Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About nikkkc
nikkkc
Path Finder
Member since:
12-29-2015
06-05-2020
Community Statistics
| Posts | 59 |
| Solutions | 1 |
| Karma Given | 6 |
| Karma Received | 3 |
| Member Since | 12-29-2015 |
Activity Feed
- Karma Re: How to build an availability report showing results only when an error occurs on 4 servers at the same time? for woodcock. 06-05-2020 12:48 AM
- Karma Re: Why is Splunk importing header fields from CSV files as events? for inventsekar. 06-05-2020 12:48 AM
- Karma Re: Importing data from a CSV file, how do I edit props.conf to assign a specific column to be parsed as _time? for Jeremiah. 06-05-2020 12:48 AM
- Karma Re: props.conf field extraction for twinspop. 06-05-2020 12:48 AM
- Got Karma for Re: Why is Splunk importing header fields from CSV files as events?. 06-05-2020 12:48 AM
- Got Karma for Importing data from a CSV file, how do I edit props.conf to assign a specific column to be parsed as _time?. 06-05-2020 12:48 AM
- Karma Re: How to search the total number of business hours of an event from a csv file? for javiergn. 06-05-2020 12:47 AM
- Karma Re: How to set up a Splunk DB Connect 2 Lookup/Input Update for javiergn. 06-05-2020 12:47 AM
- Got Karma for SNMP Modular Input: After adding custom MIBs, why are SNMP traps not human readable?. 06-05-2020 12:47 AM
- Posted error when trying to setup OPSEC LEA configuration: "External handler failed with code '1' and output: 'REST ERROR[400]: Bad Request - GNU C library (glibc.i686 32-bit and pam.i686) is missing.'. See splunkd.log for stderr output." on Installation. 02-14-2018 01:51 AM
- Posted Re: How to resize text in HTML dashboard on Dashboards & Visualizations. 09-05-2017 07:45 AM
- Posted Re: How to resize text in HTML dashboard on Dashboards & Visualizations. 09-05-2017 06:41 AM
- Posted How to resize text in HTML dashboard on Dashboards & Visualizations. 09-05-2017 05:27 AM
- Tagged How to resize text in HTML dashboard on Dashboards & Visualizations. 09-05-2017 05:27 AM
- Tagged How to resize text in HTML dashboard on Dashboards & Visualizations. 09-05-2017 05:27 AM
- Posted Re: How can I change the width and height of a TextInput? on Getting Data In. 09-05-2017 05:16 AM
- Posted Re: Lookup file Editor App for Splunk Enterprise: How to edit a file with more than 120 rows? on All Apps and Add-ons. 08-20-2017 11:27 PM
- Posted Re: Lookup file Editor App for Splunk Enterprise: How to edit a file with more than 120 rows? on All Apps and Add-ons. 08-18-2017 04:52 AM
- Posted Re: How do i set initial time to date time picker from search event on Splunk Dev. 07-27-2017 11:09 PM
- Posted How do i set initial time to date time picker from search event on Splunk Dev. 07-27-2017 06:45 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
02-14-2018
01:51 AM
hi, i got this error on a windows standalone installation, so i am a littel confused, does this app run on windows?
thanks in advance
... View more
- Tags:
- splunk-enterprise
09-05-2017
07:45 AM
Ok wow, it seems this works, but does this also work for height? i would like to build a multiline text input
... View more
09-05-2017
06:41 AM
ok in general, this works but it is for every input field, this is not what i want
input
{ width:500px;}
... View more
09-05-2017
05:27 AM
i try to resize some textinputs with css but it does not work as assumed.
this is my css:
input4{
width : 800px !important;
height :100px !important;
}
but the textinput is always the same size, just the next textinput 5 is moved into the right corner and to the bottom. it looks like the div size is changed but not the inputtext element??
... View more
09-05-2017
05:16 AM
same problem here, is there any solutuon out there for this? thanks
... View more
08-20-2017
11:27 PM
Oh, it only works with internet explorer! it does not with firefox
... View more
08-18-2017
04:52 AM
same problem here, my csv file have 500 rows and the lookup editor shows only 100 to 120 rows, it depends on every refresh
... View more
07-27-2017
11:09 PM
Hi,
Thanks for your reply but time zone is not what i need. i have some indexed data on different days and a user should able to select data from 20170703 or from 20170625 and so on....
... View more
07-27-2017
06:45 AM
Hi there,
Can someone help me to set a default time on a timepicker (dashboard view) from an search result?
Like it is possible in dropdown...
Or is it possible to set the time on a timepicker dynamically from dropdown value? I would like to give the user the oportunity to preselect the available dates before i fill up the dashboard view.
Thanks in advance
cheers Nik
... View more
- Tags:
- splunk-enterprise
04-03-2017
04:43 AM
I get the same issue. i tested this out in my testenvironment and i figured out that this issue is only if splunk run on linux. on windows, the same version of splunk and tenable 5.1.1 work like a charm.
... View more
01-09-2017
04:22 AM
i guess the legend option is not that what i mean, i am talking about the sourcetype values! (see Picture) not about "sourcetype" or "count" as descirption
... View more
01-09-2017
03:07 AM
Hi,
Is it possible to resize the first Column of a BarChart? I am talking about the label of the bar. Because in some cases the labels are cropped... like the picture appendix, i would like to read the hole value text. Considered the overall width it should be 50% label and 50% bar.
thanks in advance
... View more
- Tags:
- splunk-enterprise
10-11-2016
04:03 AM
i tried this, but this does not work!
... View more
07-28-2016
11:19 PM
...i do not want to waste more time for this, does it make a differnece to use the rex in search query or to define in props and transforms conf?? because it work´s in search query
... View more
07-28-2016
10:56 PM
first i want to say thank you.
still one question: i do not need to specify the field in regex? like ?<mylevel>
OK, if i specify the field then i do not need the line: FORMAT = mylevel
right?
Anyway, i did a | extract reload=t
but still no new filed in my search gui
... View more
07-28-2016
06:54 AM
xxs Security deletes some characters...
Hi,
i try to extract a field in props.conf on search head/indexer. Data comes from UF.
props.conf
[mysyslog]
EXTRACT-level = "var/log/remote/smg/mail\d+/\w+/(?<level>[^/]*)/" in source
source: /var/log/remote/smg/mail01/mail/info/xxxxx.log
the regex work´s in search:
....| rex field=source "var/log/remote/smg/mail\d+/\w+/(?<level>[^/]*)/"
but not in props.conf??
Why? i tried with quotes and without quotes....
... View more
07-28-2016
06:46 AM
1 Karma
it work´s with the second part:
props.conf
TIMESTAMP_FIELDS = ActualStartTime
transforms.conf
[NoHeader]
REGEX = JobHistoryID,JobID,TaskTypeID
DEST_KEY = queue
FORMAT = nullQueue
... View more
07-28-2016
06:32 AM
Hi,
i try to extract a field in props.conf on search head/indexer. Data comes from UF.
props.conf
[mysyslog]
EXTRACT-level = "var/log/remote/smg/mail\d+/\w+/(?[^/]*)/" in source
source: /var/log/remote/smg/mail01/mail/info/xxxxx.log
the regex work´s in search:
....| rex field=source "var/log/remote/smg/mail\d+/\w+/(?[^/]*)/"
but not in props.conf??
Why? i tried with quotes and without quotes....
... View more
- Tags:
- splunk-enterprise
07-27-2016
11:51 PM
it works, thanks a lot!!!
... View more
07-27-2016
07:12 AM
OH Sorry,
they rode it years ago....
http://docs.splunk.com/Documentation/Splunk/5.0.4/releasenotes/Deprecatedfeatures
CHECK_FOR_HEADER props.conf attribute (for index-time field extractions): This feature is deprecated and might be removed in a future release.
my fault
... View more
07-27-2016
06:34 AM
1 Karma
Hi Guys,
I do data import from a CSV and I would like set the eventtime ( _time) to a specific column because the automatic timestamp assignment did not work for me.
Is my config possible? What is wrong? ActualStartTime is a Column in the header of the CSVFile.
props.conf:
[source::D:\Data\*.csv]
TIME_PREFIX = ActualStartTime
TIME_FORMAT=%y/%m/%d-%H:%M:%S.%3N
thanks I am 404
... View more
07-27-2016
06:14 AM
CHeck_for_header is depricated, but i will try the second part... 🙂 thanks
... View more
07-27-2016
03:20 AM
Sorry for my impoliteness, but i am stick of trail and error....
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
