thanks, running it on search head gave me the result. ... View more

Adonio, thanks for your reply, unfortunately the query you gave returned 0 records. i tried running this on the forwarder where i am inserting data via file inputs. also i could not find any other document which can give me a ingest rate .. ... View more

Full path to your data Set host Source type Index Number of files App Status Actions /home/testuser/LAN_*.csv Constant Value csv john_test 3 search Enabled | Disable Delete as you can see under the data inputs , this is from dev, it shows 3 files under "number of files". this was immediate... on the other servers it shows blank.. its not detecting the existence of files properly... ... View more

i copied these files to dev environment and then did the same process of adding the files with wild card, it works on the dev server and also it comes up with correct format and columns and correct no of rows. but when i do the same on prod server, it does not index , or its partial or it indexes in single line. there is some difference between these 2 , have no idea.. both are forwarders... any ideas ? ... View more

i tried again adding a new data input, the csv files have around 290 rows each. strangely enough 72 rows got inserted correctly.. i will have a check tomorrow... ... View more

no, these are csv files . now when i do automatic, it is dumping the data but all in a single line. alternately , when i choose each file, i find that data inserts properly, with correct columns/rows, but when i do multiple csv files like mentioned above, i get things in single line.. ... View more

i tried this and provided csv as the source type, doing this now its not even indexing it... i have 5 files inside the folder, E:\NewFolder* "csv" is the sourcetype , index=test_index i tried modifying the files, but nothing on the index.. ... View more

no, while on the gui, with multiple files , it didnt allow me to specify the file type, i used a different name for source type other than csv ... View more

Eliott ,thanks for your reply. i would like to pass tokens between the navigation panel options. when i open a app, it has navigation menu and few panels below the navigation bar. those panels below have few dropdown which are the tokens. when i click between the navigation i would like these tokens to be passed between them, so that i dont have to select those tokens again. i earlier asked this in a previous case and understand i cannot pass token between the navigation menu options. so in this case i was asking if the navigation menu clicks can have drilldown where in i can pass tokens. i was wondering if this was possible to treat navigation menu clicks this way. im not mentioning here the clicks on rows/columns on the panels , im talking about navigation menu options, ex: search, dashbaord and any custom view that i add for that option.. hope i was clear with my query.. ... View more

Thinks found a solution for this. Best way to get this to work is use links instead of views in the default.xml the same xml file can be used for all the required apps. this will ensure that when you click on the navigation bar, it takes you to the appropriate app and when you edit , it changes on that xml in that app. so the case of changes to a single xml for any app would be taken care. only change required would be the default=true value which should be that of the app ex: below , i found this method to be good. nav search_view="search" color="#DC381F"> view name="inventory_dashboard" default="true" /> a href="https://link1:8000/en-US/app/metrics/testmetrics">Link1 Metrics a href="https://link2:8000/en-US/app/metrics/testmetrics">Link2 Metrics a href="https://link3:8000/en-US/app/metrics/testmetrics">Link3 Metrics view name="search" /> view name="dashboards" /> /nav> all of it can be the same , except for the default=true line, that should actually be of the app default.. ... View more

This solution of creating soft link for default.xml worked perfectly fine. but i have another problem now. since the main xml file is being loaded now, the default entry in that xml file is of that app. is there a way to modify the xml file in a way that it picks up the existing app dynamically. here is the entry "default="true"", can this by dynamic... ... View more

Found the answer. i had the same lookup name file from 2 different locations . i was updating one of the file and so that was considered by splunk as not primary , so it was not showing. i delete the duplicate entry and now i can see the new entry... ... View more

Yes, this is exactly how i have done it. now when i do changes to this file, i dont see the changes. |inputlookup file.csv ... View more

Would this method work ? i create a default.xml in search app then i create a link to this file in all other apps for the default.xml under navigation folder. im going to try this, but just want to know if this can be preferred. this way i have to do changes only on xml file ... View more

i do not have enough points to post a image or picture. but here is what i have and what i need. on the main page panel, i have 4 options. search,dashboards,mainpage,maingpage2 on the main page itself, i have 2 panels which have drill downs configured to redirect to their respective apps. now when i drill down, it has a different navigation panel and with also a different color. what i need is to have the same look and feel on the sub dashboard as it was on the main dashboard. i find a way to do this is to copy the xml files from nav/views folder from main page app to the other 2 apps. now , question is, if i do any changes on the main page app navigation panel, will it also update to the other 2 apps as i am using the same names . or should i manually update the xml files on the other 2 apps as well.. hope i was clear with my question.. ... View more

Hi Niket, appreciate your response, my management wanted to see either the round bubble or the pie chart. Pie chart would not give me actionable view, but the bubbles with colors lets me pass the message that there is a problem going on in a particular site. but i will keep these links in mind next time if i need them,, thanks.. ... View more