Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About rbardonetorian
rbardonetorian
Path Finder
Member since:
11-10-2015
06-05-2020
Community Statistics
| Posts | 31 |
| Solutions | 2 |
| Karma Given | 1 |
| Karma Received | 2 |
| Member Since | 11-10-2015 |
Activity Feed
- Karma Re: How to NOT open a new window when executing a workflow action? for ddrillic. 06-05-2020 12:48 AM
- Got Karma for How to change the default color of dashboards - footers?. 06-05-2020 12:48 AM
- Got Karma for How to trim off characters before "\". 06-05-2020 12:48 AM
- Posted Re: How to upgrade Advanced XML file to simple XML file ? on Dashboards & Visualizations. 04-13-2020 01:15 PM
- Posted Re: Active Directory Ldap failing with Error ". on All Apps and Add-ons. 11-12-2019 12:51 PM
- Posted Re: How to trim off characters before "\" on Splunk Search. 06-23-2017 10:04 AM
- Posted Re: How to trim off characters before "\" on Splunk Search. 06-21-2017 12:13 PM
- Posted How to trim off characters before "\" on Splunk Search. 06-21-2017 11:52 AM
- Tagged How to trim off characters before "\" on Splunk Search. 06-21-2017 11:52 AM
- Tagged How to trim off characters before "\" on Splunk Search. 06-21-2017 11:52 AM
- Posted Re: Why are my forms that link to an external URL not working? on Dashboards & Visualizations. 05-01-2017 10:03 AM
- Posted Re: Why are my forms that link to an external URL not working? on Dashboards & Visualizations. 05-01-2017 09:57 AM
- Posted Why are my forms that link to an external URL not working? on Dashboards & Visualizations. 05-01-2017 09:26 AM
- Tagged Why are my forms that link to an external URL not working? on Dashboards & Visualizations. 05-01-2017 09:26 AM
- Posted Re: inputs.conf wait time t monitor file on Getting Data In. 04-25-2017 12:00 PM
- Posted inputs.conf wait time t monitor file on Getting Data In. 04-25-2017 07:51 AM
- Tagged inputs.conf wait time t monitor file on Getting Data In. 04-25-2017 07:51 AM
- Posted Re: JSON + KV Extraction on Splunk Search. 02-16-2017 06:14 AM
- Posted click jacking protection options? on Splunk Search. 02-09-2017 08:01 AM
- Posted Re: iframes and views broken after Splunk 6 upgrade on Dashboards & Visualizations. 02-09-2017 07:04 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 |
04-13-2020
01:15 PM
convert from XML to html i believe is a current capability from the create dashboard UI.
... View more
11-12-2019
12:51 PM
any updates? I have same issue.
... View more
06-21-2017
12:13 PM
I think I just stumbled across the cleanest output related syntax...
| eval fieldA=replace(fieldA,"(\w+)\\\\","+") | eval fieldA=ltrim(tostring(fieldA),"+")
thanks all!!
... View more
06-21-2017
11:52 AM
1 Karma
Hello,
Could someone please advise of the most efficient way to trim off everything to the left of a "\" character in a field value?
Running into the escape character thing currently.
Have tried rex and its just too clumsy.
I would like to use something like: eval fieldA=ltrim(tostring(fieldA),"0")
-- putting the "\" characters in place of the "0" above proves no results.
Any ideas?
Thank you!
... View more
05-01-2017
10:03 AM
This is / was EXACTLY the problem. (Security Feature) I tried HTTPS and it passed just fine.
Thanks all. Looks like I need to get https enabled on my reports server.
... View more
05-01-2017
09:57 AM
I have also tried:
<drilldown>
<link target="blank"><![CDATA[http://10.0.1.40/report/$row.ID$/summary/]]></link>
</drilldown>
With no joy..
The result is a new page opening and chopping off the front piece of the URL that should have been passed.
ie: https://report/14/summary/
As you see the IP address is missing and it defaulted back to the HTTPS protocol. Is this a security feature of some sort keeping all tranmissions HTTPS if the Splunk server is HTTPS? (yes my Splunk server has HTTPS enabled)
Thanks!
... View more
05-01-2017
09:26 AM
All,
After following the help page located here: http://docs.splunk.com/Documentation/Splunk/6.5.3/Viz/Dynamicdrilldownindashboardsandforms#Form_linking_to_an_external_website
I am still unable to be directed to external site (of splunk app).
My Code used:
<option name="count">8</option>
<option name="height">400</option>
<option name="drilldown">row</option>
<option name="refresh.display">none</option>
<option name="rowNumbers">0</option>
<option name="showPager">1</option>
<option name="fontColor">#ccc</option>
<drilldown>
<link target="_blank">http://10.0.1.40/report/$row.ID$/summary/</link>
</drilldown>
I have also tried :
<![CDATA[[ http://10.0.1.40/report/$row.ID$/summary/ ]]>
No joy...
Any help is appreciated!
V. 6.5.3
... View more
04-25-2017
07:51 AM
Hello,
I am running into an issue where the 6.5.3 UF does not wait long enough on the monitored file as the file sometimes takes 400 secs to fully have been reported upon and close.
Looking at the inputs.conf man page I notice "followTail" and "time_before_close" configurations.
Could someone shed some light as to what "time_before_close = " really does?
Will this "time_before_close = " configuration set the the UF to wait until my specified time to read the file in its entirety?
Thank you!
... View more
02-09-2017
08:01 AM
Hello Splunksters,
Well I am trying to keep a bit of security to avoid click-jacking, though find myself in a pickle..
I have found this link: https://answers.splunk.com/answers/104277/iframes-and-views-broken-after-splunk-6-upgrade.html
Though I would like to make slight mod and allow for a specific site to have access and not just allow all with the "False" setting.
Any ideas??
Could I use the " # external UI URIs " setting in the web.conf somehow?
Thanks!
... View more
02-09-2017
07:04 AM
Hello all,
As a follow up.. Would there be a config available to keep the security, though allow ONLY a specific address?
IE: Keep the setting "x_frame_options_sameorigin = [True ]" with an exception set to allow x.x.x.x\16 OR x.x.x.x OR URL string
Thanks!!
... View more
02-08-2017
02:21 PM
solving with URLloader from sideview....
... View more
02-07-2017
02:39 PM
Hello All,
I am having some trouble getting my head wrapped around the use of the required library to pull the passed token value from the URL string. I have seen this page: link text and I still dont get it.
I would like to call a page of my app with a token specified. ie: mylongserverurlstring?token=passedvalue
Then, what I am having an issue with is understanding the proper use of the splunkJS library to enable token extraction functionality.
I need something that clearly spells out how to use : splunkjs.mvc.Components.get('default').set('mytoken', value) library.
Currently my JS looks like:
...
<iframe src=$token|s$ id="myframe"></iframe>
<script type="text/javascript">
require([
"splunkjs/mvc",
"splunkjs/mvc/utils",
"splunkjs/mvc/tokenutils",
"underscore",
"jquery"
],
function(
mvc,
utils,
TokenUtils,
_,
$
){
var pageloading = true;
splunkjs.mvc.Components.getInstance("default").set(token);
var iframe=document.getElementById('myframe');
window.open(url, "myframe");
</script>
My goal is to pull the token from the initial URL string and plug it into the iframe src.
Thank you for the help!!
... View more
01-30-2017
12:00 PM
PS. if anyone can tell me where to find a legend / definition to what all the options are for this app, it would be a great way for extra points. Thx!! 😉
... View more
01-30-2017
11:56 AM
All,
I have been trying to get this Custom Cluster Map Visualization app to work properly. So far I can see clusters with small number that represent a count comprised of the general lat/lon. When a cluster goes above "1", I can not drilldown like all the other clusters allow me to do. Could someone shed some light? Thank you!!
<row>
<panel>
<title>T</title>
<viz type="viz_clustermap.clustermap">
<search>
<query>index="index" sourcetype="T" dest_ip="*" | head 10000 | iplocation dest_ip | geostats latfield=lat longfield=lon count by dest_ip | sort-count</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
</search>
<option name="height">600</option>
<option name="refresh.display">none</option>
<option name="viz_clustermap.clustermap.drilldown">all</option>
<option name="viz_clustermap.clustermap.lat">30.032974</option>
<option name="viz_clustermap.clustermap.lng">-5.546875</option>
<option name="viz_clustermap.clustermap.markerColor1">#ff0000</option>
<option name="viz_clustermap.clustermap.markerColor2">#ff0000</option>
<option name="viz_clustermap.clustermap.markerColor3">#ff0000</option>
<option name="viz_clustermap.clustermap.markerColor4">#ff0000</option>
<option name="viz_clustermap.clustermap.maxClusters">791</option>
<option name="viz_clustermap.clustermap.numberFormat_min_0">0.[0]</option>
<option name="viz_clustermap.clustermap.numberFormat_min_1000">1.1a</option>
<option name="viz_clustermap.clustermap.numberFormat_min_10000">1a</option>
<option name="viz_clustermap.clustermap.numberFormat_min_1000000">1.1a</option>
<option name="viz_clustermap.clustermap.size">36</option>
<option name="viz_clustermap.clustermap.tiles">dark</option>
<option name="viz_clustermap.clustermap.tiles_max_zoom">18</option>
<option name="viz_clustermap.clustermap.tiles_min_zoom">0</option>
<option name="viz_clustermap.clustermap.tiles_url">http://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png</option>
<option name="viz_clustermap.clustermap.zoom">3</option>
<drilldown>
<set token="map.click.lat">$click.lat.value$</set>
<set token="map.click.lon">$click.lon.value$</set>
</drilldown>
</viz>
</panel>
</row>
<row>
Enterprise 6.5
Chrome Browser
... View more
01-26-2017
04:29 PM
Thanks much!! Wish I could accept it a solution... That's all that I needed! Cheers!
... View more
01-26-2017
11:43 AM
1 Karma
Hello All,
Could someone tell me how to change the default footer that is showing in my dashboards - forms pages?
I have a CSS set and all my dashboards that are not advanced XML and using the simple XML format has a grayed out footer.
I would like to change / set the footer background color to match the rest of my page bodies.
v.6.5
Thanks all!
... View more
01-25-2017
04:26 PM
Anyone??
I'm still trying to have the actions target be a custom definition...
I appreciate the help or work around ideas..
... View more
01-25-2017
03:04 PM
Booya! I was trying to do it the hard way! 😉
... View more
01-25-2017
02:42 PM
Update; I need to perform this setting to specific panels. 😉
THanks!!
... View more
01-25-2017
02:39 PM
Hello all,
I have found this link: https://answers.splunk.com/answers/7646/how-to-disable-results-table-row-clicking.html?utm_source=typeahead&utm_medium=newquestion&utm_campaign=no_votes_sort_relev
...Though it does not help.
I simply want to disable the displayed tabled information from being "clickable". Any ideas?
Thank you!
... View more
01-25-2017
12:33 PM
I ran into a snag.. I am trying to send the contextual data to an "event panel". All the reference docs refer to "charting".
I am trying to set the following with no joy.
<event depends="$type_tok$">... serarch XML.. </event>
any ideas?
... View more
01-25-2017
11:37 AM
Rock on!!!!! Thx!
... View more
