Hi, I am trying to conditionally add records to my table with a slight modification to the data. for example Date ID Type Duration 2019-11-22 ABC XYZ 4 2019-11-26 BCD YZX 2 So for this record I am trying to add data to my table like Date ID Type Duration 2019-11-22 ABC XYZ 4 2019-11-23 ABC XYZ 3 -- Add new row 2019-11-24 ABC XYZ 2 -- Add new row 2019-11-25 ABC XYZ 1 -- Add new row 2019-11-26 BCD YZX 2 -- Add new row 2019-11-27 BCD YZX 1 -- Add new row Any pointers on this? Thanks. ... View more

Hello, Have a question for the community: I have a table that looks like this: ADate Type 2019-12-01 ABC 2019-12-02 ABC 2019-12-02 XYZ 2019-12-03 XYZ When I run ..... |stats count by A , Type- I get only the counts of Types that are there on that date. I want to append the count of 2019-12-01 for XYZ as 0 , 2019-12-03 ABC as 0 like that in my result. Any help with this? Thanks. ... View more

Hi, Inside my dashboard I am executing a oneshotSearch in my html dashboard using javascript. How do I pass tokens to this search? service2.oneshotSearch( searchQuery, searchParams, function(err, results) { // Display the results....} var searchQuery = "...\"$form.Application$\" "; I tried the above syntax and it does not work. It has to be a html dashboard. Thanks. ... View more

Hello, I am trying to access the value of a text input box in an html dashboard to pass to the saved search being called when submit button is pressed. I am unable to get the value so far. Can someone pls tell me what I am missing? Thanks, Komal <div id="panel2" class="dashboard-cell" style="width: 100%;"> <div class="dashboard-panel clearfix"> <div class="fieldset"> <div class="input input-text" id="text1"> <label> </label> </div> </div> …. Form Inputs section of the dashbaord // // VIEWS: FORM INPUTS // var text1 = new TextInput({ "id": "text1", "searchWhenChanged": true, "value": "$appname_tok$", "el": $('#text1') }, {tokens: true}).render(); In my saved search I am saying ….$appname_tok$ but it does not pick up the value entered. I have referenced this document already. http://dev.splunk.com/view/webframework-codeexamples/SP-CAAAE5V Any pointers? Thanks a lot. ... View more