Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About hiddenkirby
hiddenkirby
Contributor
Member since:
04-30-2010
06-05-2020
Community Statistics
| Posts | 109 |
| Solutions | 0 |
| Karma Given | 29 |
| Karma Received | 36 |
| Member Since | 04-30-2010 |
Activity Feed
- Karma Re: Can I create a new index using the REST API? for jkat54. 06-05-2020 12:51 AM
- Karma Re: Can I create a new index using the REST API? for jkat54. 06-05-2020 12:51 AM
- Karma Re: Can I create a new index using the REST API? for jkat54. 06-05-2020 12:51 AM
- Got Karma for Re: Can I create a new index using the REST API?. 06-05-2020 12:51 AM
- Got Karma for Can I create a new index using the REST API?. 06-05-2020 12:51 AM
- Karma Re: Why is the splunklib.client giving an error "ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)"? for mpalermo73. 06-05-2020 12:49 AM
- Karma Re: How to create index using REST API in a clustered environment? for MuS. 06-05-2020 12:48 AM
- Karma How to create index using REST API in a clustered environment? for dhavamanis. 06-05-2020 12:48 AM
- Karma Re: How to set an index dynamically for esix_splunk. 06-05-2020 12:48 AM
- Karma How to set an index dynamically for a212830. 06-05-2020 12:48 AM
- Karma Re: How do I get results for just yesterday? for martin_mueller. 06-05-2020 12:46 AM
- Karma How do I get results for just yesterday? for MichaelCohen829. 06-05-2020 12:46 AM
- Karma Re: conditional index and sourcetype name inputs.conf by file-naming-convention for southeringtonp. 06-05-2020 12:45 AM
- Karma Re: Is it possible to prepopulate search text via URL? for ziegfried. 06-05-2020 12:45 AM
- Karma Re: search help - stats of a count by that field... but in band ranges? for RicoSuave. 06-05-2020 12:45 AM
- Karma Re: how to find the earliest and latest event in an index? for ziegfried. 06-05-2020 12:45 AM
- Karma Re: how to find the earliest and latest event in an index? for Lowell. 06-05-2020 12:45 AM
- Karma Re: Splunk configuration changes - SIGHUP or restart? for Stephen_Sorkin. 06-05-2020 12:45 AM
- Karma Re: not indexing after cleaning eventdata for Stephen_Sorkin. 06-05-2020 12:45 AM
- Karma Afterglow application for bbear. 06-05-2020 12:45 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 2 | |||
| 1 | |||
| 2 | |||
| 3 | |||
| 1 |
05-21-2010
09:38 PM
or would i do something similar to this in props.conf [source::/Applications/splunk/var/spool/splunk]
TIME_PREFIX = \d{14}
... View more
05-21-2010
07:28 PM
I have a dir of text files named like such
scriptcalled_201005211317_stdout.txt
how do i index them on that date? I understand splunk already tries to pull the date from the source.. but if i can specify a regex i would prefer that... and i think it would be faster.
TIA,
... View more
- Tags:
- indexing
05-21-2010
04:02 PM
1 Karma
A clarification might be needed here.
When you pipe to mapit ... it kicks off a script that builds the home_threats_data.xml file.
Then you go back to the map dashboard.. and it will be populated using that home_threats_data.xml file.
You won't see any results in the search results area... it just shows the status of the script there.
You'll see instructions on how to make more maps on the howto page. But essentiall it just builds a static xml that the flash map runs off of.
Not sure if this helped.. but when i first ran it i thought mine crashed.. but it didn't.
... View more
05-19-2010
01:48 PM
i created my own dashboard.html 🙂 feels like a stupid question now.
... View more
05-17-2010
06:24 PM
I don't think the CSS thing is the way to go. Is there some template that i could put in my app that would add this globally? something i could add a div to?
... View more
05-17-2010
06:20 PM
it also seems to push down alignment. doing a #TitleBar_0_0_0:before will put it below the app header but doesn't show on every page ...
... View more
05-17-2010
06:10 PM
i'd like to add that this is an accessibility bad practice. http://stackoverflow.com/questions/2851410/persistant-header-of-text-css-in-a-div
If anyone knows of a better way .. please do tell.
... View more
05-17-2010
05:57 PM
1 Karma
IF one wanted to add static highlighted text to the top of every page in their app... how would they go about doing this?
You can't add content with CSS...
I would want some static text centered just above the appHeaderWrapper... across the app.
thoughts?
TIA,
Kirby
... View more
- Tags:
- splunk-web
- ui
- ui-dev
05-17-2010
01:48 PM
Unfortunately the table i built for the dashboard (that my client requested) ... needs the "values" command. I'll have to see if i can get creative and give him the information he needs in a different way. Do you foresee the ability to drill-in from a "values" command coming through in a future splunk version?
... View more
05-14-2010
07:27 PM
i posted a new question http://answers.splunk.com/questions/2555/drilldown-whilst-using-a-search-w-stats-values
... View more
05-14-2010
07:27 PM
So this stemmed from a previous question, but i figured it warranted a new question. (hey more points for everyone)
I can't quickly think of a better example but if you do a search like the following... and select a username ... i guess i would expect to have it append " user=selectedcelltext".
index="sample" | stats values(user)
This would be a common issue for anyone running dashboards and wanted to see all the results for that user or something.
thoughts?
... View more
05-14-2010
06:29 PM
I recreated it in the sample index. it looks like its related to the fact that the cell created is a stat value...
... View more
05-14-2010
06:03 PM
It also happens within the flashtimeline view. If i type in that query in the flashtimeline... and select a cell .. it opens a new window of the flashtimeline view with the root query (search string prior to the first pipe) ... again w/o the cell value selected.
... View more
05-14-2010
05:40 PM
When i select a cell in the table... it pushes entire hiddensearch search string with the tokens... instead of including the cell key=value. 😕
... View more
05-14-2010
05:39 PM
It's similar to 'index=summary_index val1=$val1token$ val2=$val2token | stats values(val1) as name1, values(val2) as name2 by name2 ... something to that extent. The dashboard is using an inverted flow ... form fields up top... click button... filter the resulting chart and graph below.
... View more
05-13-2010
06:14 PM
I am using a SimpleResultsTable -> ConvertToDrilldownSearch -> ViewRedirector just like most all the examples.
... View more
05-13-2010
05:32 PM
i do have the ui_examples. and i like your approach to troubleshooting. I'll adopt that. Thanks again for the assistance. You're everywhere!
... View more
05-13-2010
05:06 PM
You rock my friend. Keep up the great work. It is indeed appreciated. This is a great product.
... View more
05-13-2010
04:59 PM
I have a dashboard using some form fields/tokens to populate a few things(charts).(their "hiddenSearch" modules)
I have a HiddenSearch -> ... -> SimpleResultsTable ... with a param of drilldown=all. This hiddensearch is using tokens from the form above in its searchstring.
The goal is to have... when selecting a cell in the table have it open the flashtimeline with that kv pair in the search string... this is not happening. Instead it is just passing the HiddenSearch... searchstring. (sorry a bit cryptic)
Point is...No matter what cell/row/col i click on it sends the same searchstring(the one from the hiddensearch module) to the flashtimeline. Not the kv pair from the cell.
thoughts?
TIA,
Kirby
... View more
05-13-2010
03:30 PM
1 Karma
I also found the ui-examples app (downloadable from splunkbase) very useful in this regard.
I beleive the one specifically you are looking for is called "inverted flow panel defined search" under simplified xml.
unless im way off.
... View more
05-13-2010
03:08 PM
1 Karma
Any good documentation or examples on this? ive seen several questions/answers involving jquery helping modules do custom things.
I'd love to see the baby steps first.
i assume the custom.js and jquery library go in the appserver/static folder but im not sure how to hook into splunk with javascript.
am i close?
... View more
05-13-2010
03:02 PM
Simple as placing jquery.js and mycustom.js in the appserver/static folder? how does it tie into splunk's modules?
... View more
- « Previous
- Next »
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:02 AM
|
