Thanks aelliott for your quick response and I hope I have correctly casted one vote for your answer...thanks again ... View more

Thanks emaccaferri, It is absolutely fine with table but i am using value and options like or is not working for .I have checked one example in that they used but with this again search bar appears with the query. ... View more

Thanks for the advice , sure I will try that but need to check how to call another dashboard on click as i am new to splunk... ... View more

Thanks Kristian for answering my question ... ... View more

Thanks Kristian , That means if I install Splunk enterprise 6.0 on one server and treat it as a master , we can make slaves from the same instance to different machines (Then i don't need different license for slaves correct..?). Another query what you can suggest for dev server if license already has been purchased for Prod server.I don't want to install 60 days trial version on dev server.... ... View more

@crt89 Hi I am facing the same issue nothing is appearing in the box, as you said it seems js is not picking up my search could you please guide where to put single quote in my query. require(['jquery', 'underscore', 'splunkjs/mvc', 'splunkjs/mvc/multiselectview', 'splunkjs/mvc/searchmanager', 'splunkjs/mvc/simplexml/ready!'], function($, _, mvc, MultiSelectView,SearchManager){ //Instantiate our multi select view multiSelect = new MultiSelectView({ "id": "multi_value_input", "value": "$submitted:multiToken$", "el": $('#multi_value_input'), "labelField": "sourcetype", "valueField": "sourcetype", "managerid": "multiSearch" }, {tokens: true}).render(); //Run the search the multi select is looking for var multiSearch = new SearchManager({ "id": "multiSearch", "earliest_time": "-15m", "status_buckets": 0, "search": '| dbquery "Finance Database" "select period_name from fa_deprn_periods"', "cancelOnUnload": true, "latest_time": "now", "auto_cancel": 90, "preview": true }, {tokens: true}); } ); ... View more

I found another solution for this . Using Lookup you can achieve the same. follow the following steps 1) Create a csv file in the following location "Splunk home\etc\apps\dbx\lookups lets say the file is "user.csv".Make sure u must have some data in the CSV file.Else if u chk my code I am creating a CSV from dbquery with the help of | outputlookup command. 2) Create a new lookup from Settings--->Lookups-->Lookup table file here select the same csv file which u have created u can choose the same file name in the destination lets say the name is "vikaslookup". 3) Make sure u chkd the permissions it should be global. 4) Now open splunk and type the following code and that is it. | dbquery "your database" "select abcdate as "Fromdate" from help"| outputlookup user.csv <![CDATA[ | inputlookup vikaslookup ]]> 2013 ... View more

Please help...any solution..? ... View more

Linu While pasting this code in the above section I manually delete the database name , but it is there in the actual code and sql query is returning results that I have checked . I do not have much idea about Cdata and I am not sure if I can use dbquery in CSDATA...Please suggest ... View more

Thanks Theouhuios Actually I am preparing a dashboard which takes input from oracle database and I want to show date field in dropdown, user will select one date from the dropdown list and on the basis of that dashboard table shows data. ... View more

Thanks Martin for your quick responce I got the solution , network administrator has created DNS entry for splunk server.....Thanks again... ... View more

Thanks, You are right this user does not have the privilege to cerate the session .I am in touch with my DBA.Thanks!! ... View more