Activity Feed
- Got Karma for Search: time limit. 03-25-2024 02:24 AM
- Got Karma for Search: time limit. 06-05-2020 12:45 AM
- Got Karma for Quick Question: Print or PDF. 06-05-2020 12:45 AM
- Got Karma for Sort Fields in Charts. 06-05-2020 12:45 AM
- Got Karma for Sort Fields in Charts. 06-05-2020 12:45 AM
- Got Karma for Quick Question: Chart Scale. 06-05-2020 12:45 AM
- Posted Quick Question: Dashboard with saved search on Dashboards & Visualizations. 05-27-2011 04:43 PM
- Tagged Quick Question: Dashboard with saved search on Dashboards & Visualizations. 05-27-2011 04:43 PM
- Posted Quick Question: eval on Splunk Search. 05-27-2011 03:25 PM
- Tagged Quick Question: eval on Splunk Search. 05-27-2011 03:25 PM
- Posted Re: Quick Question: Charting maximum values on Splunk Search. 04-18-2011 02:34 PM
- Posted Quick Question: Charting maximum values on Splunk Search. 04-18-2011 01:53 PM
- Tagged Quick Question: Charting maximum values on Splunk Search. 04-18-2011 01:53 PM
- Tagged Quick Question: Charting maximum values on Splunk Search. 04-18-2011 01:53 PM
- Tagged Quick Question: Charting maximum values on Splunk Search. 04-18-2011 01:53 PM
- Posted Re: Quick Question: Chart Scale on Dashboards & Visualizations. 04-06-2011 08:27 PM
- Posted Re: Quick Question: Chart Scale on Dashboards & Visualizations. 04-01-2011 04:34 PM
- Posted Quick Question: Chart Scale on Splunk Search. 03-30-2011 09:51 PM
- Tagged Quick Question: Chart Scale on Splunk Search. 03-30-2011 09:51 PM
- Tagged Quick Question: Chart Scale on Splunk Search. 03-30-2011 09:51 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 2 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 2 |
05-27-2011
04:43 PM
I'm trying to add a few panels, which are driven by saved searches, to my dashboard with the simple "Add panel" button. All the saved searches are somewhat similar with a few different parameters. When I run them individually via "Search & Reports", they are fine. However, when I put them all together on my dashboard, one of them works and the rest display this message:
[SimpleResultsTable module] Server
reported HTTP status=400 while getting
mode=events Encountered an error while
reading file
'/home//splunk//run/splunk/dispatch/*.2/prereport_0.csv.gz'.
What's wrong? Thank you.
... View more
- Tags:
- dashboard
05-27-2011
03:25 PM
I have a chart:
Los Angeles New York Boston Washington D.C. Total
5 3 2 10
and
... | eval "x"='New York'+'Washington D.C'
returns x=5. However,
... | eval "x"='New York'+'Boston'+'Washington D.C'
returns an empty value, i.e. x=
How do I get around this problem where 'Boston' is empty?
Thank you.
... View more
- Tags:
- eval
04-18-2011
02:34 PM
Thanks. If I also want a table with all the rows displayed, how can I get around
top limit=n
OR
head n
... View more
04-18-2011
01:53 PM
<option
name="charting.data.count">3</option>
<option
name="charting.chart">bar</option>
The lines above graphs a bar chart with values from the first 3 rows. How can I instead graph the highest 3 values? In addition, how can I scale the axis such that it is normalized with respect to the maximum value?
Thank you.
... View more
03-30-2011
09:51 PM
1 Karma
I have a chart with numbers in millions, e.g. 430938493293.
How do I display it such that it shows 430,938 in millions?
Thank you.
... View more
03-30-2011
09:39 PM
I have a chart with a column that totals up the individual columns. However, when I plot it on a bar graph, the vertical axis is always scaled with respect to the "Total" column and that greatly distorts and misrepresents the data.
A B C Total
Yes 10 27 50 87 : This chart will have a maximum value of ~87
No 20 18 7 45
A B C
Yes 10 27 50 : This chart will have a maximum value of ~50
No 20 18 7
How can I plot a bar graph scaled correctly? Thanks.
... View more
- Tags:
- charting
03-02-2011
07:31 PM
2 Karma
[subsearch]: Search auto-finalized after time limit
reached (60 seconds). Results may be
incomplete.
How can I set/increase the time limit? Thank you.
... View more
- Tags:
- search
01-31-2011
04:03 PM
http://www.splunk.com/base/Documentation/latest/User/Fieldlookupstutorial
Error 'Could not find all of the
specified lookup fields in the lookup
table.' for conf
'access_combined_wcookie' and lookup
table 'product_lookup'.
Is there something wrong with the file? Also, the tutorial doesn't exactly match the current version of Splunk. And when I attempted to unzip the file, I got an error message that says the compressed folder is invalid or corrupted.
Thanks.
... View more
- Tags:
- lookups
12-03-2010
11:35 PM
How do I add a button for date range selection in my script below? Thanks.
<dashboard>
<row>
<event>
<searchString>eventtype=foo</searchString>
</event>
</row>
</dashboard>
... View more
- Tags:
- dashboard
11-17-2010
08:15 PM
Sorry but where is that?
... View more
11-17-2010
06:52 PM
Thanks Stephen!
... View more
11-17-2010
06:15 PM
How do I sum across both rows and columns of my chart? Thank you!
... View more
10-27-2010
02:58 PM
Thanks again Stephen for your help. There is one draw back from your solution. I want to sort for a specific range of dates and the data often does not contain "San Francisco". The code given above will create a "San Francisco" field even though no applicable data is available.
... View more
10-27-2010
02:50 PM
I typed with the "space" and "vertical bar" character on the keyboard. If you meant in Splunk, I just used the commands below.
... View more
10-08-2010
09:30 PM
2 Karma
I have the following chart:
City/Day | Friday | Monday | Thursday | Tuesday | Wednesday
Chicago | Yes | Yes | No | Yes | Yes
Dallas | No | Yes | No | No | No
New York | No | No | Yes | No | Yes
How do I sort or re-organize the columns such that it's not in alphabetical order.
i.e.:
City/Day | Monday | Tuesday | Wednesday | Thursday | Friday
Chicago | Yes | Yes | Yes | No | Yes
Dallas | Yes | No | No | No | No
New York | No | No | Yes | Yes | No
Thank you!
... View more
- Tags:
- field-extraction
- sort
10-08-2010
08:30 PM
The default lists the fields in alphabetical order. What's the syntax if I want to list them in a non-alphabetical order? i.e.,
City/Yes/No
San Francisco/0 /1
Chicago/0 /1
Dallas/1 /0
Los Angeles/1 /0
New York/2 /0
Thanks again!
... View more
10-05-2010
03:06 PM
1 Karma
When I print one of my charts with
Actions->Print...
or
Ctrl+P
,the bar or column charts came out to be very very small.
How can I modify the size? Thank you!
... View more
- Tags:
09-15-2010
08:49 PM
I would like to drilldown on a cell of a chart in the dashboard and use that value to re-search and display in a different panel? How should I go about doing that? Thank you.
... View more
- Tags:
- drilldown
09-07-2010
07:09 PM
Hi, I have a few columns of data and I would like to generate a pivot table that is similar to the one in Excel.
As an example:
Date/City/Day/Response
-----------------
09-01/New York/Monday/Yes
09-05/New York/Friday/Yes
09-01/Los Angeles/Tuesday/Yes
09-07/Chicago/Monday/No
08-28/San Francisco/Wednesday/No
08-23/Dallas/Sunday/Yes
How can I organize/sort these data so it reports the following for all days:
City/Yes/No
Chicago/0 /1
Dallas/1 /0
Los Angeles/1 /0
New York/2 /0
San Francisco/0 /1
And reports the following for Monday only:
City/Yes/No
Chicago/0 /1
New York/1 /0
Thanks!
... View more
