Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About bhaskarasplunk
bhaskarasplunk
Explorer
Member since:
11-20-2018
06-05-2020
Community Statistics
| Posts | 7 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 0 |
| Member Since | 11-20-2018 |
Activity Feed
- Karma Re: How do you pass the same token for two panels with one drop-down input? for renjith_nair. 06-05-2020 12:50 AM
- Karma Re: Not able to display the panel as per the Drop-down input option for vnravikumar. 06-05-2020 12:50 AM
- Posted Re: Not able to display the panel as per the Drop-down input option on Dashboards & Visualizations. 03-06-2019 01:51 PM
- Posted Not able to display the panel as per the Drop-down input option on Dashboards & Visualizations. 03-06-2019 12:36 PM
- Tagged Not able to display the panel as per the Drop-down input option on Dashboards & Visualizations. 03-06-2019 12:36 PM
- Tagged Not able to display the panel as per the Drop-down input option on Dashboards & Visualizations. 03-06-2019 12:36 PM
- Tagged Not able to display the panel as per the Drop-down input option on Dashboards & Visualizations. 03-06-2019 12:36 PM
- Posted In Splunk Enterprise Security, how do you change a query result when a drop down option is selected within a panel? on Splunk Enterprise Security. 02-25-2019 01:56 PM
- Tagged In Splunk Enterprise Security, how do you change a query result when a drop down option is selected within a panel? on Splunk Enterprise Security. 02-25-2019 01:56 PM
- Tagged In Splunk Enterprise Security, how do you change a query result when a drop down option is selected within a panel? on Splunk Enterprise Security. 02-25-2019 01:56 PM
- Tagged In Splunk Enterprise Security, how do you change a query result when a drop down option is selected within a panel? on Splunk Enterprise Security. 02-25-2019 01:56 PM
- Posted Re: How do you pass the same token for two panels with one drop-down input? on Splunk Enterprise Security. 02-21-2019 08:19 AM
- Posted How do you pass the same token for two panels with one drop-down input? on Splunk Enterprise Security. 02-20-2019 02:24 PM
- Tagged How do you pass the same token for two panels with one drop-down input? on Splunk Enterprise Security. 02-20-2019 02:24 PM
- Tagged How do you pass the same token for two panels with one drop-down input? on Splunk Enterprise Security. 02-20-2019 02:24 PM
- Posted Is CCURE add-on compatible with CCURE 9000 on Splunk Enterprise Security. 02-14-2019 08:20 AM
- Tagged Is CCURE add-on compatible with CCURE 9000 on Splunk Enterprise Security. 02-14-2019 08:20 AM
- Tagged Is CCURE add-on compatible with CCURE 9000 on Splunk Enterprise Security. 02-14-2019 08:20 AM
- Posted Can you help me build a Splunk query to get all associated members (Username and UserId) of the LDAP group? on Splunk Search. 02-07-2019 10:49 AM
- Tagged Can you help me build a Splunk query to get all associated members (Username and UserId) of the LDAP group? on Splunk Search. 02-07-2019 10:49 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
03-06-2019
01:51 PM
Hi Kumar,
Thank you so much!
It worked for me.
... View more
02-26-2019
04:41 AM
yes, you need to capture the selected value on to a token, which you can use later.
Also, as your search seems to be common, suggest, you use base and post-process search.
your base search can be
index=_internal idx="*" source=*license_usage.log type=Usage | eval totalMB = b/1024/1024 | eval totalGB = totalMB /1024
| rename idx as Index |stats sum(totalGB) as LicenseUsage by Index
Then in the post process search, you can use the token
where LicenseUsage > $token_value$
https://docs.splunk.com/Documentation/Splunk/7.2.4/Viz/Savedsearches
... View more
02-21-2019
08:19 AM
Thank you.
... View more
03-19-2020
12:55 PM
I'm also interested in the query if anyone has something to start with.
... View more
02-07-2019
11:53 AM
DO NOT USE JOIN. Try this:
| rest /servicesNS/nobody/system/admin/LDAP-groups
| search title="WHATEVER"
| dedup title
| fields users| rex field=users "CN=(?<user>[^,]+)"
| table user
| mvexpand user
| appendpipe
[| rest /services/authentication/users splunk_server=local
| search realname=*
| rename title as user
| table user realname]
| stats values(*) AS * BY user
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
