Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About apietersen
apietersen
Communicator
Member since:
05-25-2016
11-17-2022
Community Statistics
| Posts | 90 |
| Solutions | 1 |
| Karma Given | 9 |
| Karma Received | 8 |
| Member Since | 05-25-2016 |
Activity Feed
- Posted Re: "constant login time" on Security. 09-14-2022 12:19 AM
- Karma What is "constant login time" setting and what is it for? for templets. 09-14-2022 12:17 AM
- Posted Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 04-05-2022 01:39 PM
- Posted Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 04-03-2022 11:36 AM
- Posted Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 04-03-2022 10:49 AM
- Karma Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? for andreasz. 04-03-2022 10:27 AM
- Posted Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 04-03-2022 10:26 AM
- Posted Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 04-03-2022 04:48 AM
- Got Karma for Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5?. 04-03-2022 03:44 AM
- Posted Re: After upgrade to 8.25: inconsistent data in timeline (after some time) on Dashboards & Visualizations. 03-31-2022 04:49 AM
- Posted Re: After upgrade to 8.25: inconsistent data in timeline (after some time) on Dashboards & Visualizations. 03-31-2022 04:46 AM
- Posted After upgrade to 8.25: inconsistent data in timeline (after some time) on Dashboards & Visualizations. 03-31-2022 03:20 AM
- Posted Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 03-29-2022 05:52 AM
- Posted Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 03-27-2022 11:44 PM
- Posted Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 03-21-2022 08:35 AM
- Posted Re: <h1>dark</h1> on Installation. 03-17-2022 12:09 PM
- Posted Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 03-17-2022 11:28 AM
- Tagged Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 03-17-2022 01:55 AM
- Tagged Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 03-17-2022 01:55 AM
- Posted Re: Why are there mis-scaled 'Single Value' content in all dashboards after upgrading to Splunk Ent 8.2.5? on Installation. 03-17-2022 01:54 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
04-05-2022
01:39 PM
Hi Burwell, Thanks, Yes I have seen it and installed it on a test instance. Its looking good again.
... View more
04-03-2022
11:36 AM
Hi andreasz, Thanks for the tips, again 🙂 I'll definitely look into it. I have no experience with Splunk Cloud yet, it is still on my to-do list. But would you say it offers a more user-friendly, efficient, powerful and integrated visualization environment?
... View more
04-03-2022
10:49 AM
Hi andreasz, Wish you succes and a lot of fun L 😊 Dashboard Studio is/was promissing but is does not appears a full grown alternative to me yet.🙄 Nb. Will also look into your suggested links , although I am completely windows based 👍
... View more
04-03-2022
10:26 AM
Hi andreasz, Thanks for the finding and Geez, what a pity that this was not previously known to support or was mentioned before in any tips or documentation.
... View more
04-03-2022
04:48 AM
Update: -=-=-=-=-=- It has been confirmed that it is a bug. "The fix has now been merged and will be available in the 8.2.6 release for you to be aware it is planned to be release on April within 4th to 10th." -==-=-=-=-=-
... View more
03-31-2022
04:49 AM
Hi ITWhisperer, Thanks. Yes, please note the max value 8 in first image and then the 4 value in second image . Have added the xml code in a seperate reply post. The maximum value (8) is suddenly divided by 2 (4)...which is a disturbing difference from the reality probably caused by the timeline visualization panel
... View more
03-31-2022
04:46 AM
XML code belonging to post: <form theme="dark"> <label>time_line_issue (8.2.5)</label> <row depends="$hide$"> <panel> <html> <style> //<!--this makes table have a bigger fint and colleor-->{} #usertime td:nth-child(1) { color: white !important; text-align: left !important; font-size: 25px !important; } </style> </html> </panel> </row> <row> <panel id="usertime"> <table> <search> <query>index=* earliest=-1h@h | stats max(_time) as mtime | eval stime=strftime(mtime, "%a. %d %b %Y - %H:%M hr") | table stime mtime | appendcols [| rest /services/authentication/current-context | table username *] | eval tZtime=strftime(mtime, "%Z") , tztime=substr(strftime(mtime, "%z"),0,3) , TZ=tZtime." (".tztime.")" , timeuser=stime." [".username."] - (GMT".tztime.")" | table timeuser</query> <earliest>-15m</earliest> <latest>now</latest> <refresh>1m</refresh> <refreshType>delay</refreshType> </search> <option name="drilldown">none</option> <option name="link.exportResults.visible">0</option> <option name="link.inspectSearch.visible">0</option> <option name="link.openPivot.visible">0</option> <option name="link.openSearch.search">false</option> <option name="link.visible">0</option> <option name="refresh.display">none</option> <option name="refresh.link.visible">1</option> </table> </panel> </row> <row> <panel> <title>TEST1 - INBOUND</title> <chart> <search> <query>index=bostb AND MachineID=BB_PA1 AND Value!=0 AND Tag="*GVL_Hmi.Equipment.Sts.CurrState.Inbound[x].Inbound[1].ArrivedID[x].ArrivedID[1]" AND Value>10 | timechart span=1min dc(Value) as count_pm | appendpipe [| timechart span=1h avg(count_pm) as avg_pm] | appendpipe [ stats count | where count=0] | eval count_pm=if(count=0, "0", count_pm), avg_pm=if(count=0, "0", round(avg_pm,1) ) | fields - count</query> <earliest>@d</earliest> <latest>now</latest> <refresh>5m</refresh> <refreshType>delay</refreshType> </search> <option name="charting.axisTitleX.visibility">collapsed</option> <option name="charting.axisTitleY.visibility">collapsed</option> <option name="charting.chart">column</option> <option name="charting.chart.nullValueMode">gaps</option> <option name="charting.chart.overlayFields">avg_pm</option> <option name="charting.chart.showDataLabels">minmax</option> <option name="charting.chart.stackMode">default</option> <option name="charting.drilldown">all</option> <option name="charting.layout.splitSeries">0</option> <option name="charting.legend.placement">bottom</option> <option name="refresh.display">progressbar</option> </chart> </panel> <panel> <title>TEST2 - INBOUND</title> <chart> <search> <query>index=bostb AND MachineID=BB_PA1 AND Value!=0 AND Tag="*GVL_Hmi.Equipment.Sts.CurrState.Inbound[x].Inbound[1].ArrivedID[x].ArrivedID[1]" AND Value>10 | timechart span=1min dc(Value) as count_pm | append [ search index=bostb AND MachineID=BB_PA1 AND Value!=0 AND Tag="*GVL_Hmi.Equipment.Sts.CurrState.Inbound[x].Inbound[1].ArrivedID[x].ArrivedID[1]" AND Value>10 | timechart span=1min dc(Value) as count_pm | timechart span=1h avg(count_pm) as avg_pm]</query> <earliest>@d</earliest> <latest>now</latest> <refresh>5m</refresh> <refreshType>delay</refreshType> </search> <option name="charting.axisTitleX.visibility">collapsed</option> <option name="charting.axisTitleY.visibility">collapsed</option> <option name="charting.chart">column</option> <option name="charting.chart.overlayFields">avg_pm</option> <option name="charting.chart.showDataLabels">minmax</option> <option name="charting.drilldown">none</option> <option name="charting.legend.placement">bottom</option> <option name="refresh.display">progressbar</option> </chart> </panel> </row> </form>
... View more
03-31-2022
03:20 AM
After upgrade to 8.2.5 we suffer from another issue with visualliation and showing dramatic wrong data... built this morning at 11:30 Dashboard/panel shows after some time (here ca 30m) completely different avg-visual but more concerning completely wrong data for 'count_pm' metric : Please see attached my xml code, what do I miss here?
... View more
Labels
- Labels:
-
timechart
03-29-2022
05:52 AM
update (confirmed as bug): -=-=-=-=-=-=-=- The previous questions were done in order to berify if this issue matches with a known bug that has been found related to this particular problems with dashboards. In this case there is a bug internal ticket already reported about this issue, for your reference the ticket number is # SPL-219946. It looks like custom dashboards are impacted when migrating or upgrading them to the newer version of Splunk. In this case as per Senior Engineers and also the current work around would be to rebuilt the Custom dashboards into the new Splunk version. In case it could be helpful, you could also consider the options below: Note: the functionality of the utilization of the app's Javascript was tested to work on the following versions: * Splunk 8.2.3 and Dashboard App 8.0.0 * Splunk 7.3.0 and Dashboard App 7.3.0 -=-==-=-=-=-=--
... View more
03-27-2022
11:44 PM
Hi gjanders, No reference to a Jira was mentioned to me. This was the latest email answer reported back to me by support engineer: -=-=-=-=-=-=- I did expose this case to senior engineers and it looks like this issue could be related to a bug already adentify, however we need to validate this other possibility just by confirming a couple of simple questions: When you upgraded to the Splunk version 8.2.5, which was your previous version? Are these Custom dashboards you built? or are this related to the below app? App: https://splunkbase.splunk.com/app/1603/ We just need to isolate the app part just to make sure 100% since if we are talking about custom dashboards then there is a workaround related to it since it will validate the bug issue, senior engineers confirmed there is an issue that, when you migrate or upgrade to this newer version, the dashboards run into java scripts errors. -=-=-=-=--=-=-= In the mean time busy with re-designing the most relevant 100+ dashboards by replacing 'single-value ' panels for 'table' panels .
... View more
03-21-2022
08:35 AM
update: I have build a new VM (windows10 + latest updates) with a fresh Splunk Ent 8.2.5 and did copy one of the effected dashboard to that new instance, this is the result: mis-scaled single values: see screenshot
... View more
03-17-2022
11:28 AM
Hi Burwell, Version 8.2.4, as I try to follow all new versions when they are released. release notes were missing, but googled it and found it some where else: https://docs.splunk.com/Documentation/Splunk/8.2.5/ReleaseNotes/Fixedissues
... View more
03-17-2022
01:54 AM
Update, Nb, after a week finaly had a zoom meeting with Splunk support: -=-==-=-=-=-=-=-=- *** Zoom meeting details:3/15/2022 *** -> Confirmed values are not scaling. -> Confirmed customer is getting java errors. -> Issue is impacting all dashboards -> Customer wants a work around or solution. -> Issue is that the single values (all single values) in dashboards are not honoring the height -> Tried restarting the Splunk instance, it did not work. -> After upgrade to 8.2.5 starting this behaviour. Next Steps: Since we have confirmed about getting also java errors and as per my previous findings it could be related, also by confirming this started after the upgrade and those dashboards were working normally with single values before, I will expose this case to senior engineers just to see if there is a possibility to be a bug which is what it looks like at the moment and hopefully we can get a fix for you. -=-=-=-=-=-=-
... View more
03-10-2022
11:58 AM
Hi Burwell, Thanks for the answer. I think this underline there is aan issue with the new Ent version 8.2.5. Something outside the scope of control of me, I have no knowledge of Jacascript and did not occurred before. Neither on any other Search Head except the ones I upgraded to v 8.2.5 regards AP
... View more
- Tags:
- Burwell
03-10-2022
11:42 AM
Also new to me since upgrade to 8.2.5: where can I find the Developer Console?
... View more
03-08-2022
04:27 AM
My findings so far: It seems to completely ignoring the <option name="height">50</option> option settings (although honouring the scaling of the length of the Value/String)
... View more
03-08-2022
02:34 AM
No scaling of fontsize on all dashboards:
... View more
03-08-2022
02:30 AM
Hi ITWhisperer, Thanks for your response, That is my question too, hereby some code + screenshot simplexml source example of dashboard with only single-values: (i upload screenhsot how it looks on one of our test instances) <dashboard> <label>Single_Value_issue</label> <row> <panel> <title>MvHrs PA1</title> <single> <search> <query>index=bostb AND MachineID=BB_PA1 Tag="*AxisX.r64_position" AND Tag="*top_*" | eval move=round(Value,0) | timechart span=6m dc(move) as dcmv | eval dcmv=if(dcmv>=3, 0.1, 0) | stats sum(dcmv) as mvhrs | table mvhrs</query> <earliest>-7d@h</earliest> <latest>now</latest> <refresh>5m</refresh> <refreshType>delay</refreshType> </search> <option name="colorMode">block</option> <option name="drilldown">none</option> <option name="height">50</option> <option name="numberPrecision">0.0</option> <option name="rangeColors">["0xdc4e41","0x0877a6","0x20BF1D"]</option> <option name="rangeValues">[0,1]</option> <option name="refresh.display">progressbar</option> <option name="underLabel">moving_hrs</option> <option name="useColors">1</option> <option name="link.exportResults.visible">false</option> <option name="link.inspectSearch.visible">false</option> <option name="link.openPivot.visible">false</option> <option name="link.openSearch.search">false</option> <option name="link.visible">false</option> <option name="refresh.link.visible">true</option> </single> </panel> <panel> <title>Tray_IN1</title> <single> <search> <query>index=bostb AND MachineID=BB_PA1 AND Tag="*Application.GVL_Hmi.Equipment.Sts.CurrState.Inbound[x].Inbound[1].ArrivedID[x].ArrivedID[1]" | stats dc(Value) as TrayIn1 by Tag | fillnull TrayIn1 | eval TrayIn1=if(TrayIn1=1,0,TrayIn1-1) | table TrayIn1</query> <earliest>-7d@h</earliest> <latest>now</latest> <refresh>5m</refresh> <refreshType>delay</refreshType> </search> <option name="colorMode">block</option> <option name="drilldown">none</option> <option name="height">50</option> <option name="rangeColors">["0xdc4e41","0x006d9c","0x20BF1D"]</option> <option name="rangeValues">[0,10]</option> <option name="refresh.display">progressbar</option> <option name="useColors">1</option> <option name="link.exportResults.visible">false</option> <option name="link.inspectSearch.visible">false</option> <option name="link.openPivot.visible">false</option> <option name="link.openSearch.search">false</option> <option name="link.visible">false</option> <option name="refresh.link.visible">true</option> </single> </panel> <panel> <title>avg wait_in (F1)</title> <single> <search> <query>index=bostb AND MachineID=BB_PA1 AND Tag="*.Equipment.Sts.CurrState.Inbound[x].Inbound[1].ArrivedID[x].ArrivedID[1]" AND Value>0 | delta _time p=1 as next_tray | eval wait_sec=ABS(next_tray) | where wait_sec<100 | stats avg(wait_sec) as avgwait | eval avgwait=round(avgwait,1) | table avgwait</query> <earliest>-7d@h</earliest> <latest>now</latest> </search> <option name="drilldown">none</option> <option name="height">50</option> <option name="numberPrecision">0.0</option> <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option> <option name="refresh.display">progressbar</option> <option name="link.exportResults.visible">false</option> <option name="link.inspectSearch.visible">false</option> <option name="link.openPivot.visible">false</option> <option name="link.openSearch.search">false</option> <option name="link.visible">false</option> <option name="refresh.link.visible">true</option> </single> </panel> <panel> <title>avg per min (F1)</title> <single> <search> <query>index=bostb AND MachineID=BB_PA1 AND Tag="*.Equipment.Sts.CurrState.Inbound[x].Inbound[1].ArrivedID[x].ArrivedID[1]" AND Value>0 | delta _time p=1 as next_tray | eval wait_sec=ABS(next_tray) | where wait_sec<100 | stats avg(wait_sec) as avgwait | eval avgwait=round(avgwait,1) | table avgwait</query> <earliest>-7d@h</earliest> <latest>now</latest> </search> <option name="drilldown">none</option> <option name="height">50</option> <option name="numberPrecision">0.0</option> <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option> <option name="refresh.display">progressbar</option> <option name="link.exportResults.visible">false</option> <option name="link.inspectSearch.visible">false</option> <option name="link.openPivot.visible">false</option> <option name="link.openSearch.search">false</option> <option name="link.visible">false</option> <option name="refresh.link.visible">true</option> </single> </panel> <panel> <title>MvHrs PA2</title> <single> <search> <query>index=bostb AND MachineID=BB_PA2 Tag="*AxisX.r64_position" AND Tag="*top_*" | eval move=round(Value,0) | timechart span=6m dc(move) as dcmv | eval dcmv=if(dcmv>=3, 0.1, 0) | stats sum(dcmv) as mvhrs | table mvhrs</query> <earliest>-7d@h</earliest> <latest>now</latest> <refresh>5m</refresh> <refreshType>delay</refreshType> </search> <option name="colorMode">block</option> <option name="drilldown">none</option> <option name="height">50</option> <option name="numberPrecision">0.0</option> <option name="rangeColors">["0xdc4e41","0x0877a6","0x20BF1D"]</option> <option name="rangeValues">[0,1]</option> <option name="refresh.display">progressbar</option> <option name="underLabel">moving_hrs</option> <option name="useColors">1</option> <option name="link.exportResults.visible">false</option> <option name="link.inspectSearch.visible">false</option> <option name="link.openPivot.visible">false</option> <option name="link.openSearch.search">false</option> <option name="link.visible">false</option> <option name="refresh.link.visible">true</option> </single> </panel> <panel> <title>Tray_IN2</title> <single> <search> <query>index=bostb AND MachineID=BB_PA2 AND Tag="*Application.GVL_Hmi.Equipment.Sts.CurrState.Inbound[x].Inbound[1].ArrivedID[x].ArrivedID[1]" | stats dc(Value) as TrayIn1 by Tag | fillnull TrayIn1 | eval TrayIn1=if(TrayIn1=1,0,TrayIn1-1) | table TrayIn1</query> <earliest>-7d@h</earliest> <latest>now</latest> <refresh>5m</refresh> <refreshType>delay</refreshType> </search> <option name="colorMode">block</option> <option name="drilldown">none</option> <option name="height">50</option> <option name="rangeColors">["0xdc4e41","0x006d9c","0x20BF1D"]</option> <option name="rangeValues">[0,10]</option> <option name="refresh.display">progressbar</option> <option name="useColors">1</option> <option name="link.exportResults.visible">false</option> <option name="link.inspectSearch.visible">false</option> <option name="link.openPivot.visible">false</option> <option name="link.openSearch.search">false</option> <option name="link.visible">false</option> <option name="refresh.link.visible">true</option> </single> </panel> <panel> <title>avg wait_in (F1)</title> <single> <search> <query>index=bostb AND MachineID=BB_PA2 AND Tag="*.Equipment.Sts.CurrState.Inbound[x].Inbound[1].ArrivedID[x].ArrivedID[1]" AND Value>0 | delta _time p=1 as next_tray | eval wait_sec=ABS(next_tray) | where wait_sec<100 | stats avg(wait_sec) as avgwait | eval avgwait=round(avgwait,1) | table avgwait</query> <earliest>-7d@h</earliest> <latest>now</latest> </search> <option name="drilldown">none</option> <option name="height">50</option> <option name="numberPrecision">0.0</option> <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option> <option name="refresh.display">progressbar</option> <option name="link.exportResults.visible">false</option> <option name="link.inspectSearch.visible">false</option> <option name="link.openPivot.visible">false</option> <option name="link.openSearch.search">false</option> <option name="link.visible">false</option> <option name="refresh.link.visible">true</option> </single> </panel> <panel> <title>avg per min (F1)</title> <single> <search> <query>index=bostb AND MachineID=BB_PA2 AND Tag="*.Equipment.Sts.CurrState.Inbound[x].Inbound[1].ArrivedID[x].ArrivedID[1]" AND Value>0 | delta _time p=1 as next_tray | eval wait_sec=ABS(next_tray) | where wait_sec<100 | stats avg(wait_sec) as avgwait | eval avgwait=round(avgwait,1) | table avgwait</query> <earliest>-7d@h</earliest> <latest>now</latest> </search> <option name="drilldown">none</option> <option name="height">50</option> <option name="numberPrecision">0.0</option> <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option> <option name="refresh.display">progressbar</option> <option name="link.exportResults.visible">false</option> <option name="link.inspectSearch.visible">false</option> <option name="link.openPivot.visible">false</option> <option name="link.openSearch.search">false</option> <option name="link.visible">false</option> <option name="refresh.link.visible">true</option> </single> </panel> </row> </dashboard>
... View more
