Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About praspai
praspai
Path Finder
Member since:
07-30-2015
06-05-2020
Community Statistics
| Posts | 32 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 5 |
| Member Since | 07-30-2015 |
Activity Feed
- Got Karma for Re: Dynamic input in Dashboard Panel. 09-24-2021 11:56 AM
- Got Karma for How can I build a regex to extract xml field value?. 06-05-2020 12:49 AM
- Got Karma for How to hide a field in a chart?. 06-05-2020 12:47 AM
- Got Karma for How to hide a field in a chart?. 06-05-2020 12:47 AM
- Got Karma for How do I find the delta with the previous count value for each host?. 06-05-2020 12:47 AM
- Posted Re: Dynamic input in Dashboard Panel on Dashboards & Visualizations. 08-29-2018 02:38 AM
- Posted Can you assign input text value depending on input checkbox in a dashboard? on Dashboards & Visualizations. 08-27-2018 06:05 AM
- Tagged Can you assign input text value depending on input checkbox in a dashboard? on Dashboards & Visualizations. 08-27-2018 06:05 AM
- Posted How to put query result in token? on Dashboards & Visualizations. 08-27-2018 04:17 AM
- Posted Re: How to concatenate results from the same field? on Splunk Search. 08-24-2018 09:39 AM
- Posted How to concatenate results from the same field? on Splunk Search. 08-24-2018 09:20 AM
- Tagged How to concatenate results from the same field? on Splunk Search. 08-24-2018 09:20 AM
- Posted Re: Changing Display columns depending on sourcetype on Dashboards & Visualizations. 08-24-2018 07:14 AM
- Posted Re: Changing Display columns depending on sourcetype on Dashboards & Visualizations. 08-24-2018 06:26 AM
- Posted Changing Display columns depending on sourcetype on Dashboards & Visualizations. 08-24-2018 05:49 AM
- Posted Re: Dynamic input in Dashboard Panel on Dashboards & Visualizations. 08-24-2018 03:06 AM
- Posted Re: Dynamic input in Dashboard Panel on Dashboards & Visualizations. 08-23-2018 01:38 AM
- Posted Dynamic input in Dashboard Panel on Dashboards & Visualizations. 08-22-2018 05:42 AM
- Posted Re: How to have one event per XML file and how to read it completely? on Dashboards & Visualizations. 08-12-2018 11:59 PM
- Posted How to have one event per XML file and how to read it completely? on Dashboards & Visualizations. 08-12-2018 11:41 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 |
08-29-2018
02:38 AM
Hi @renjith.nair,
Do you think we can script it in Javascript ?
Best Regards
... View more
08-27-2018
06:05 AM
Hi,
We want to assign a value to input text box depending on checkbox values selected in the dashboard. User should also able to update the values in text box.
We want user able to update the search condition, depending on attributes selected. Search results will be displayed depending on the search condition.
Is it possible with splunk dashbord ?
... View more
08-27-2018
04:17 AM
Hi,
I want to out result from query into token. How can I do that.
<query>|inputlookup SourceType_Attributes | where Sourcetype=$source_type$ | table field1
<done>
<condition match=" '.resultCount' >= 1">
<set token="t_query_fields">$'result.field1'$</set>
</condition>
</done>
I am not sure I have a right syntax
... View more
08-24-2018
09:39 AM
Thanks. It works.
... View more
08-24-2018
09:20 AM
Hi,
I want to concatenate results from same field into string. How can I do that?
e..g
|inputlookup user.csv| table User
User
------------
User 1
User 2
User 3
Users = User 1+User2+User3
... View more
08-24-2018
07:14 AM
Hi @kamlesh_vaghela ,
thanks for the reply.
Your example works correctly. But in the case of fields from the lookup, its taking only first row to display. It's not displaying all columns mentioned in the lookup table.
... View more
08-24-2018
06:26 AM
It's not working 😞 . It just displays the events. I want to display it in the table.
... View more
08-24-2018
05:49 AM
In Dashboard depending on sourcetype selected in the dropdown list, we want to display different fields on the dashboard. Since fields can change in the future we have created a lookup for it. So depending on source type the lookup should be queried and get the display columns. I am trying something like below but doesn't seem to work
index=test sourcetype="XXX"|table [|inputlookup SourceType-Attributes sourcetype="XXX" | fields Attribute]
... View more
08-24-2018
03:06 AM
Thanks @renjith.nair ...
I have created a lookup table which maintains the SourceType and attributes .
Can I create these text fields dynamically for each attribute for source type ?
Best Regards,
Prashant
... View more
08-23-2018
01:38 AM
1 Karma
Hi @renjith.nair ,
Thanks for your response.
We have different attributes for each source type and provide search on those attributes rather free search on raw data.
Say we have a SourceType as Order. We have different attributes on Order like OrderNumber, Customer ID, Item Number, Item Type. We want to provide search on these attributes. so want to provide different input boxes for these attributes.
Another source type is Invoice which have different attributes than Order. so inputs on form should dynamically changed as per source type.
Hope I am able to explain it.
... View more
08-22-2018
05:42 AM
Hi,
We want to create a dashboard with Dynamic inputs. Like we will provide a dropbox with SourceType. Depending upon the value of Source type different input text boxes should be provided so that user can enter fields and search results will be provided.
Different input fields dynamically appear on Dashboard depending on the source type.
Thanks,
Prashant
... View more
- Tags:
- splunk-enterprise
08-12-2018
11:59 PM
yes , single event per file.
<SaveRetailItemSalesLocation>
<TransationInfo>
<SenderID>XXX</SenderID>
<ReceiverID>XXX</ReceiverID>
<Status>DONE</Status>
<UserStatus>XXX</UserStatus>
<TransactionDate>XXX</TransactionDate>
</TransationInfo>
<impl:Header>
</impl:Header>
<impl:RetailItemList>
<impl:VoRetailItem>
<impl:ItemType>XXX</impl:ItemType>
<impl:ItemNo>XXX</impl:ItemNo>
<impl:ClassUnitKey>
<impl:ClassType>XXX</impl:ClassType>
<impl:ClassUnitType>XXX</impl:ClassUnitType>
<impl:ClassUnitCode>XXX</impl:ClassUnitCode>
</impl:ClassUnitKey>
<impl:RetailItemSalesLocationList>
<impl:VoRetailItemSalesLocation>
<impl:SalesLocationId>XXX</impl:SalesLocationId>
<impl:RecommendationRank>XXX</impl:RecommendationRank>
<impl:ValidFromDateTime>XXX</impl:ValidFromDateTime>
<impl:ValidToDateTime>XXX</impl:ValidToDateTime>
<impl:UpdateDateTime>XXX</impl:UpdateDateTime>
</impl:VoRetailItemSalesLocation>
</impl:RetailItemSalesLocationList>
</impl:VoRetailItem>
</impl:RetailItemList>
</SaveRetailItemSalesLocation>
... View more
08-12-2018
11:41 PM
Hi,
We have kept the monitoring on the directory where XML files are placed. We would like to have one event per XML file but its getting split into multiple events. Also only few lines of xml file is getting into splunk.
Can anyone suggest how we can get the complete file in Splunk ?
Thanks,
Prashant
... View more
07-10-2018
05:33 AM
I want to extract these values as fields and search will be based on it. I didn't find the way to define it while adding the data source. I looked into it but I thought I can use these commands only in search.
... View more
07-10-2018
05:18 AM
1 Karma
I want to extract XML field value ItemType and ItemNo from following XML. How can I build the Regular expression?
<impl:RetailItemList>
<impl:VoRetailItem>
<impl:ItemType>PPT</impl:ItemType>
<impl:ItemNo>123456</impl:ItemNo>
<impl:VoClassUnitKey>
<impl:ClassType>BU</impl:ClassType>
<impl:ClassUnitType>ST</impl:ClassUnitType>
<impl:ClassUnitCode>0001</impl:ClassUnitCode>
</impl:VoClassUnitKey>
</impl:VoRetailItem>
</impl:RetailItemList>
... View more
12-02-2016
05:05 AM
I want to change the group by clause in search command depending upon selected value in drop-down box in dashboard
e.g. Selected value is "All" then group by clause should look like timechart sum(x) group by host
else
Selected value is "Environment" then group by clause should look like timechart sum(x) group by environment
Thanks,
Prashant
... View more
10-23-2015
07:31 AM
hi,
We have scheduled scripts. I don't want to create a scheduled script but run the script on demand. i.e. run the script just before creating a report so that I have updated data in the index.
Is it possible in splunk ?
thanks ,
... View more
10-20-2015
07:25 AM
Its perfectly working in searches but not in Dashboard. Its not picking value from time picker
... View more
10-19-2015
07:09 AM
Hi,
I want the time span in a search to adjust based upon the time picker value.
i.e.
time picker is day, then span=1h
month, then span=1d
year, then span=1month
thanks ..
... View more
