Hi guys, What i am trying to do is to call a savedsearch from an advanced XML file for GoogleMaps But due to some reason, the savedsearch doesn't get loaded. Am i missing something here? Please help. Thanks!! <?xml version="1.0"?> Google Maps * False 1 500px off splunk,roadmap,terrain,satellite roadmap true clusters m 0.75 0, 100, 500, 1000, 10000 true <!-- changes by Alen Starts --> | savedsearch Denial_GMap -1y False row results <!-- changes by Alen Ends flashtimeline layoutPanel="panel_row1_col1" autoRun="True" --> ... View more

Hi, I am getting this error while trying to drilldown. How do i escape this issue as i need to use RangeMap. This is the code i am using: sourcetype="Log1" | join type=inner UsrName [SEARCH sourcetype="Log2"] | rangemap field=count green=0-4 blue=5-20 red=21-50 default=red Please Help. Thanks! ... View more

HI, I have created a splunk app, but now i want to connect to MySQL. how is this possible? Is there any MySQL Add On which i can use for my App? P.S: I have installed MySQL Connector App for Splunk, but in this case the query has to be executed in the MySQL App. ... View more

Hi, I have 2 searches results which i have saved as charts. Now i wanna call both of them together to be displayed as one. Is this possible? Need help. Thanks!! ... View more

Hi All, I am trying to load a .csv file into splunk, using sourcetype(csv). Upload of data is working fine but the only issue if i change the data in this .csv file, new data get appended to the old data. what i need is to replace the old with new. Example: if i have 4 lines in the csv initially & if i delete one of its line and add 2 new lines. My new csv data should contain only 4 lines. Right now when i am doing this, i am getting 9 lines(4-Old & 5-New) of data. Please help me with the configurations. ... View more

Hi All, I am trying to join data from a sourcetype in Splunk with data from MySQL. I am using Splunk-MySQL Connector, but i am not able to get to the correct syntax. My sourceType is called "Radius" and the table in MySQL is called "Cust_det" Now the common field between them is IP_Address, therefore i can have a join to get all the rows in the sourcetype(Radius) having a similar IP_Address in the table. Could anyone help me out with the syntax for the query. Thanks!! ... View more

Hi All, I am trying to join a log file(sourceType) which is present in Splunk with data from a table in MySQL through Splunk-MySQL Connector. I found some few examples online on the type of queries, like these ones: 1. | mysqlquery spec=MyDB query="show tables;" 2. | mysqlquery spec=MyDb query="SELECT * FROM MyTable;" 3. sourcetype=access_* [ mysqlquery spec=MyDb query="SELECT customer_id WHERE purchased_item=rocking_chair" ] But i am getting a error while using all these. Its says "(1049, u"Unknown database 'splunk'")" My log file is called "Radius log" and table in MySQL is called "Cust_det" in db called "MyDB". The log file and table have a common field called "IP_add". Could anyone help me out with building the query. Thanks!! ... View more