But don't have an example for the POST endpoint. Overall, I think the document in Splunk is not good, not enough for a newbie. IBM QRadar and ELK have good document to development ... View more

Hi @rewritex , Could you please give a snippet of the same. On click of search icon of panels in my dashboard, the queries are running to verbose mode only, want to change it to fast mode. I am using Base search in my dashboard. Since export option is not available, trying out this scenerio, but I have a good amount of data, as such running in verbose mode is something trying to avoid. @all, please suggest some.   ... View more

Thank you for the code If it can help, I had to make a minor change to make it works properly in my case (some data were longer to load.) : var idSearchSelectIndex_results = idSearchSelectIndex.data("preview"); By  var idSearchSelectIndex_results = idSearchSelectIndex.data("results");   ... View more

There is an updated dashboard tab example available here: https://github.com/LukeMurphey/splunk-dashboard-tabs-example ... View more

I'm seeing this in a 6.6.3 environment ... View more

I found if there is a lookup file located at $SPLUNK_HOME/splunk/etc/apps/DA-ESS-ThreatIntelligence/local/data/threat_intel, such error will pop-up. Then I mv my local_ip_intel.csv file to local_ip_intel.bak. Error message seems stop showing up. Anyone could explain what happen here? ... View more

In case anyone else is supporting an old version... You can work around the problem by following these directions: http://www.acme-dot.com/installing-splunk-on-el-capitan/ You may need to update the paths in the examples provided. ... View more

It is mathematically impossible to calculate an average where one of the numbers is infinity. In your case, it probably doesn't matter since you'll have events nearly constantly and samcogheil's solution is probably "good enough". ... View more

I have not tried it but isn't "remote_timeline_fetchall = false" good for reporting searches instead of search that you run on search window? ... View more

I had the same issue in Chrome. Splunk version 7.1.2 Clearing cookies didn't help. Restart Chrome helped. ... View more