I am hiding the title bar using - hideTitle="true". However, the space used by the title bar still exists even while the title bar is hidden. I need to hide the title bar along with removing the space that's used or reserved by the title bar. Can someone please let me know how I can achieve this? ... View more

I want to change the title text on the tabs from, for example, "Login|Splunk" or "Dashboards | Splunk 7.1.2" to a text which I want, something like just "Login" or just "Dashboards." I also want to exclude the Splunk version details from being displayed on the title. So, I have two questions: —How do I change the title text on the tabs from default text to a custom text? —How do I disable the Splunk version details being displayed on the tab title? Is there a way that I achieve this? Note: Found a similar question here - https://answers.splunk.com/answers/521061/how-to-change-bookmark-name-from-loginsplunk-to-na.html, but the answer provided was in Chinese. ... View more

I'm running Splunk DB Connect app on Splunk 7.0.1 for quite some time now. Lately I'm seeing some errors on the DB Connect app UI where it states that it is not able to communicate with the task server along with few other errors. Tried changing the ports but nothing helped. I also see an error in the python log(not sure if its in anyway related). * Cannot communicate with task server, please check your settings. * <?xml version="1.0" encoding="UTF-8"?> <response> <messages> <msg type="WARN">Traceback (most recent call last):&#13; File "E:\Splunk/bin/rest_handler.py", line 79, in <module>&#13; print splunk.rest.dispatch(**params)&#13; File "E:\Splunk\Python-2.7\Lib\site-packages\splunk\rest\__init__.py", line 149, in dispatch&#13; module = __import__('splunk.rest.external.%s' % parts[0], None, None, parts[0])&#13; File "E:\Splunk\etc\apps\splunk_app_db_connect\bin\dbxproxy.py", line 4, in <module>&#13; import requests&#13; File "E:\Splunk\etc\apps\TA-Swimlane\bin\requests\__init__.py", line 43, in <module>&#13; import urllib3&#13; ImportError: No module named urllib3&#13; &#13; </msg> </messages> </response> *ERROR No module named urllib3 Traceback (most recent call last): File "E:\Splunk/bin/rest_handler.py", line 79, in <module> print splunk.rest.dispatch(**params) File "E:\Splunk\Python-2.7\Lib\site-packages\splunk\rest\__init__.py", line 149, in dispatch module = __import__('splunk.rest.external.%s' % parts[0], None, None, parts[0]) File "E:\Splunk\etc\apps\splunk_app_db_connect\bin\dbxproxy.py", line 4, in <module> import requests File "E:\Splunk\etc\apps\TA-Swimlane\bin\requests\__init__.py", line 43, in <module> import urllib3 ImportError: No module named urllib3 Attached are the error screenshot and snippets. I do not want to re-install DB Connect app in first place as I have outputs configured and running on the app which I do not want to be affected and would want to know if this issue can be fixed in any other way apart from re-installing unless that is the only solution. Any help in this regard is greatly appreciated. P.S. : All my outputs configured are still running fine and are not affected by this. I'm only not able to load and access the app itself in order to be able to modify or create new output configurations. ... View more

I am applying few conditions and logic to come up with values for different fields. I'm then displaying them using teh table command, like - | table field1 field2 field3 etc I now want to display this table with a condition like the table should display only those rows where a field has a particular value. Ex - Display only those rows where field2="testvaluexyz". something like - SELECT FIELD1, FIELD2, FIELD3 FROM TABLE1 WHERE FIELD2="testvaluexyz" I'm trying with the below command after table command and getting any result. |fields - field2| where field2 != "testvaluexyz" I can guess this may not be the right way. Can someone please help achieve this? ... View more

I have come across many questions related to quotations but did not find the one that addresses my scenario. I have a dashboard with a drop down and 4 panels. Drop down populates values by using DB Connect's dbxquery. The panels are intended to populate appropriate result by running a dbxquery command, using the value from the drop down token as the value for WHERE condition in its query argument. The problem I'm facing is with the format in which the dropdown token value is being substituted. For example, let the selected drop down value be - sampleText when I use |dbxquery query=".... WHERE value1=$token_value$" connection="xyz" the query will be run as ".... WHERE value1="sampleText" This doesn't fetch me any result as SQL doesn't accept " " for string comparison and will expect ' ' instead (i.e., 'sampleText' instead of "sampleText") It seems I should do some string conversion in the query, just before comparing. Can someone please let me know how to get over this scenario so that either the "$token_value$" pass single quotes or doesn't pass any quotes at all, or any string conversions that I can perform before comparing. Any help is much appreciated. ... View more