Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About imurpalvicky
imurpalvicky
Engager
Member since:
12-26-2018
07-29-2020
Community Statistics
| Posts | 10 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 12-26-2018 |
Activity Feed
- Karma Re: Can you help me date filter in a dashboard but not with _time field? for niketn. 06-05-2020 12:50 AM
- Posted Re: Choropleth Map / Cluster map need to represent multiple attributes on All Apps and Add-ons. 10-09-2019 07:11 AM
- Posted Choropleth Map / Cluster map need to represent multiple attributes on All Apps and Add-ons. 10-07-2019 02:36 PM
- Tagged Choropleth Map / Cluster map need to represent multiple attributes on All Apps and Add-ons. 10-07-2019 02:36 PM
- Tagged Choropleth Map / Cluster map need to represent multiple attributes on All Apps and Add-ons. 10-07-2019 02:36 PM
- Tagged Choropleth Map / Cluster map need to represent multiple attributes on All Apps and Add-ons. 10-07-2019 02:36 PM
- Tagged Choropleth Map / Cluster map need to represent multiple attributes on All Apps and Add-ons. 10-07-2019 02:36 PM
- Posted reset my splunk.com password , password reset link not received in mailbox on Training + Certification Discussions. 09-05-2019 10:05 AM
- Tagged reset my splunk.com password , password reset link not received in mailbox on Training + Certification Discussions. 09-05-2019 10:05 AM
- Posted Any visualization chart that can talk about time vs object and its status on Dashboards & Visualizations. 04-28-2019 01:44 PM
- Tagged Any visualization chart that can talk about time vs object and its status on Dashboards & Visualizations. 04-28-2019 01:44 PM
- Posted Re: Eventstats not getting the latest event based on the field on Splunk Search. 03-21-2019 10:41 AM
- Posted Re: Eventstats not getting the latest event based on the field on Splunk Search. 03-21-2019 08:49 AM
- Posted Re: Eventstats not getting the latest event based on the field on Splunk Search. 03-20-2019 03:14 PM
- Posted Eventstats not getting the latest event based on the field on Splunk Search. 03-20-2019 01:35 PM
- Tagged Eventstats not getting the latest event based on the field on Splunk Search. 03-20-2019 01:35 PM
- Tagged Eventstats not getting the latest event based on the field on Splunk Search. 03-20-2019 01:35 PM
- Tagged Eventstats not getting the latest event based on the field on Splunk Search. 03-20-2019 01:35 PM
- Posted splunk dashboard basequery with datamodel on Dashboards & Visualizations. 01-15-2019 03:07 PM
- Tagged splunk dashboard basequery with datamodel on Dashboards & Visualizations. 01-15-2019 03:07 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
10-09-2019
07:11 AM
thanks for the reply I can do a lookup with country iso code but that is that case i have to use the cluster map which will just give the pie chart and that will not expand through the country. In choropleth map can i show multiple attributes, apart from country name(featurefield) and count
... View more
10-07-2019
02:36 PM
Consider my data as below. I want to represent in Map chart i have to show country wide what is the sales of different types of cars. Also i have only the country data(No ip or latitude or longitude but i can do some lookup mapping for it), with that, possible i can use choropleth map, but I cannot show multiple attributes here. Appreciate if there is any way to show multiple attributes. I tried cluster map, it is creating a pie chart but it is not covering the entire country
country | Sales of SUV Cars| sales of sedan Cars
Australia | 10k | 25K
USA | 25k | 35k
... View more
09-05-2019
10:05 AM
Hi,
I have a SPLUNK account , i forgot password so trying to reset the password with (https://login.splunk.com/en_us/page/lost_password) . whatever reason I am not receiving the reset email from splunk . Appreciate if anyone can help me on resolving this case (I have enrolled in couple of courses now even they are becoming tricky to take)
FYI : Splunk.com username retrieval is working as expected for the same SPLUNK Account
... View more
- Tags:
- splunk.com
04-28-2019
01:44 PM
Hi,
I need to visualize the data in some chart where i can talk about which stage the object is, at given time ?. Appreciate you answers or help on this . thanks in advance
_time ,object ,status---------------------------------
2018-02-01, object1, Open
2018-02-02, object1, WIP
2018-02-03, object1, Closed
2018-02-01, object2, open
2018-02-03, object2, Wip
2018-02-04, object2, Closed
... View more
- Tags:
- visualization
03-21-2019
10:41 AM
Hey thanks,
i changed like this to use for my case it works
|eventstats latest(_time) as newtime by id | where _time=newtime | table *
... View more
03-21-2019
08:49 AM
I did try in that way .... But as @somesoni2 mentioned it just adding the extra field to all events . It is not singling out as the latest event . Any idea how can i get the latest event based on particular field. I can do subsearch and get it . But the SPL performance could be costly. I believe this a common use case , there should be some inbuilt feature in Splunk
... View more
03-20-2019
03:14 PM
I need other data from that particular event , i cannot just get latest event with the id. I have to use combined key of id and timestamp, So i was hoping eventstats would give me the latest event
I want to get the latest event from the list of transaction with particular field(id). Once i am able to get that i can get other data from that event
... View more
03-20-2019
01:35 PM
Hi Team,
I am trying to get the latest event from the list of events , id field is common across all the events based on the _time field i need to get the latest event . Appreciate your help here, not sure where i am wrong with the query
Query Used
|eventstats latest(id) by _time | table id,_time
Results Set
id | _time
Applications/Releaseca9d9ce8c9a0448880f47e9ede28def0 | 2019-03-01 19:00:00.000
Applications/Releaseca9d9ce8c9a0448880f47e9ede28def0 | 2019-03-01 17:37:37.371
Applications/Releaseca9d9ce8c9a0448880f47e9ede28def0 | 2019-03-01 13:00:00.000
Applications/Releaseca9d9ce8c9a0448880f47e9ede28def0 | 2019-02-27 01:28:45.888
Applications/Releaseca9d9ce8c9a0448880f47e9ede28def0 | 2019-02-25 06:15:16.000
... View more
01-15-2019
03:07 PM
Hi Team,
I am trying to create a dashboard with base query taking values from data model . But it is not yielding any results(Only when i have that in basequery). Seems the base query syntax is wrong , since it starts with pipeline (|) . Any help on where i am going wrong.Thanks in advance
search id="test_basequery"
query | datamodel test_stats_data_model test_stats_data_set search
/query
... View more
12-26-2018
10:04 AM
Hi Team,
I have a field called as "completed date time" in the format (2018-10-30 06:09:60). In my dashboard, I need the DATE TIME FILTER to apply filtering based on this field rather than the event time stamp (_time).
Appreciate your help on this.
... View more
