I have a dashboard where I am using TimeRangeView control. I would like to display the TimeRangeView control selected value as human readable format in my dashboard header. unfortunately, I don't have the option to run a Splunk search in this case. Ex: Imagine current time is 14:12:00 03/09/2015, then 1) If TimeRangeView control selected value is -1m@m, then it should print as 14:11:00 03/Sep/2015 2) If TimeRangeView control selected value is -4h@m, then it should print as 10:12:00 03/Sep/2015 3) If TimeRangeView control selected value is -2d@h, then it should print as 14:12:00 01/Sep/2015 Any help on this is much appreciated. Thanks. ... View more

I converted my existing advanced XML dashboard to HTML view (Which allows me to add coloring and other styles to my dashboard). But, performance of HTML view seems to be very slow. Is there any way (tips & tricks) to improve performance of the HTML view? Something like Caching or Pre loading of the page? ... View more

I have a search which has a field (say FIELD1). I would like to search the presence of a FIELD1 value in subsearch. If that FIELD1 value is present in subsearch results, then do work-1 (remaining search will change in direction-1), otherwise do work-2 (remaining search will change in direction-2). pseudo search query: index="sample_index" sourcetype="sample_sourcetype"| fields FIELD1 | search FIELD1 in [my sub search here| fields FIELD1] | if FIELD1 is present in subsearch, then do work-1, If not do work-2. I looked at https://answers.splunk.com/answers/31842/why-cant-i-use-subsearch-in-the-case-function-in-the-eval-command.html But, this is talking about comparing single value with single value from subsearch. What I am looking is finding FIELD1 value in multiple results of subsearch. Any suggestions to proceed further? ... View more

Is there any way to pass JavaScript variable to search module in view XML? My JavaScript code (application.js) generates field list to filter out the search results in my view XML. Is there any way to pass data from JS to view XML? JavaScript code: `function myCustomFunc(){ var fieldList .... .... .... return fieldList; }` View XML: `<module name="Search" layoutPanel="appHeader"> <param name="search"> ...|...|...| table fieldList </param> </module>` ... View more

Is there any limit to maximum number of rows allowed in layoutpanel? I just tested with 50 rows, splunk says "found an invalid value for layoutPanel - 'panel_row50_col1'". What is wrong here? Is there any way I can increase maximum rows allowed in layoutpanel? Here is my code snippet, which is throwing error. If I remove last module with layoutpanel "panel_row50_col1", then it is working fine. <view autoCancelInterval="90" isVisible="true" objectMode="SimpleDashboard" onunloadCancelJobs="true" refresh="-1" template="dashboard.html"> More than 50 rows test * False 1 splunk.search.job True 1 warn ROW 1 ROW 2 ROW 3 ROW 4 ROW 5 ROW 6 ROW 7 ROW 8 ROW 9 ROW 10 ROW 11 ROW 12 ROW 13 ROW 14 ROW 15 ROW 16 ROW 17 ROW 18 ROW 19 ROW 20 ROW 21 ROW 22 ROW 23 ROW 24 ROW 25 ROW 26 ROW 27 ROW 28 ROW 29 ROW 30 ROW 31 ROW 32 ROW 33 ROW 34 ROW 35 ROW 36 ROW 37 ROW 38 ROW 39 ROW 40 ROW 41 ROW 42 ROW 43 ROW 44 ROW 45 ROW 46 ROW 47 ROW 48 ROW 49 ROW 50 ... View more