Hi, I wonder whether someone may be able to help me please. I've put together the query below. index=main auditSource=frontend auditType=ExitSurvey | timechart span=1W count(eventId) by detail.manageClient | addtotals label=Total | rename 1 as "Very Good", 2 as "Good", 3 as "Neutral", 4 as "Bad", 5 as "Very Bad" Could someone tell me please how I can change the row field from the time value to the field name i.e detail.manageClient Many thanks and kind regards Chris ... View more

I wonder whether someone may be able to help me please. I have a report called "Digital Match and Verify" which I've accelerated with a view to use this in a dashboard. This is the section of the XML where I'm trying to link to the report. <searchString> | savedsearch "Digital_Match_and_Verify" idaFullName=$username$ </searchString> <query> | table idaFullName idaFull_Details cidFull_Details ErrorCode generatedAt </query> The problem I have is that when I try to run this, I receive the following error: Error in 'savedsearch' command: Unable to find saved search named 'Digital_Match_and_Verify'. I just wondered whether someone may be able to look at this please and let me know where I've gone wrong. Many thanks and kind regards Chris ... View more

Hi, I wonder whether someone could help me please. I've put together the following form: <form> <label>Digital Verify &amp; Match</label> <description></description> <fieldset submitButton="false"> <input type="time" token="DashboardTime" searchWhenChanged="false"> <label>Please Select the Time Range</label> <default> <earliest>@d</earliest> <latest>now</latest> </default> </input> <input type="dropdown" token="username" searchWhenChanged="false"> <label>Please Select the Customer Name</label> <search> <query>index=main auditSource="matching" auditType="Tx*" detail.input-ida-request="*" earliest=$DashboardTime.earliest$ latest=$DashboardTime.latest$ | rex field="detail.input-ida-request" "\"firstName\":{\"value\":\"(?<idaFName>[^\"]+)" | rex field="detail.input-ida-request" "\"surnames\":\[\{\"value\":\"(?<idaSName>[^\"]+)" | eval idaFullName= idaFName." ".idaSName | stats dc(idaFullName) first(inOrOut) As inOrOut By idaFullName | stats count by idaFullName</query> </search> <fieldForLabel>idaFullName</fieldForLabel> <fieldForValue>idaFullName</fieldForValue> </input> </fieldset> <row> <panel> <table> <title>Data Table</title> <search> <query>auditSource="matching" auditType="Tx*" detail.input-ida-request="*" | rex field="detail.input-ida-request" "\"firstName\":{\"value\":\"(?<idaFName>[^\"]+)" | rex field="detail.input-ida-request" "\"surnames\":\[\{\"value\":\"(?<idaSName>[^\"]+)" | eval idaFullName= idaFName." ".idaSName | idaFullName=$username$ | table idaFullName idaFullDetails cidFullDetails ErrorCode generatedAt | rename idaFullName TO "Customer Name"</query> </search> <option name="wrap">true</option> <option name="rowNumbers">false</option> <option name="drilldown">cell</option> <option name="dataOverlayMode">none</option> <option name="count">10</option> </table> </panel> </row> </form> The problem I'm having is passing the value from the drop-down menu (token=username) to the table of results despite adding idaFullName=$username$ I just wonder whether someone may be able to look at this please and let me know where I've gone wrong. Many thanks and kind regards Chris ... View more

Hi, I wonder whether someone could help me please. I have a dashboard which has 'Timepicker' and 'Dropdown Menu' panels as shown below. <form> <label>Cascading Multiple Dropdown inc. Time - Working Clone</label> <description>A form input element's selected value is used to populate another form input element's options.</description> <fieldset autoRun="true"> <input type="time" token="dashboardTime"> <label>Select a Time Range</label> <default> <earliest>@d</earliest> <latest>now</latest> </default> </input> <input type="dropdown" token="username"> <label>Select a Form</label> <default>*</default> <choice value="*">All</choice> <search> <query>detail.utr="*" | stats count by detail.formId</query> </search> <earliestTime>$dashboardTime.earliest$</earliestTime> <latestTime>$dashboardTime.latest$</latestTime> <fieldForLabel>detail.formId</fieldForLabel> <fieldForValue>detail.formId</fieldForValue> </input> </fieldset> </form> The problem I have is that I'm trying to link the Time Picker to the drop-down menu, so the values in the drop-down menu will depend on the time range selected. I've been working on this for some time now, but I can't get this to work. Could someone possibly look at this please and let me know where I'm going wrong? Many thanks and kind Regards Chris ... View more

Hi, I wonder whether someone could help me please. I'm using a date field in the format ddmmyyyy Could someone tell me please is there a way by which this can be re-formatted to dd/mm/yyyy Many thanks and kind regards Chris ... View more

Hi, I wonder whether someone may be able to help me please. I've put together the following in the Dashboard XML. <search> <query>auditSource="matching" auditType="Tx*" detail.input-ida-request="*" | rex field="detail.input-ida-request" "\"firstName\":{\"value\":\"(?<idaFName>[^\"]+)" | rex field="detail.input-ida-request" "\"surnames\":\[\{\"value\":\"(?<idaSName>[^\"]+)" | eval idaFullName= idaFName." ".idaSName | eval idaFull_Details= "DOB: ".idaDOB.", Address: ".idaAddress.", NINO: ".idaNINO.", SAUTR: ".idaSAUTR | makemv delim=", " idaFull_Details | table idaFullName idaFull_Details cidFull_Details ErrorCode generatedAt CreatedDate </query> </search> The problem I have is that this is being rejected and the closing search and query tags are shown in red. Could someone tell me where I've gone wrong with this. Many thanks and kind regards Chris ... View more

Hi, I wonder whether someone may be able to help me please. I have a date in one of my searches which is in this format: 1942-01-24 Could someone tell me please if is it possible to change this to: 24/01/1942 Many thanks and kind Regards Chris ... View more