Hi. I read another post which said to remove "bin"; it didn't work. Did you correct c2 and c3 as well in the same way as shown above? Thanks ... View more

Thanks for responding. I looked at the CSV and the "appId" field is not quoted; in the database (using DB Connect Input Service) the "RELATED_AIT_NUMBER" the field is defined as an int. I have a workaround for now by modifying my query to join on the app table in the database and aliasing the field so my searches don't break. I'm thinking that there must be a way to tell how Splunk sees the fields. When I figure this out, I will post the solution here. ... View more

One of my colleagues worked it out. Here are my notes: • In setting for the app (DB Connect v2), use the Java8 JDK not JRE. • Make sure ‘jtds-1.3.1.jar’ is in \bin\lib directory. • The following stanza should reside in \local\db_connection_types only once: [mssql] displayName = MS-SQL Server Using jTDS Driver serviceClass = com.splunk.dbx2.MSSQLJtdsJDBC jdbcDriverClass = net.sourceforge.jtds.jdbc.Driver jdbcUrlFormat = jdbc:jtds:sqlserver://:/;useCursors=true #jdbcUrlFormat = jdbc:sqlserver://:;databaseName=;selectMethod=cursor;integratedSecurity=true #jdbcUrlFormat = jdbc:jtds:sqlserver://:/;useCursors=true;domain=;useNTLMv2=true #jdbcUrlFormat = jdbc:jtds:sqlserver://:/;useCursors=true;useNTLMv2=true # seems this driver cannot use pooled datasource. useConnectionPool = false testQuery = SELECT 1 [generic_mssql] useConnectionPool = false displayName = MS-SQL Server Using MS Generic Driver serviceClass = com.splunk.dbx2.MSSQLJDBC jdbcDriverClass = com.microsoft.sqlserver.jdbc.SQLServerDriver #jdbcUrlSSLFormat = jdbc:sqlserver://:;databaseName=;selectMethod=cursor;encrypt=true;trustServerCertificate=true #jdbcUrlFormat = jdbc:sqlserver://:;databaseName=;selectMethod=cursor #jdbcUrlFormat = jdbc:sqlserver://:;databaseName=;selectMethod=cursor;integratedSecurity=true jdbcUrlFormat = jdbc:jtds:sqlserver://:/;useCursors=true;domain=;useNTLMv2=true port = 1433 testQuery = SELECT 1 ... View more

I appreciate your guidance on this matter; basically I found another donut visualization that works just the way I want it (with drill down) so please consider this matter closed. Thanks again. ... View more

I found this in the samples of the app: <option name="drilldownRedirect">true</option> <option name="resizable">true</option> yet the drill down functionality does not work; not even in the samples. ... View more

Ok. So I kept looking around for an answer and found the following in the examples: <option name="drilldownRedirect">true</option> <option name="resizable">true</option> yet, drill down in the examples do not work.... Thoughts? ... View more

Hi. So here's my source with the "drilldown" option near the bottom. I've tried "true", "yes" and "all" and nothing seems to get me there: Even the examples in the app does not drill down..... Thanks in advance for paying attention to this .... <title>Total Incidents By Priority (No Drill Down, Legend Selectable)</title> <viz type="viz_donut_c3.c3donut"> <search> <query>index="idx_itsm_gig_incident" | stats count by PRIORITY_TXT | table PRIORITY_TXT count | rename PRIORITY_TXT as Priority | rename count as "Incident Count"</query> <earliest>$field1.earliest$</earliest> <latest>$field1.latest$</latest> </search> <option name="viz_donut_c3.c3donut.legend_show">1</option> <option name="viz_donut_c3.c3donut.legend_position">right</option> <option name="viz_donut_c3.c3donut.expand">1</option> <option name="viz_donut_c3.c3donut.label_show">1</option> <option name="viz_donut_c3.c3donut.label_value">value</option> <option name="viz_donut_c3.c3donut.tooltip_show">true</option> <option name="viz_donut_c3.c3donut.tooltip_value">value</option> <option name="viz_donut_c3.c3donut.width">50</option> <option name="viz_donut_c3.c3donut.label_threshold">.005</option> <option name="drilldown">all</option> <option name="resizable">Yes</option> </viz> </panel> ... View more