ITWhispererthere are individual file for all the "NUM". Will that be a problem for this? I am getting as no results found. Only events are shown.
... View more
06-08-2023
01:31 AM
HI @gcusello ,This gives data in a single row. I want the data in different rows.
... View more
06-07-2023
11:25 PM
tried this and im not getting a table, only events are showing.
... View more
06-07-2023
10:24 PM
Hi all, i have a json file like this
{
"NUM": "#7",
"TIME": "May 23, 2022, 09:24:40 PM",
"STATUS": "SUCCESS",
"DURATION": "2 hours, 13 minutes",
"URL": "abc.com",
"COMPONENTS": [{
"NAME": "abc",
"Tasks": [{
"ITEM": [{
"ITEM_ID": "2782508",
"FILE": "file1"
},
{
WORKITEM_ID": "2782508",
"FILE": "file2"
},
{
"ITEM_ID": "2782508",
"FILE": "file1"
},
{
"ITEM_ID": "2782508",
"FILE": "file3"
}
]
}]
},
{
"NAME": "xyz",
"tasks": [{
"ITEM": [{
"ITEM_ID": "2811478",
"FILE": "file2"
}]
}]
}
]
}
how can i create a table with columns "num time status duration component_name itemid file". How can i make all the values come in different rows not together.
... View more
- Tags:
- data
- extraction
- json
03-29-2023
11:39 PM
Hi @kamlesh_vaghela {
"Info": {
"Unit": "ABC",
"Project": "XYZ",
"Analysis Summary": {
"DB1": {
"Available": 1088,
"Used": 173.23,
"Used(%)": 15.92,
"Status": "OK"
},
"DB2": {
"Available": 4096,
"Used": 1591.85,
"Used(%)": 38.86,
"Status": "OK"
},
"DB3": {
"Available": 128,
"Used(%)": 2.6,
"Status": "OK"
},
"DB4": {
"Available": 16500,
"Used": 6696.0,
"Used(%)": 40.58,
"Status": "OK"
},
"DB5": {
"Available": 22000,
"Used": 9800.0,
"Used(%)": 44.55,
"Status": "OK"
}
}
}
} This is the data.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-19-2025
02:12 AM
|
