Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About zd00191
zd00191
Communicator
Member since:
02-04-2015
06-05-2020
Community Statistics
| Posts | 56 |
| Solutions | 1 |
| Karma Given | 14 |
| Karma Received | 3 |
| Member Since | 02-04-2015 |
Activity Feed
- Karma Re: Searches Using field extractions Issue for woodcock. 06-05-2020 12:47 AM
- Karma Re: Why is a bar chart not showing up with my search? for woodcock. 06-05-2020 12:47 AM
- Karma Re: Renaming the 'range' field from rangemap for woodcock. 06-05-2020 12:47 AM
- Karma Re: Why did my pie charts randomly start using the darkest colors for each slice? How can I make my pie charts use the lighter more visible colors? for MuS. 06-05-2020 12:47 AM
- Karma Re: Why am I unable to get Table Cell Highlighting to work with my current XML, CSS, and JavaScript files? for jeffland. 06-05-2020 12:47 AM
- Karma Re: Why am I unable to get Table Cell Highlighting to work with my current XML, CSS, and JavaScript files? for alacercogitatus. 06-05-2020 12:47 AM
- Karma Re: Why am I unable to get Table Cell Highlighting to work with my current XML, CSS, and JavaScript files? for jeffland. 06-05-2020 12:47 AM
- Karma Re: Joining two sourcetypes and adding the value of a field based on matching IDs for woodcock. 06-05-2020 12:47 AM
- Karma Re: Splunk Dashboard Examples App 6.x Issues: Table Dashboard Examples not functioning properly for MuS. 06-05-2020 12:47 AM
- Karma Re: Days in Alphabetical Order but need to be in day order..Tried using documentation advice but still won't work for woodcock. 06-05-2020 12:47 AM
- Karma Re: Adding a percentage Failure column to a table from a chart command for woodcock. 06-05-2020 12:47 AM
- Karma Re: Merging TWO Timecharts overlay-One on Top of One Another for woodcock. 06-05-2020 12:47 AM
- Karma Re: Combining two line charts displaying values from the same field name for woodcock. 06-05-2020 12:47 AM
- Karma Re: System input will not repopulate when time range picker selection is changed for martin_mueller. 06-05-2020 12:47 AM
- Got Karma for Renaming the 'range' field from rangemap. 06-05-2020 12:47 AM
- Got Karma for Why did my pie charts randomly start using the darkest colors for each slice? How can I make my pie charts use the lighter more visible colors?. 06-05-2020 12:47 AM
- Got Karma for Adding the percent sign to the timechart y-axis values. 06-05-2020 12:47 AM
- Posted Merging TWO Timecharts overlay-One on Top of One Another on Splunk Search. 07-31-2015 02:26 PM
- Tagged Merging TWO Timecharts overlay-One on Top of One Another on Splunk Search. 07-31-2015 02:26 PM
- Tagged Merging TWO Timecharts overlay-One on Top of One Another on Splunk Search. 07-31-2015 02:26 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 |
07-31-2015
02:26 PM
I have the following search.
index=ko_autosys sourcetype=autosys_applog_scheduler_events host="usatlb98" OR host="usatlb91" System="*" eventtype=autosys_initiated_jobs |timechart span=1d count(JOB_NAME) as Count |append [search index=ko_autosys sourcetype=autosys_applog_scheduler_events host="usatlb98" OR host="usatlb91" System="*" eventtype=autosys_initiated_jobs earliest=07/12/2015:0:0:0 latest=07/27/2015:0:0:0 |timechart span=1d count(JOB_NAME) |rename count(JOB_NAME) as "Close-Freeze Period" |fields "Close-Freeze Period"]
I want the subsearch timechart to be an overlay on top of the first timechart. At the moment, the two timecharts are displayed next to one another. I would like them to be on top of one another. Please help! Thanks!
... View more
07-31-2015
01:13 PM
Is it possible to do this and have the subsearch be an overlay to a column chart or line chart?
... View more
07-30-2015
08:27 PM
Thank you again for helping me.
The table should contain 20 rows with the last row being a sum of the column values. There should be 6 columns with the last column containing a total of the row. I would like to have a column that displays a percentage of the total that is in the FAILURE column. These should be the column separated by a space
Application FAILURE RESTART SUCCESS TERMINATED Total PercentFailure
... View more
07-30-2015
07:49 PM
I have the following search.
index=ko_autosys sourcetype=autosys_applog_scheduler_events host="usatlb98" OR host="usatlb91" System="*" JOB_NAME="*" eventtype=autosys_failure_jobs OR eventtype=autosys_terminated_jobs OR eventtype=autosys_restart_jobs OR eventtype=autosys_success_jobs |chart count(JOB_NAME) over System by job_status |rename System as "Application" |sort 0 -FAILURE |addtotals fieldname=Total
This search creates a table with a total column and a column for each status. Each column contains a numerical value which is a count. I would like to add a column that will show the percentage of the 'Total' column that the FAILURE column count is . For example if the Total column for SAP FILO is 100 and the failure column value is 20. I wan to have another column that will have 20%. Please help! Thanks!
... View more
07-30-2015
06:37 PM
I have the following search that creates a bar chart with the days of the week on the vertical axis. THe days are in alphabetical order and I need them to be in order of the week to date so Sunday Monday tuesday wednesday thursday friday.
index=ko_autosys sourcetype=autosys_applog_scheduler_events host="usatlb98" OR host="usatlb91" JOB_NAME="*" job_status=SUCCESS OR job_status=FAILURE OR job_status=RESTART OR job_status="TERMINATED" |stats count(JOB_NAME) as "Number of Jobs" by date_wday,job_status |eval sort_field=case(wd=="monday",1, wd=="tuesday",2, wd=="wednesday",3, wd=="thursday",4, wd=="friday",5, wd=="weekend",6) | sort sort_field | fields - sort_field |xyseries date_wday,job_status,"Number of Jobs"
Please help! Thanks!
... View more
07-29-2015
04:43 PM
I have the following search.
index=ko_autosys sourcetype=autosys_applog_scheduler_events host="usatlb98" OR host="usatlb91" System="*" JOB_NAME="*" eventtype=autosys_failure_jobs OR eventtype=autosys_terminated_jobs OR eventtype=autosys_restart_jobs OR eventtype=autosys_success_jobs |chart count(JOB_NAME) over System by job_status
It displays a table with the following columns: System, FAILURE, RESTART, TERMINATED, SUCCESS
I want to sort by the FAILURE Column where the System with the largest number of failures is on top. The issue is that FAILURE SUCCESS TERMINATED and RESTART are field values, not field names.
Please help. Thanks!
... View more
07-23-2015
08:12 AM
If I wanted to grab a column name from a table and the system token and the time, how would that look? Would it look like this?
<link>
<![CDATA[/app/ko_autosys/error_list?form.status=$click.value$&System=$jSystem$&earliest=$Time.earliest$&latest=$Time.latest$]]>
</link>
</drilldown>
... View more
07-23-2015
07:56 AM
Hello. I have a dashboard with the following input tokens.
<form>
<label>System/Platform Job Completion Report</label>
<description/>
<fieldset autoRun="true" submitButton="false">
<input type="time" searchWhenChanged="true" token="Time">
<default>
<earliestTime>-12h</earliestTime>
<latestTime>now</latestTime>
</default>
</input>
<input type="dropdown" token="System" searchWhenChanged="true">
<label>System</label>
<choice value="*">All</choice>
<default>*</default>
<populatingSearch earliest="$Time.earliest$" latest="$Time.latest$" fieldForValue="System" fieldForLabel="System">
<![CDATA[ index=ko_autosys sourcetype=autosys_applog_scheduler_events host="usatlb98" OR host="usatlb91" |stats count by System ]]>
</populatingSearch>
</input>
</fieldset>
I want to pass the System token and the time range picker token to another dashboard called job_monitor. How do I pass the time range selected and the system via drill down? The system will be a click.value.
... View more
07-22-2015
01:43 PM
Is it possible to pass an input token and the time range picker time?
... View more
07-20-2015
07:03 PM
I tried using this but no icons are showing up. I have my .js and .css below. Could you please take a look? Thank you so much!
... View more
07-18-2015
10:38 AM
I am having issues getting this to work. I have copied my .js and .css files below. I triple checked them but may be I missed something.
require([
'underscore',
'jquery',
'splunkjs/mvc',
'splunkjs/mvc/tableview',
'splunkjs/mvc/simplexml/ready!'
], function(_, $, mvc, TableView) {
var CustomIconRenderer = TableView.BaseCellRenderer.extend({
canRender: function(cell) {
var allowedCells = ["Application_Availability","Application_Response"] return (allowedCells.indexOf(cell.field)) > -1;
},
render: function($td, cell) {
var count = cell.value;
// Compute the icon base on the field value
var icon;
if(count <= 50) {
icon = 'severe';
} else if(count > 50 && count < 100) {
icon = 'elevated';
} else if(count == 100) {
icon = 'low';
} else {
icon='none';
}
// Create the icon element and add it to the table cell
$td.addClass('icon-inline numeric').html(_.template('<%- text %> <i class="icon-<%-icon%>"></i>', {
icon: icon,
text: cell.value
}));
}
});
mvc.Components.get('table1').getVisualization(function(tableView){
// Register custom cell renderer
tableView.table.addCellRenderer(new CustomIconRenderer());
// Force the table to re-render
tableView.table.render();
});
});
.css=====================================================
/* Custom Icons */
td.icon {
text-align: center;
}
td.icon i {
font-size: 25px;
text-shadow: 1px 1px #aaa;
}
td.icon .severe {
color: red;
}
td.icon .elevated {
color: yellow;
}
td.icon .low {
color: #006400;
}
/* Row Coloring */
#highlight tr td {
background-color: #c1ffc3 !important;
}
#highlight tr.range-elevated td {
background-color: #ffc57a !important;
}
#highlight tr.range-severe td {
background-color: #d59392 !important;
}
#highlight .table td {
border-top: 1px solid #fff;
}
#highlight td.range-severe, td.range-elevated {
font-weight: bold;
}
.icon-inline i {
font-size: 18px;
margin-left: 5px;
}
.icon-inline i.icon-severe {
color: #ef392c;
}
.icon-inline i.icon-elevated {
color: #ff9c1a;
}
.icon-inline i.icon-low {
color: #5fff5e;
}
... View more
07-17-2015
08:05 AM
Thisis awesome. Thank you. I need to only the results of the search above if any of the durations of the specific job name are greater the average by 40% or more. Do I need to create a whole new search?
... View more
07-16-2015
10:44 AM
I have the follinwg code from my .js file
var CustomIconRenderer = TableView.BaseCellRenderer.extend({
canRender: function(cell) {
return cell.field === 'Application_Availability';
If I want to add inline icons for multiple fields a my table, how do I get the custom icon renderer to read both Application_Availability column and the Application_Response column. Should it look like the code below? Please help. Thanks!
var CustomIconRenderer = TableView.BaseCellRenderer.extend({
canRender: function(cell) {
return cell.field === 'Application_Availability', 'Application_Response';
... View more
07-16-2015
05:43 AM
I do not believe that my .js and .css are loading into the dashboard. Do you think that restarting splunk could do it?
... View more
07-15-2015
04:58 PM
I am running Splunk 6.0. I recently installed the AMAZING Splunk Dashboard Examples 6.x application. I went to implement some of the table features but I could not seem to get anything to work. I decided to just copy the exact dashboard panel for 'table cell highlighting' into one of my dashboards.
I copied the xml exactly. I copied the .js and .css files to the appserver/static directory as well. I did a debug refresh. When I opened the view, the panel search showed up but nothing was highlighted.
Is there something that I am missing?
... View more
07-15-2015
09:51 AM
Do you think you could at
https://answers.splunk.com/answers/274838/table-cell-highlighting-cannot-seem-to-get-it-to-w.html
I edited the .js, .css, and xml based on the examples from the dashboard examples app but there are no highlights showing up in my table.
Thanks again.
... View more
07-15-2015
09:28 AM
Perfect. Thank you so much for answering my questions all the time!
... View more
07-15-2015
09:11 AM
Sorry about that. I would like each row to contain one JOB_NAME and its DESCRIPTION. Unfortunately, the search above does not display the DESCRIPTION, and all of the job names end up in 1 row. Thank you again.
... View more
07-15-2015
08:54 AM
I want my results to look like this
Job_Name DESCRIPTION
asghasgha hkjfdjhdljfhaldjkghljkadg
... View more
07-15-2015
08:43 AM
I have two source types
autosys_job_def_dimension
autosys_job_desc_dimension
The events in the sourcetype1 have a common field with the events in sourcetype2 which is JOB_DESC_ID
The events in sourcetype2 contain a field called DESCRIPTION
I want to add the description field to the events in sourcetype1 based on if the JOB_DESC_ID fields match.
This is what I have so far but I do no think that I am on the right track. Please help! Thanks!
index=ko_autosys sourcetype=autosys_job_def_dimension | join type=left max=0 JOB_DESC_ID [search index=ko_autosys sourcetype=autosys_job_desc_dimension |fields + DESCRIPTION ] |table JOB_NAME DESCRIPTION
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
Karma given to
