Hello Everyone , We need to validate our teams Splunk Alerts are correct. And that the Alert conditions thresholds are set correctly. I have a search that is effective at looking over the last 30 days of results and counting them against the threshold and time range window. But if I have an alert with a Cron schedule , then I need to create something more dynamic. Current Search: index=Sam SAM_Environment="PROD" BAM_ActivityID="XYGCC_HAPPY" VENDOR_NAME="ABCDVENDING" |timechart span=15m count earliest= |search count<10 We need this same search to be able to run the Cron parameters. Time Range : Earliest -16m@m Latest: -1m@m Cron Schedule : */15 6-22 * * 1-5 Alert Condition : if number of events is less than 10 Any Ideas ? ... View more

Hi , our corporation just upgraded to from Splunk 6.2.6 to Splunk Enterprise 6.5.0. This immediately broke the HTML/JavaScript Dashboard that my team had created. Specifically the Splunk JavaScript library methods are not working. There are some basics Javascript sitting inside the HTML form which is still rendering correctly. But the Splunk JavaScript is not rendering correctly and displaying on the Dashboard form. My understanding is that nothing for the HTML/JavaScript Dashboards has been removed or deprecated from this release. So I am not sure why it is not working at this time. Our dynamics XML dashboards are still working correctly for our corporation. And since my team is the only team that builds dashboards using Splunk HTML/JavaScript format, there are no other sources to bounce ideas off as to what caused this to fail this week from the upgrade. Can someone point in the correct direction on how to troubleshoot this issue? ... View more

Hello , I have written a Splunk 6.3 Application in HTML/Javascript format, I have added a pop-up form that uses text input fields to retain information from the user questions on that form. Now I need to take those variables and send them to my company's Microsoft Outlook Account. Where is the Splunk Documentation on sending emails from an HTML written Splunk Application? Can this be done with the regular JavaScript code in the HTML application. ? Do I need a Windows Service Account for the Splunk Application to communicate/send emails to my companies Microsoft Office Outlook ? ... View more

Hi , We have created a splunk application using HTML format. In our application we have a "Request Alert" button that has a popup which takes user input text fields then writes out to a csv file . The code we are using for this works fine for taking the input field and storing them in a csv file in the local computer. The file location path( we give it works just fine if it is in our local computer , but once we give it the path to where splunk stores all the other csv files that are created , it does not ever work. Is it possible to write to a csv file in splunk without using a search manager ? I have an example of the code we are using listed below. <script> function closePopup(){ document.getElementById('light').style.display='none'; document.getElementById('fade').style.display='none'; } //Save alert details in CSV file function writeToFile(d1, d2, d3, d4, d5){ var fso = new ActiveXObject("Scripting.FileSystemObject"); var fileLoc = "C:\\Users\\plm3030\\Desktop\\Splunk Docs\\sample.csv"; var fh = fso.OpenTextFile(fileLoc, 8, false, 0); fh.WriteLine(d1 + ',' + d2 + ',' + d3 +',' + d4+',' + d5); fh.Close(); closePopup(); alert("Your alert submitted successfully!"); } var submitAlert = document.getElementById("submitAlert"); submitAlert.onclick = function () { var queryVal = document.getElementById("queryVal").value; var poc = document.getElementById("poc").value var email = document.getElementById("emailGroup").value; var alertName = document.getElementById("alertName").value; var details = document.getElementById("details").value; writeToFile(queryVal, poc, email, alertName, details); } //End Alert Details to CSV </script> ... View more

What is the correct Splunk name for the Magnifying Glass "Submit Button Icon" connected to the search bar, in Splunk? How do we restrict results to show only when submit button is "clicked" in the SearchbarView, and not automatically update search as users change/update drop-down menus in our application? We have created this dashboard in Splunk 6.2.6 with HTML. Currently we can control our search from firing off , until we change the timerange value in SearchbarView. So ideally, we should be able to use the exact same code below for the submit button on click, but that has not work so far. What is the value or name of the magnifying icon button, and why the heck would it not work when we click it , if everything works correctly when we click anynew time range input from the All time button? Ideally we should be able to change the "mysearchbar.timerange.on " to mysearchbar.( <--- Name of whatever the magnifyingclass button name is called in splunk ).on and it should work the same mysearchbar.timerange.on("change", function() { sampleSearchManager.startSearch(); sampleSearchManager1.startSearch(); sampleSearchManager.settings.set(mysearchbar.timerange.val()); sampleSearchManager1.settings.set(mysearchbar.timerange.val()); }); ... View more

Hello We built an HTML application in Splunk 6.3.3. The application works great and we are using the DropdownInput and MultiSelectInput to show the input fields in our application. Last week we found out that we would need to make this application work in Splunk 6.2.6 at our work because they will not be migrating to the new Splunk 6.3.3 for a while. After plugging in our application code which works fine in Splunk 6.3.3, we found that both the DropdownInput & MultiSelectInput fields will not even render and appear on the screen for Splunk 6.2.6. My question is, how can we make sure that we are calling the Splunkjs libraries correctly and functions correctly in Splunk 6.2.6, and do both those functions work in Splunk 6.2.6 on an HTML dashboard? splunkjs/mvc/simpleform/input/dropdown ... View more

Hi , Is there a way to add logic the actual submit button, so that my search manager (populated with token values) fires off its search when I hit the submit button? ... View more

Hi , I am creating a new dashboard in html and javascript , I have not downloaded the Splunk 6.3 SDK JavaScript yet. I have two question , how do I connect to my Splunk .csv files using Java script in Splunk 6.3? Do I need to download the Splunk SDK JavaScript API library to accomplishd this Splunk 6.3 ? ... View more

How do I hide the additional Pulldown modules on my Splunk Interface page until user has selected the values they want from my first pulldown module? I just need to know how to hide a Pulldown module on a page and how to render it. Basically how can I hide and unhide the pulldown modules ? ... View more