Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About jithinmathew
jithinmathew
Explorer
Member since:
08-14-2018
06-05-2020
Community Statistics
| Posts | 12 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 1 |
| Member Since | 08-14-2018 |
Activity Feed
- Karma Re: How do I place a Panel / Row at the top of My Splunk Dashboard? Need XML/HTML Help for niketn. 06-05-2020 12:49 AM
- Karma Re: How do I place a Panel / Row at the top of My Splunk Dashboard? Need XML/HTML Help for lucasfbeinjamin. 06-05-2020 12:49 AM
- Got Karma for Re: How do I place a Panel / Row at the top of My Splunk Dashboard? Need XML/HTML Help. 06-05-2020 12:49 AM
- Posted Re: How do I update a dropdown token (and all associated nested tokens) upon pressing the submit button? on Dashboards & Visualizations. 09-06-2018 06:45 PM
- Posted Re: How do I place a Panel / Row at the top of My Splunk Dashboard? Need XML/HTML Help on Dashboards & Visualizations. 09-05-2018 06:59 PM
- Posted Re: How do I place a Panel / Row at the top of My Splunk Dashboard? Need XML/HTML Help on Dashboards & Visualizations. 08-28-2018 09:56 PM
- Posted Re: How do I place a Panel / Row at the top of My Splunk Dashboard? Need XML/HTML Help on Dashboards & Visualizations. 08-28-2018 05:18 PM
- Posted How do I place a Panel / Row at the top of My Splunk Dashboard? Need XML/HTML Help on Dashboards & Visualizations. 08-26-2018 10:36 PM
- Tagged How do I place a Panel / Row at the top of My Splunk Dashboard? Need XML/HTML Help on Dashboards & Visualizations. 08-26-2018 10:36 PM
- Tagged How do I place a Panel / Row at the top of My Splunk Dashboard? Need XML/HTML Help on Dashboards & Visualizations. 08-26-2018 10:36 PM
- Posted Re: Is it possible to limit the number of events recieved from a particular index? on Dashboards & Visualizations. 08-23-2018 08:29 PM
- Posted Re: Dashboard Search Bug on Dashboards & Visualizations. 08-23-2018 08:18 PM
- Posted Is it possible to limit the number of events recieved from a particular index? on Dashboards & Visualizations. 08-23-2018 06:23 PM
- Tagged Is it possible to limit the number of events recieved from a particular index? on Dashboards & Visualizations. 08-23-2018 06:23 PM
- Posted Dashboard Search Bug on Dashboards & Visualizations. 08-23-2018 06:01 PM
- Tagged Dashboard Search Bug on Dashboards & Visualizations. 08-23-2018 06:01 PM
- Tagged Dashboard Search Bug on Dashboards & Visualizations. 08-23-2018 06:01 PM
- Tagged Dashboard Search Bug on Dashboards & Visualizations. 08-23-2018 06:01 PM
- Tagged Dashboard Search Bug on Dashboards & Visualizations. 08-23-2018 06:01 PM
- Posted Re: Need to create a Dashboard which can select multiple fields based on user selection of checkbox/ radio button. on Splunk Search. 08-20-2018 09:42 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-06-2018
06:45 PM
@niketnilay By any chance, is there anyway I can use the inbuilt Splunk functionality of the "ClearButton" and create my own button to reference this?
For example, I want to be able to use the function of the Clear Button that is displayed on dropdowns (the little cross icon) and place it into my own inbuilt button.
Reasoning behind this is that even though I set the dashboard to autorun and set the searches to search on change, it changes for the first time only. Any other text input after the first search does not update until I press on that "Clear Button". Hence, I want to grab that same functionality and place it into a custom button that is called submit.
Thanks!
... View more
09-05-2018
06:59 PM
1 Karma
I've made it float to right for now. Suppose I can't do much else unless of course I went through some Java Script and made my own submit button. Thank you for your help. Appreciate it.
... View more
08-28-2018
09:56 PM
@niketnilay
Hey!
This works great!! I had the idea of creating panels but I didn't know if the submit button would still work in that case. Didn't know how to re position it either. Only problem that I currently have with the code provided is that if I re-size the page the submit button position flys around.
I'm still very new to Splunk / XML so this was very helpful. Thank you so much!
... View more
08-28-2018
05:18 PM
Hey @lucasfbeinjamin ,
here is the XML.
<form>
<search id="base_name">
<query>
<![CDATA[
| rest /services/authentication/current-context splunk_server=local | eval firstname="" | eval lastname="" | rex field=realname "^(?<lastname>[^,]+),(?<firstname>.+)?$" | eval firstname=if(firstname=="",realname,firstname) | eval name= firstname . " " . lastname | fields name
]]>
</query>
<done>
<set token="username">$result.name$</set>
</done>
</search>
<label>Experiment</label>
<fieldset submitButton="true" autoRun="false">
<input type="time" token="field1">
<label>TimePicker</label>
<default>
<earliest>-60m@m</earliest>
<latest>now</latest>
</default>
</input>
<input type="dropdown" token="multisearch" searchWhenChanged="false">
<label>Number of Searches</label>
<choice value="1">1</choice>
<choice value="2">2</choice>
<change>
<condition value="1">
<set token="hideSearch2">2</set>
</condition>
<condition value="2">
<unset token="hideSearch2"></unset>
</condition>
</change>
<default>1</default>
<initialValue>1</initialValue>
</input>
<input type="radio" token="radioSearchFilter1" searchWhenChanged="false">
<label>Search Method 1</label>
<choice value="">Simple Search</choice>
<choice value="foo=">foo</choice>
<choice value="bar=">bar</choice>
<default></default>
</input>
<input type="text" token="searchString1" searchWhenChanged="false">
<label>Search 1</label>
<default>*</default>
<prefix>$radioSearchFilter1$"*</prefix>
<suffix>*"</suffix>
</input>
<input type="radio" token="radioSearchFilter2" searchWhenChanged="false" rejects="$hideSearch2$">
<label>Search Method 2</label>
<choice value="">Simple Search</choice>
<choice value="Foo=">Foo</choice>
<choice value="Bar=">Bar</choice>
<default></default>
</input>
<input type="text" token="searchString2" searchWhenChanged="true" rejects="$hideSearch2$">
<label>Search 2</label>
<default>*</default>
<prefix>$radioSearchFilter2$"*</prefix>
<suffix>*"</suffix>
</input>
<html>
<div>
<a href="YourLink.com" class="reset_btn">Reset Dashboard</a>
<style>
.reset_btn{
border-radius: 5px;
font-size: 12px;
font-family:"Roboto","Droid","Helvetica Neue",Helvetica,Arial,sans-serif;
text-decoration: none;
background-color: #5D9933;
color: #FFFFFF;
padding: 6px 8px 6px 8px;
border-top: 1px solid #CCCCCC;
border-right: 1px solid #333333;
border-bottom: 1px solid #333333;
border-left: 1px solid #CCCCCC;
}
</style>
</div>
</html>
</fieldset>
<row>
<panel>
<title>Welcome, $username$!</title>
<html>
</html>
</panel>
</row>
<row>
<panel>
<event>
<title>Raw Events</title>
<search>
<query>index="foo"
| convert ctime(_time) AS TimeStamp
| search $searchString1$ $searchString2$
| table TimeStamp
| sort _time desc
</query>
</search>
</event>
</panel>
</row>
</form>
... View more
08-26-2018
10:36 PM
Hi all,
I want to place a Panel / Row above the Fieldset tag. By default Fieldset always appears at the top of the page, is there anyway to change this ? I want a Panel right at the top of my dashboard before any search fields etc.
I have also created a reset dashboard button so that I wish to display AFTER the submit button. Is this possible?
Please view the attached image for reference. For example, I want that row that says welcome user AT THE TOP.
... View more
08-23-2018
08:29 PM
Hi Adonio,
Thanks for the suggestion.
Is there anyway to append that to this clause:
index="Foo" OR index="bar" source="FOO" OR source="BAR" .
I have tried to do this:
(index=foo source="FOO" | head 2) OR (index=bar source="BAR" | head 2) but this did not seem to work 😞
... View more
08-23-2018
08:18 PM
Apologies, here is the source code:
Experiment
<input type="time" token="field1">
<label>TimePicker</label>
<default>
<earliest>-60m@m</earliest>
<latest>now</latest>
</default>
</input>
<input type="dropdown" token="multisearch" searchWhenChanged="false">
<label>Number of Searches</label>
<choice value="1">1</choice>
<choice value="2">2</choice>
<change>
<condition value="1">
<set token="hideSearch2">2</set>
</condition>
<condition value="2">
<unset token="hideSearch2"></unset>
</condition>
</change>
<default>1</default>
<initialValue>1</initialValue>
</input>
<input type="radio" token="radioSearchFilter1" searchWhenChanged="false">
<label>Search Method 1</label>
<choice value="">Simple Search</choice>
<choice value="foo=">foo</choice>
<choice value="bar=">bar</choice>
<default></default>
</input>
<input type="text" token="searchString1" searchWhenChanged="false">
<label>Search 1</label>
<default>*</default>
<prefix>$radioSearchFilter1$"*</prefix>
<suffix>*"</suffix>
</input>
<input type="radio" token="radioSearchFilter2" searchWhenChanged="false" rejects="$hideSearch2$">
<label>Search Method 2</label>
<choice value="">Simple Search</choice>
<choice value="Foo=">Foo</choice>
<choice value="Bar=">Bar</choice>
<default></default>
</input>
<input type="text" token="searchString2" searchWhenChanged="true" rejects="$hideSearch2$">
<label>Search 2</label>
<default>*</default>
<prefix>$radioSearchFilter2$"*</prefix>
<suffix>*"</suffix>
</input>
<panel>
<event>
<title>Raw Events</title>
<search>
<query>index="foo"
| convert ctime(_time) AS TimeStamp
| search $searchString1$ $searchString2$
| table TimeStamp
| sort _time desc
$field1.earliest$
$field1.latest$
TimeStamp
none
progressbar
... View more
08-23-2018
06:23 PM
Hi all,
I wish to make a dashboard that sort of shows an End to End flow of transactions. For this, I need to be using multiple indexes and source types. I only want to display the top 2 or 5 events grabbed from any index.
For example:
Index = foo
Index = bar
I want to grab the last 2 events from foo and the last 2 events from bar putting them both into the same table view.
... View more
- Tags:
- dashboard
08-23-2018
06:01 PM
Hi all,
I have created a dashboard which takes input from multiple searches based on the radio button selected. The problem is, when I select a different radio button, the search does not change UNLESS I delete the text in the search box and Re-enter it. View the picture below for an example.
If I click simple search and hit submit, it works as intended. However, once I select another radio field such as serviceID, the search does not change unless I manually re-enter the *.
NOTE: This seems to work before I had the multiple searches included. Logic behind the multiple searches is so that users are able to search for fields that include both ServiceID and Error Text for example.
... View more
08-20-2018
09:42 PM
Hmm no, for example, I want the user to be able to search both splunkd and KVSTORE at the same time instead of one each.
... View more
08-20-2018
05:27 PM
Hi all,
I Need to create a Dashboard which can select multiple extracted fields based on user selection of checkbox/ radio button.
For example, I want the user to be able to search with both fields ServiceID AND Username. I currently have the single search functionality working but I cant seem to think of how I will pass multiple fields.
Will greatly appreciate any help with this.
... View more
08-14-2018
09:20 PM
Hi all,
I have created a dashboard with a search parameter that grabs fields as per the chosen radio button. However, I want to make this a little user friendly so that the chosen field can display in either the Search Field or Search Panel Name.
Please view the attached image:
Any help would be greatly appreciated! Thanks.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
