Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About edfuenteso
edfuenteso
New Member
Member since:
06-12-2018
06-05-2020
Community Statistics
| Posts | 4 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 06-12-2018 |
Activity Feed
- Posted Re: How to search field for input with backslash on Dashboards & Visualizations. 06-19-2018 08:56 AM
- Posted No show user with Backslash on Security. 06-19-2018 08:02 AM
- Tagged No show user with Backslash on Security. 06-19-2018 08:02 AM
- Posted Re: Add TextBox filter to Splunk's Report on Reporting. 06-12-2018 09:08 AM
- Posted Add TextBox filter to Splunk's Report on Reporting. 06-12-2018 06:25 AM
- Tagged Add TextBox filter to Splunk's Report on Reporting. 06-12-2018 06:25 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
06-19-2018
08:56 AM
Hi @DalJeanis - I have a similar trouble....
I have the next source but with users NT, example CUSTOMER\admin_moss and this no show me results.
How should be the form?
Accesos a BD SQL Server
<!-- Create a text box; token is "series" -->
<!-- label: Label for the text box -->
<!-- default: Default value for the form -->
<!-- suffix: All tokens are followed by a * -->
<!-- If user does not specify text, then search uses '*' -->
<input type="dropdown" token="user" searchWhenChanged="true">
<label>Selecciona un Usuario:</label>
<default>*</default>
<!-- Define the default value -->
<choice value="*">All</choice>
<change>
<set token="user_label">$label$</set>
</change>
<!-- Define the choices with a populating search -->
<populatingSearch fieldForValue="user" fieldForLabel="user" earliest="-24h" latest="now">
<![CDATA[index=sqlserver_audit | stats count by "user"]]>
</populatingSearch>
</input>
<input type="dropdown" token="estado" searchWhenChanged="true">
<label>Selecciona Resultado Conexión :</label>
<default>*</default>
<!-- Define the default value -->
<choice value="*">All</choice>
<!-- Define the choices with a populating search -->
<populatingSearch fieldForValue="estado" fieldForLabel="estado" earliest="-24h" latest="now">
<![CDATA[index=sqlserver_audit | stats count by estado]]>
</populatingSearch>
</input>
<input type="dropdown" token="dbname" searchWhenChanged="true">
<label>Selecciona Nombre de la BD:</label>
<default>*</default>
<!-- Define the default value -->
<choice value="*">All</choice>
<!-- Define the choices with a populating search -->
<populatingSearch fieldForValue="dbname" fieldForLabel="dbname" earliest="-24h" latest="now">
<![CDATA[index=sqlserver_audit | stats count by dbname]]>
</populatingSearch>
</input>
<!-- Add time range picker -->
<input type="time" searchWhenChanged="true">
<default>
<earliestTime>-25h</earliestTime>
<latestTime>now</latestTime>
</default>
</input>
<!-- Show results as a table -->
<table>
<option name="showPager">true</option>
<option name="count">20</option>
</table>
... View more
06-19-2018
08:02 AM
Hello,
I have the next source that is a form with inputs, but the user input have users with backslash and when i choice the user, it's not show.
How i can to do this?
Example: in the input user i have CUSTOMER\admin_moss
Accesos a BD SQL Server
<!-- Create a text box; token is "series" -->
<!-- label: Label for the text box -->
<!-- default: Default value for the form -->
<!-- suffix: All tokens are followed by a * -->
<!-- If user does not specify text, then search uses '*' -->
<input type="dropdown" token="user" searchWhenChanged="true">
<label>Selecciona un Usuario:</label>
<default>*</default>
<!-- Define the default value -->
<choice value="*">All</choice>
<!-- Define the choices with a populating search -->
<populatingSearch fieldForValue="user" fieldForLabel="user" earliest="-24h" latest="now">
<![CDATA[index=sqlserver_audit | stats count by "user"]]>
</populatingSearch>
</input>
<input type="dropdown" token="estado" searchWhenChanged="true">
<label>Selecciona Resultado Conexión :</label>
<default>*</default>
<!-- Define the default value -->
<choice value="*">All</choice>
<!-- Define the choices with a populating search -->
<populatingSearch fieldForValue="estado" fieldForLabel="estado" earliest="-24h" latest="now">
<![CDATA[index=sqlserver_audit | stats count by estado]]>
</populatingSearch>
</input>
<input type="dropdown" token="dbname" searchWhenChanged="true">
<label>Selecciona Nombre de la BD:</label>
<default>*</default>
<!-- Define the default value -->
<choice value="*">All</choice>
<!-- Define the choices with a populating search -->
<populatingSearch fieldForValue="dbname" fieldForLabel="dbname" earliest="-24h" latest="now">
<![CDATA[index=sqlserver_audit | stats count by dbname]]>
</populatingSearch>
</input>
<!-- Add time range picker -->
<input type="time" searchWhenChanged="true">
<default>
<earliestTime>-25h</earliestTime>
<latestTime>now</latestTime>
</default>
</input>
<!-- Show results as a table -->
<table>
<option name="showPager">true</option>
<option name="count">20</option>
</table>
... View more
- Tags:
- splunk-enterprise
06-12-2018
09:08 AM
@niketnilay, can you explain me or give me advice on how to do it?
Thanks!
... View more
06-12-2018
06:25 AM
Hello, i need to add textbox filter on a splunk ' report.
For example
I have a report with user account of Sql Server and i want to entry the user "PEPITO" in the textbox and that te report only show me the information for the user "PEPITO"
I have Splunk Enterprise 6.0
Many thanks for your help.
... View more
- Tags:
- splunk-enterprise
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
