Tried to follow  splunk.com/pdfs/training/How-to-View-Your-Splunk-Certifications.pdf but cannot access the Support Portal, hence cannot see the My Certifications page. Any help is appreciated. Thank you. Laszlo ... View more

Enabled 3 ESCU rules in ES and mapped them in SSE using Content Introspection on the Manage Bookmarks page. After a Refresh Page all 3 rules showed up as "Successfully Implemented" in the main list of the Manage Bookmarks page. But not in the top statistics (the big numbers at the top of the page). Then changed the bookmark status to "Needs Tuning" for all 3 rules. The top statistics were not updated. After the next Refresh Page the status of the 3 rules changed back to "Successfully Implemented". Not sure if I missed some steps, did them in the wrong order or this is a bug. Any suggestion? Thank you. ... View more

I tried to build a multiple filter and each selected value should filter the other 3 filter's value lists, no matter in which order the filters are used. This worked with a simple XML dashboard and a bunch of post-processing searches. Being a beginner with Sideview, I used a pulldown chain and it works only downstream, as expected 🙂 What should I change to have the desired functionality? Thank you. The pulldown chain: <param name="name">field1</param> <param name="label">Select field1</param> <param name="template">field1="$value$"</param> <param name="float">left</param> <param name="postProcess">|search $field2$ $field3$ $field4$ | dedup $name$ | sort $name$</param> <param name="valueField">$name$</param> <module name="Pulldown"> <param name="name">field2</param> <param name="label">Select field2</param> <param name="template">field2="$value$"</param> <param name="float">left</param> <param name="postProcess">|search $field1$ $field3$ $field4$ | dedup $name$ | sort $name$</param> <param name="valueField">$name$</param> <module name="Pulldown"> <param name="name">field3</param> <param name="label">Select field3</param> <param name="template">field3="$value$"</param> <param name="float">left</param> <param name="postProcess">| search $field1$ $field2$ $field4$ | dedup $name$ | sort $name$</param> <param name="valueField">$name$</param> <module name="Pulldown"> <param name="name">field4</param> <param name="label">Select field4</param> <param name="template">field4="$value$"</param> <param name="float">left</param> <param name="postProcess">| search $field1$ $field2$ $field4$ | dedup $name$ | sort $name$</param> <param name="valueField">$name$</param> <module name="Search" layoutPanel="panel_row1_col1" autoRun="False"> <param name="search"><![CDATA[ $search$ | search $field1$ $field2$ $field3$ $field4$ ]]></param> <module name="Pager"> <module name="Table"> ... View more