I have created tags in tags.conf inside my splunk app as below. [index=index1] app_index = enabled [index=index2] app_index = enabled then i am using search query to get all the sourcetypes from my apps with tags as below | metadata type=sourcetypes index=* | tags | search tag::index=app_index But this query not working. My understanding is since the value “index1” and “index2” was not there in type field, query got failed. Is there need any change or alternative in my search query, Kindly help me on this, Thanks ... View more

convert timeformat not responding with drilldown link tag, as a result drilldown search keep on showing loading. Sample simple xml below <row> <panel name="Job Statistics"> <table> <title>Job Statistics</title> <search> <query>index=$index$ host=$host$ eventtype=et_job_timing | eval Time=_time | convert timeformat="%d-%m-%Y:%H:%M:%S" ctime(Time)| table Time, THROUGHPUT | chart values(THROUGHPUT) by Time</query> </search> <option name="drilldown">cell</option> <drilldown> <link>search?q=search index=$index$ host=$host$ eventtype=et_job_timing| eval Time=_time | convert timeformat="%d-%m-%Y:%H:%M:%S" ctime(Time)| table Time, THROUGHPUT | where Time = "$click.value$"</link> </drilldown> </table> </panel> </row> from above simple xml below mentioned search not responding. search?q=search index=$index$ host=$host$ eventtype=et_job_timing| eval Time=_time | convert timeformat="%d-%m-%Y:%H:%M:%S" ctime(Time)| table Time, THROUGHPUT | where Time = "$click.value$" kindly guide me on this error. ... View more

How to set a panel's depends tag value from java script with simple XML? <row> <panel> <chart depends="$check_status$"> <title>Check Status</title> <searchString>......</searchString> <option name="charting.chart">line</option> <option name="charting.chart.nullValueMode">connect</option> <option name="charting.axisTitleX.text">Time</option> <option name="charting.axisTitleY.text">check status</option> <option name="charting.axisY.scale">linear</option> <option name="charting.axisY.minimumNumber">-1</option> <option name="charting.axisY.maximumNumber">3</option> <option name="charting.axisLabelsY.majorUnit">1</option> <!--<option name="link.visible">false</option>--> </chart> </panel> </row> in the above example value for check_status has to set from java script. Kindly provide example java script code. ... View more