Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- About kdimaria
kdimaria
Communicator
Member since:
08-01-2017
06-05-2020
Community Statistics
| Posts | 99 |
| Solutions | 2 |
| Karma Given | 20 |
| Karma Received | 6 |
| Member Since | 08-01-2017 |
Activity Feed
- Got Karma for Re: How to add a new column to a row?. 06-02-2025 07:43 AM
- Got Karma for Re: How do you add JS in xml?. 03-19-2021 02:05 AM
- Karma Re: How to add icon to a panel instead of table so there are no borders? for niketn. 06-05-2020 12:49 AM
- Karma Re: How do you add JS in xml? for niketn. 06-05-2020 12:49 AM
- Karma Re: Need help on predict command usage in graph for niketn. 06-05-2020 12:49 AM
- Karma Re: Need help on predict command usage in graph for Sukisen1981. 06-05-2020 12:49 AM
- Karma Re: How to add icon to a panel instead of table so there are no borders? for niketn. 06-05-2020 12:49 AM
- Karma Re: How to add icon to a panel instead of table so there are no borders? for niketn. 06-05-2020 12:49 AM
- Karma Re: How to add icon to a panel instead of table so there are no borders? for niketn. 06-05-2020 12:49 AM
- Karma Re: How to add icon to a panel instead of table so there are no borders? for niketn. 06-05-2020 12:49 AM
- Karma Re: How to add icon to a panel instead of table so there are no borders? for niketn. 06-05-2020 12:49 AM
- Karma Re: How to add icon to a panel instead of table so there are no borders? for niketn. 06-05-2020 12:49 AM
- Karma Re: Can you include a visualization (pie chart) in splunk alert e-mail pdf attachment? for DalJeanis. 06-05-2020 12:49 AM
- Karma Re: Is the Splunk predict command useful? for cmerriman. 06-05-2020 12:49 AM
- Karma Re: Get Latest event per month? for FrankVl. 06-05-2020 12:49 AM
- Karma Re: Splunk predict command period vs future_timespan? for jkat54. 06-05-2020 12:49 AM
- Karma Re: Splunk predict command period vs future_timespan? for niketn. 06-05-2020 12:49 AM
- Karma Re: How to replace specific field value? for cmerriman. 06-05-2020 12:49 AM
- Karma Re: Is there a way to add text to dashboard panel from a HTML text box? for niketn. 06-05-2020 12:49 AM
- Got Karma for How can you change the width of a column in a table(HTML) or add a new line break to a field?. 06-05-2020 12:49 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
04-06-2018
06:48 AM
my end goal it to show a graph that spans per month and shows the applications availability per month. so i want to do a timechart function
... View more
04-06-2018
06:23 AM
I am trying to show a graph of the latest events per month. My search query is:
| timechart span=1month latest(availability) by application
I thought this would grab the latest availability of the applications per month but its not grabbing the latest event for each month. The events are produced every day to get up to date information on availabilities so I want to show the latest to graph per month ( I want to graph it having the x-axis be the month and the lines being each application, showing the latest availability per month so its up to date). Is there a way to dedup per month? Thanks
... View more
04-03-2018
05:46 AM
All of my splunk events have the timestamp GMT. How do I evaluate _time to show EST? I was thinking of using:
eval n=strftime(_time, "%H:%M %d/%m/%y %Z")
But have it be in EST instead of GMT?
... View more
02-27-2018
11:05 AM
I don't think your solution will work because I'm grabbing different fields and not counting the sourcetype.
... View more
02-27-2018
10:53 AM
1 Karma
Nevermind. I found out using join with no field works.
index=a sourcetype=a | stats count as queue | eval Name="PA" | table Name queue count | join [ search index=b sourcetype=b | stats count as count]
... View more
02-27-2018
10:18 AM
I am trying to add a new column to a row that is a different search than the first search. Using append puts it in a new row but I want it in the same row.
So basically I have
index=a sourcetype=a | stats count as queue | eval Name="PA" | table Name queue | append [ search index=b sourcetype=b | stats count as count | eval Name="PA" | table Name count
So I'm getting data that correlates from two different sourcetypes and indexes but theres no field I can join on and I just want it on the same row. Name, queue and count on the same row.
... View more
02-19-2018
10:13 AM
Thank you again! I have everything I need now. Have a nice day! 🙂
... View more
02-19-2018
06:48 AM
Thank you lol yeah idk why I kept going through the pain of trying to type HTML and make it fit with the HTML I already have. much easier to type XML then copy and paste 🙂
... View more
02-19-2018
06:35 AM
@niketnilay Sorry I just had one more question. Is it possible to add a drilldown to this?
... View more
02-19-2018
06:03 AM
Thank you soooooooooooooooo much for all of your help! sorry for being such a pain and having so many questions. I typed this in and converted it to HTML and got it to work finally! much easier to type that than type all of the HTML code 🙂
... View more
02-19-2018
04:46 AM
@niketnilay, no need to apologize, thank you so much for all of your help. I tried switching it to preview and it's still just displaying $value1$. Do you have the simple XML for this dashboard?
... View more
02-16-2018
04:52 AM
Does SearchEventHandler work with 6.4.7?
... View more
02-14-2018
06:35 AM
I can't copy and paste to my environment so it would probably be easier to type simple xml then convert to HTML
... View more
02-14-2018
06:34 AM
It seems like the searcheventhandler isnt working because its not changing value1 to result.value.. the splunk version i have is 6.4.7.
... View more
02-14-2018
05:24 AM
@niketnilay Thanks, I found that I just made a spelling mistake. Do you happen to have the simple xml code for this dashboard? I am having trouble getting it the number and icon to display and want to play around with it. It just displays $value1$.
... View more
02-12-2018
10:26 AM
yeah when I try to do the line
var element1 = new HtmlElement({
"id": "element1",
"tokenDependencies": {"depends": "$alwaysHideCSSPanel$"},
"useTokens": true,
"el": $('#element1')
}, {tokens: true, tokenNamespace: "submitted"}).render();
it says it cannot create constructor
... View more
02-12-2018
08:22 AM
@niketilay I am getting closer. I figured out how to use my icon instead of the Splunk's icons but I am wondering what is the point of HTML elements? I can't get them to work on my dashboard and I am wondering if it'll work using SingleElements instead. Thanks! 🙂
... View more
02-09-2018
05:19 AM
@niketilay link text
That is the icon I want to have in the single element. I want to use the font awesome css and not change the background image with a url
... View more
02-09-2018
05:03 AM
@niketnilay OK I finally understand the icons with the single element. Is there a way to use CSS to change the icon to a custom icon?
... View more
02-02-2018
09:16 AM
I just feel like im going to run into the same issue with borders around the icon because of the panel. I just want a panel in the corner of my dashboard that is a table/splunk search that has only one value that I am able to drilldown into. I want to use the renderer to change the value to an icon(which I already can do) so that there is just an icon at the top right of my dashboard with no borders.
... View more
02-02-2018
09:13 AM
thank you! I'll accept the answer once i get the chance to test this out and see if im able to modify it to what im looking for
... View more
02-02-2018
08:51 AM
Okay so this worked, thank you, but sadly there is borders still on top of and below the table element and it doesn't look nice. Is there a way to get rid of that too? hahaha
... View more
02-02-2018
07:35 AM
Is there a way to remove the table header using mvc?
... View more
02-02-2018
03:57 AM
@niketnilay I have a SingleElement in the top right corner of my dashboard that is just the count of events so it is just a number and doesn't have the table headers. I know how to modify cells of tables using splunkjs mvc basecellrenderer and rendering the table and changing each cell based on values of that cell. I am wondering if you can do the same sort of thing for a singleElement because I don't want it in a tableElement because it has the headers.
... View more
