About chrisyounger

chrisyounger · ‎10-17-2020

I have finally added this functionality. Please download version 1.4.10 and let me know how you go. https://splunkbase.splunk.com/app/4657/

chrisyounger · ‎10-16-2020

I have fixed this bug in version 1.0.3 https://splunkbase.splunk.com/app/5153/ Thanks for taking the time to report this issue

chrisyounger · ‎10-16-2020

I just released version 1.0.3 which allows for customising the colours: https://splunkbase.splunk.com/app/5153/ Let me know if you find any problems!

chrisyounger · ‎10-14-2020

Yeah no worries, I will get this done in the next few days along with all the other changes I need to do. Thanks for the suggestion 🙂

chrisyounger · ‎10-06-2020

Hi ebythomaspanick Yes this seems like a good idea. Leave it with me and I will try get it done in the next week or two. I will update here once complete. Thanks

chrisyounger · ‎10-01-2020

hmm ok interesting. This should be fixable. Thanks for taking the time to report it. Ill reply here when I get it fixed, but I am on holidays at the moment so it might take a week or two.

chrisyounger · ‎09-25-2020

Thanks bowsmana these are some great ideas. I am just on holidays at the moment but I will try get this sorted out as soon as possible. Thanks for your kind words.

chrisyounger · ‎07-26-2020

I have updated the Flow Map viz (to version 1.4.9) so that you can now stack nodes underneath everything else by setting the "order" field to a negative value. https://splunkbase.splunk.com/app/4657/

chrisyounger · ‎07-06-2020

Hi @ebythomaspanick This is a bit of a limitation of the viz that getting specific layering can be difficult/impossible. You can ensure correct order of nodes only. On your "node" data rows, include an "order" field. This is the stacking order of the node. Defaults to 50. Lower numbers stack under higher numbers. Unfortunately nodes will overlay link labels and there isnt an easy way to fix this. I will try update the code soon to allow for nodes to appear in the background. All the best, Chris

chrisyounger · ‎06-14-2020

The Number Display VIz https://splunkbase.splunk.com/app/4537/ allows you to do an unlimited tiled trellis view. Disclaimer: I wrote this app

chrisyounger · ‎06-09-2020

Thank you for reporting this problem. I figured out what was causing the problem and I have pushed a new version to Splunkbase. OK Please download version 1.4.9 from here: https://splunkbase.splunk.com/app/4353/ Best of luck and let me know if you have any more problems

chrisyounger · ‎06-04-2020

can you do the same commands as before bin\splunk cmd python and now try running this command: import os, subprocess; env_copy = os.environ.copy(); p = subprocess.Popen(['bin\\splunk', 'btool', 'check', '--debug'], stdout=subprocess.PIPE, stderr=subprocess.STDOUT, shell=False, env=env_copy); o = p.communicate(); o Thanks

chrisyounger · ‎06-04-2020

I am sorry but this is unfortunatly this is not possible. Ill note it down to my change backlog but its unlikely I will get time to add an option for this. If many people comment/vote on this answer then I will prioritise it. All the best, Chris

chrisyounger · ‎06-04-2020

Thanks for providing this output. The only anomaly I can find is that there is an extra comma appearing after the RANDFILE key. I have no idea how this has entered into the OS environment but it might indicate an environment variable with no name.. I wonder if you can find it by right click "This PC" > "Properties" > Environment variables > check both boxes. You also didn't mention what version of Splunk you are using, but some of my research indicates this might resolve if you use Python 3 - this will happen if you are using Splunk 8 and above. All the best and let me know what you find out. Cheers. Chris

chrisyounger · ‎06-03-2020

Hmm I think that your shell environment has a unicode string which is causing a problem with the application startup. Can you please open a "cmd" shell as the local administrator, then run this command from the SPLUNK_HOME directory: bin\splunk cmd python then you should get a new prompt that looks like ">>>". Now type: import os; os.environ and this will dumb a large bunch of text. Can you paste it here? I expect one of the strings will be prefixed with a "u" like so: u'some_value' Cheers, Chris.

chrisyounger · ‎06-01-2020

I am sorry but I have no thoughts about why you would not be receiving any data at all. It sounds like the script is not being started correctly by Splunk itself. As soon as the script starts it will at the very least print the system time. I would check that the input is enabled, but it sounds like you have probably already done this.

chrisyounger · ‎05-18-2020

Yeah by injecting your own HTML with CSS you can do anything you want

chrisyounger · ‎05-18-2020

Hi @dshatto If you have followed all the instructions but the dashboard is empty, it is probably because you changed the index where the logs are stored. The dashboard expects the logs to be in the _internal index. If you used something else, edit the dashboard and change the searche/s to use that index instead. Hope this helps, Chris

chrisyounger · ‎05-18-2020

Yeah unfortunatly there isn't a way to do this at the moment sorry. You could try put one node over the top of another and just change the size? Actually probably a better way would be to enable "HTML in labels" in advanced settings, and then you can pass a small block of HTML formatted text, something like eval label = "<div style=\"border: 2px solid " + my_color_variable + "\">" + some node contents + "</div>" This basically gives you infinite customizability but it is a bit ugly.

chrisyounger · ‎05-15-2020

And here is a run anywhere example of Sunburst viz: <dashboard theme="dark"> <label>Sunburst viz setting token</label> <row> <panel> <viz type="sunburst_viz.sunburst_viz"> <search> <query> | makeresults count=10 | streamstats count as id | eval title = "Item " + id | table title id</query> </search> <option name="drilldown">none</option> <option name="refresh.display">progressbar</option> <option name="sunburst_viz.sunburst_viz.breadcrumbs">hide</option> <option name="sunburst_viz.sunburst_viz.color">schemeCategory10</option> <option name="sunburst_viz.sunburst_viz.colormode">root</option> <option name="sunburst_viz.sunburst_viz.labelcolor">#000000</option> <option name="sunburst_viz.sunburst_viz.labels">show</option> <option name="sunburst_viz.sunburst_viz.labelsize">100</option> <option name="sunburst_viz.sunburst_viz.labelwidth">100</option> <option name="sunburst_viz.sunburst_viz.mode">token</option> </viz> </panel> </row> <row> <panel> <title>you clicked item: $sunburst_viz_title$ </title> </panel> </row> </dashboard>

Posts	511
Solutions	131
Karma Given	100
Karma Received	156
Member Since	‎06-12-2018

Online Status	Offline
Date Last Visited	‎11-24-2020 03:40 PM

In the Splunk Add-on for ServiceNow, how do set ex...

Changing formatter.html without restarting splunk

Re: How can I check the CPU utilization of the SH ...

Limit on number of Services in ITSI

Colors for visualisation

Re: Flow Map Viz Token Reset

Re: Dendrogram app drilldown

Re: Dendrogram viz default stroke colour for undef...

Re: Dendrogram viz default stroke colour for undef...

Re: Flow Map Viz Token Reset

Re: Dendrogram app drilldown

Re: Dendrogram viz enhancements

Re: Flow Map Viz Node Layer Order

Re: Flow Map Viz Node Layer Order

Re: Is there a way to display more than 20 charts ...

Re: Config Explorer error

Re: Config Explorer error

Re: Sunburst Viz: How to increase number of levels...

Re: Config Explorer error

Re: Config Explorer error

Re: Getting "No results found error" for status da...

Re: Dynamically edit node border color?

Re: Getting "No results found error" for status da...

Re: Dynamically edit node border color?

Re: Configuring drilldown in Sunburst Viz & Number...