Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About efavreau
efavreau
Motivator
Member since:
09-19-2014
Online
Community Statistics
| Posts | 294 |
| Solutions | 24 |
| Karma Given | 371 |
| Karma Received | 68 |
| Member Since | 2014-09-19 |
Activity Feed
- Karma Introducing the 2024 Splunk MVPs! for SplunkCommunity. Thursday
- Posted Re: regex error on Getting Data In. 03-05-2024 10:06 AM
- Karma Re: How to find all Dashboards, Reports and Alerts related to a specific index ? for jasonwagner. 02-16-2024 11:28 AM
- Karma SplunkTrust | 2024 SplunkTrust Application Period is Open! for GretchenFox. 02-16-2024 08:06 AM
- Karma Re: What is the Expires parameter of an alert? for ajitshukla61116. 02-12-2024 07:37 AM
- Karma Re: Truncate the log description after n words. for batabay. 02-05-2024 08:19 AM
- Posted Re: How to use spath to read dynamic path on Splunk Search. 02-05-2024 08:18 AM
- Karma Re: How to use spath to read dynamic path for yuanliu. 02-05-2024 07:34 AM
- Karma Re: Join Two Searches on Shared Field Value for richgalloway. 02-05-2024 07:32 AM
- Karma Community Update: New Homepage + Product Board Content for GretchenFox. 02-05-2024 07:13 AM
- Posted Re: Splunk 8 UI Themes on #Random. 12-12-2023 03:38 PM
- Karma Splunk 8 UI Themes for shocko. 12-12-2023 03:12 PM
- Karma Re: How to use "where" and "not in" and "like" in one query for HiroshiSatoh. 10-24-2023 01:44 PM
- Posted Re: How to format table range per week automatically? on Splunk Search. 10-24-2023 07:59 AM
- Karma Re: Add colors to a table for dynamic columns for kaeleyt. 10-24-2023 07:47 AM
- Karma New! Splunkbase and Splunk Answers Integration for dhosaka. 10-19-2023 01:08 PM
- Karma Re: Extract fields from JSON response for yuanliu. 10-17-2023 10:22 AM
- Got Karma for Re: Stats Count by day ?. 10-05-2023 05:02 PM
- Got Karma for Re: Stats Count by day ?. 10-05-2023 02:58 PM
- Posted Re: Stats Count by day ? on Splunk Search. 10-05-2023 02:53 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 2 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
10-23-2020
02:33 PM
@knanaiah001There aren't a lot of options to do that in simplexml, which is doing the coding for you. You'll want to go to HTML if this is very important to you. https://dev.splunk.com/enterprise/docs/developapps/visualizedata/convertsimplexml/ I have the following, I used for an image I have in a dashboard with simple xml, using a span tag: <panel>
<title>Test Panel - Image</title>
<html>
<div class="foo"/>
<span role="img" aria-label="foo"/>
<!-- this span is as close as we can get to alt text for accessibility -->
</html>
</panel> I can't cite my source, because I don't remember. HTH! Good Luck!
... View more
09-28-2020
02:49 PM
Buenos días@Isa! I'm thinking the best route here is to use the Field Extractor: https://docs.splunk.com/Documentation/Splunk/Latest/Knowledge/ExtractfieldsinteractivelywithIFX If that doesn't work for you, please let us know what you tried, what result you obtained, and why that wasn't what you needed.
... View more
07-08-2020
03:39 PM
1 Karma
Hi @splunkclouduser! I understand this answer comes a bit later than when you asked, but I do have an answer! You can embed a base64 encoded image file in your dashboard using this code. I know this solution is less than perfect. (I've already submitted to Splunk Ideas an idea for static file management to make it easier on admins and users.) However, for the sake of the community, what you are looking to do can be done. 😍 Here is a run-anywhere XML dashboard that has 3 panels, and a base64 image in the center panel. ### If this reply helps you, an upvote would be appreciated. ### <dashboard>
<label>Using a Base64 image in a dashboard - no upload or admin needed</label>
<row>
<panel>
<title>Panel 1</title>
<html>
</html>
</panel>
<panel>
<title>Panel 2 - Image</title>
<html>
<div class="fulcrum"/>
<span role="img" aria-label="fulcrum"/>
<!-- this span is as close as we can get to alt text for accessability -->
</html>
</panel>
<panel>
<title>Panel 3</title>
<html>
</html>
</panel>
</row>
<row depends="$alwaysHideCSS$">
<panel>
<html>
<!-- Base64 conversion tool used: https://websemantics.uk/tools/image-to-data-uri-converter/ -->
<style>
.fulcrum {
width: 221px;
height: 205px;
background-image: url(data:image/png;base64,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);
}
</style>
</html>
</panel>
</row>
</dashboard>
... View more
07-08-2020
06:24 AM
It changes my entire panel (see screenshot), but I'm in v7.2.8. What version are you in?
... View more
07-07-2020
09:18 AM
Hi @limalbert, I think this will get you closer, if not solve it. Here is a run-anywhere example. Create a blank dashboard, edit the source, clear away everything in there, and then paste this to see if it gets you to a starting point. <dashboard>
<label>MyTest</label>
<row>
<panel id="myCSSPanelTarget001">
<html>
<p>
Using an id on the panel, and then a hidden HTML panel at the bottom , which is used for explicit css styling of the entire panel.
</p>
</html>
</panel>
</row>
<row>
<panel>
<html depends="$alwaysHideCSSStyle$">
<style>
/* Target a single panel, that has an id="myCSSPanelTarget001" */
#myCSSPanelTarget001 .dashboard-panel{
text-align: center !important;
background: #485959 !important;
}
</style>
</html>
</panel>
</row>
</dashboard> If this isn't close, then if you can revise your question to be more specific in exactly what you are trying to achieve, what you tried but didn't work, and how what you tried didn't provide you what you were looking for, we might be able to help solve the specific obstacle.
... View more
07-06-2020
02:06 PM
1 Karma
Hi @limalbert! That sure is possible! There are a lot of examples here in the Splunk Community. Try something like this below to get you on your way. <row>
<panel>
<html>
<div style="background: #485959; height: 100%; width: 100%;">
<p style="padding: 5px; font-size: 30px; font-family: 'Arial Regular', Arial, serif; color: white;">
Sample Heading
</p>
<div style="font-size: 16px; font-family: 'Arial Regular', Arial, serif; color: white; list-style-type: circle;">
<ul>
<li>One</li>
<li>Two</li>
<li>Three</li>
</ul>
</div>
</div>
</html>
</panel>
</row> ### If this reply helps you, an upvote would be appreciated.
... View more
07-06-2020
09:15 AM
1 Karma
Hi @maxmukimov! You'll need to give us more detail, like a sample of your logs (with any sensitive information taken out). Otherwise, I'm thinking the mvexpand command would you help in this situation. https://docs.splunk.com/Documentation/Splunk/Latest/SearchReference/Mvexpand ### If this reply helps you, an upvote would be appreciated.
... View more
07-06-2020
09:10 AM
@fflimaI don't know if such a feature would be coming. Likely Splunk won't comment on that. Ideas can be posted to https://ideas.splunk.com/ (there's a link at the top of the page here within the Splunk Community site). You are correct, having a new column that does the comparison for each would be a way to solve it. If there's another way, maybe someone else in the community knows. However, when I've used a similar approach, I had another column called "Reason". I can't grab the logic right now (I used a couple case statements IIRC), so hopefully you can follow what I am trying to say. If "pass" value, reason = "" If "fail" value, reason = "Failed on ".fieldname The magic there is the "." is concatenating the name of your field that failed, with the "Failed on " phrase. You can't make it red without JavaScript (https://community.splunk.com/t5/Splunk-Search/Wilde-card-is-not-working-for-when-using-colorPalette-type-quot/td-p/323589), but it would tell you more easily, the reason for the fail.
... View more
07-06-2020
08:39 AM
1 Karma
Hi @russellfavell! Check out this post: https://community.splunk.com/t5/Splunk-Enterprise/How-to-use-iframe-in-Splunk-8-x/m-p/467603/highlight/true#M1768 Essentially, you'll need your admins to look at the web.conf to allow the features you're looking for. ### If this reply helps you, an upvote would be appreciated.
... View more
07-06-2020
08:36 AM
Hi @fflima! By itself, you can't do that exactly as you are trying to. It appears that you already figured out the new column with pass/fail. That's how to go about something similar. Cheers!
... View more
07-01-2020
07:52 AM
1 Karma
@eus_e2e_engineeI'm not seeing a need for the append or the second search, as everything before the first pipe in both searches is the same. If there's no case, then that is indeed inefficient. Collect everything up front and then categorize away using evals. What you may be running into, is a filtering out of fields due to the stats command. If that's the case, I'd look into using eventstats and/or streamstats instead of stats. There's an old but relevant blog post here about those: https://www.splunk.com/en_us/blog/tips-and-tricks/search-command-stats-eventstats-and-streamstats-2.html ### If this reply helps you, an upvote would be appreciated.
... View more
07-01-2020
07:19 AM
@sen8sen Splunk Enterprise doesn't support export of dashboard results to rss at this time. However, anytime the core product doesn't do what I want, I go to https://splunkbase.splunk.com/ and search to see if there's an add-on app, which would extend the capabilities. Searching for "rss" in Splunkbase (https://splunkbase.splunk.com/apps/#/search/rss/), I see a handful of results. I would go and see if any of those might potentially fit your needs. If so, discuss adding the app to your Splunk setup.
... View more
06-19-2020
01:15 PM
@spayneortGreat find! Those links are hidden. I was looking for something exposed. Also loved the API find. That may come in useful too. Appreciate the solutions - Thank you!
... View more
06-16-2020
02:21 PM
Hi @genesiusj! When you port your query into a dashboard, are you using copy/paste? Depending on the apps and fonts involved, there are auto-corrected characters. For instance a dash may be converted into an m-dash when an n-dash is needed (these are things I learned when I was zapped with a similar problem), etc. Or maybe when you put the code into the dashboard, it wasn't escaped for the xml. Play with different variations to make sure the exact-correct code appears in your dashboard. Don't look quickly and say "it is", look real hard, and know it is identical. Maybe even type it in by hand with no copy/paste. This may not be it, but I lost a lot of time not realizing I should make sure every time I run into something like this. Now I don't involve email or office or other apps. Plain text always. Maybe this will help.
... View more
06-16-2020
02:12 PM
In answers.splunk.com, there was an rss feed for whenever anyone posted a new question. When someone posts a question, I want to know as often as I have set the RSS feed reader to poll. So I could poll on demand (or once a day or whatever) and find the new posts, without having to figure out how to navigate into each section of this site, figure out if I saw the message or not, and end up missing questions I could help on. I found a way to get all posts using Subscriptions within community.splunk.com, but that's not going to work for me. Is there a way to replicate the old RSS functionality of answers.splunk.com, in community.splunk.com?
... View more
06-01-2020
09:13 AM
@rfahrenbach If this answers your question, please accept the answer. Thank you!
... View more
06-01-2020
08:00 AM
Animated PNG worked as well.
... View more
06-01-2020
07:54 AM
@rfahrenbach
Based on my testing on v7.2.8, I found the following types to render: GIF (even animated GIF), JPG, PNG, and SVG.
Here's the code I used to throw together a test. Because my local instance is down at the moment, and there's no uploader for static files to our work instance, I referenced an outside web server. However, everything did render.
<row>
<panel>
<html>
<ul>
<li>GIF <img src="https://full/path/to/myfile.gif" height="454" width="114"/>
</li>
<li>SVG <img src="https://full/path/to/myfile.svg" height="16" width="16"/>
</li>
<li>JPG <img src="https://full/path/to/myfile.jpg" height="500" width="100"/>
</li>
<li>PNG <img src="https://full/path/to/myfile.png" height="200" width="200"/>
</li>
</ul>
</html>
</panel>
</row>
Thanks!
... View more
05-12-2020
06:09 AM
Hi @manikanthkoti!
Here's a link I would send to my coworkers: https://crontab.guru/#30_2,10,18___*
This site, is one of several you could use. I have recommended this one because they said it makes sense. As they click to each number field, the help text changes, and they can learn how to build a cron timeframe on their own. A word of caution, while this site may help with a large amount of crons, it sometimes can't help with the very complex.
The cron expression you are looking for in this instance is: 30 2,10,18 * * * Go to the site to read about why that is the answer, and hopefully it can also help you in the future.
Cheers!
... View more
04-30-2020
12:41 PM
Hi @vijaysri! There are some options I have outlined below. There may be more. It starts with your admins and ends with what I would try first.
1. If this is a log source, you can remove it by changing the source in your SPL to: source!=mydashedlinelogsource This will ignore that log source. Although if this is the case, you might want your admins to stop ingesting that log file. I will assume it's not a log source for the other options.
2. If you want to give this line a name, so you can exclude it later in your search, you could use a regular expression to capture it and a search to filter it out. This isn't a great approach, because it's inefficient, but it works. This assumes the dashed line is of the same known length. Test it to make sure you aren't excluding other useful files.
| rex field=_raw (?<DashedLineLog>(--------------------------------------------------------)) | search DashedLineLog!=*
3. There's another option besides writing the regular expression yourself. You can use the Field Extractor, which would work very well for this scenario: https://docs.splunk.com/Documentation/Splunk/Latest/Knowledge/ExtractfieldsinteractivelywithIFX
4. However, if you know the dashed line is of the same known length every time, because it's an entire log event, or there's nothing else in the log event that you care about, you could before the first pipe ( | ) in your search query , put in NOT "--------------------------------------------------------" , and this will eliminate those log events containing that string. Test it to make sure you aren't excluding other useful files. This would be my first approach, because anything you can put before the first pipe will improve search performance.
Good luck!
... View more
04-27-2020
06:08 AM
Thank you. Very clear. What's appearing is your html section in the panel. There's a convention I've stolen from others that can hide it: depends="$alwaysHideCSSPanel$" . That's what you're missing. Try this:
<dashboard>
<label>Test HTML</label>
<description>Create a simple table using the dashboard editor.</description>
<row>
<panel>
<html depends="$alwaysHideCSSPanel$">
<style>
#modifyTableHeader th{
background: #ba6e5e;
}
</style>
</html>
<table id="modifyTableHeader">
<title>Top Sourcetypes (Last 24 hours)</title>
<search>
<query>index=_internal | top limit=100 sourcetype | eval percent = round(percent,2)</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="wrap">true</option>
<option name="rowNumbers">true</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">cell</option>
<option name="count">10</option>
</table>
</panel>
<panel>
<table>
<title>Top Sourcetypes (Last 24 hours)</title>
<search>
<query>index=_internal | top limit=100 sourcetype | eval percent = round(percent,2)</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="wrap">true</option>
<option name="rowNumbers">true</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">cell</option>
<option name="count">10</option>
</table>
</panel>
</row>
</dashboard>
... View more
04-24-2020
01:53 PM
I don't know a way that's possible out of the box. 😞 Maybe there's something in Splunkbase. Attach PDF.
... View more
04-24-2020
07:20 AM
Anytime I use CSS in a dashboard, I mark it with !important to make sure it overrides existing values.
Some people use imgur.com or 0bin.net for screenshots. That way it doesn't take your dropbox space. I see where you change the text size in places, but not the cell/row size. Maybe that's why your table is getting misshapen.
... View more
04-24-2020
07:12 AM
Use the button that looks like 101010. That allows you to mark things as code. It's not perfect, but better than nothing.
... View more
04-23-2020
08:23 PM
Maybe someone else knows a way. FWIW, Python is a citizen in the Splunk ecosystem. And MLTK is built on top of the Python for Scientific Computing Library (https://splunkbase.splunk.com/apps/#/search/python%20for%20scientific%20computing/). I understand not wanting to do work again. But the investment to building it in Splunk might be worth considering.
... View more
Contact Me
| Online Status |
Online
|
| Date Last Visited |
3 hours ago
|
Karma from
Karma given to
