Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- News & Events
- :
- About vivek_manoj
vivek_manoj
Explorer
Member since:
08-28-2016
06-05-2020
Community Statistics
| Posts | 22 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 08-28-2016 |
Activity Feed
- Got Karma for Wordcloud Custom Visualization: How to add the drilldown option?. 06-05-2020 12:48 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 |
12-24-2019
01:16 AM
Please confirm.
... View more
09-08-2017
03:33 PM
It can be done but it is nasty. You must expand the timepicked range a bit ( myBufferSeconds ) to make sure that you capture the all the events with the other time values because obviously the other time field ( MyOtherEpochDateField ) has different values than _time does (or you wouldn't be asking this).
index=YouShouldAlwaysSpecifyAnIndex sourcetype=AndSourcetypeToo
[| makeresults
| addinfo
| eval myBufferSeconds = 5*24*60*60
| eval search="earliest=" . round((info_min_time - myBufferSeconds),0) . " latest=" . round((info_max_time + myBufferSeconds), 0)
| table search]
MyOtherEpochDateField>=
[| makeresults
| addinfo
| return $info_min_time] AND
MyOtherEpochDateField<=
[| makeresults
| addinfo
| return $info_max_time]
If your MyOtherEpochDateField is not a time_t (AKA epoch ) then you have to do even more work and you can no longer template your base search and have to pull all the events in and use a | eval MyOtherEpochDateField=strptime(MyOtherEpochDateField, "%some%time%format%here") | search MyOtherEpochDateField ....
... View more
05-01-2019
02:02 PM
I downvoted this post because this does not work setting an initialValue. There are much more robust solutions out there.
... View more
04-13-2017
03:53 AM
HI vivek_manoj,
using web interface go in [Settings -- User Interface -- Time ranges]
you can create, modify, enable or disable Time ranges.
Bye.
Giuseppe
... View more
10-28-2017
09:42 AM
@vivek_manoj, I am not sure whether you had tried the run anywhere dashboard example for text box JavaScript Validation. Can you please check and confirm? This is purely Simple XML hence does not require JavaScript or Reboot/Refresh/Bump of Splunk.
... View more
10-28-2017
09:46 AM
@vivek_manoj, refer to answer from @gwobben for JavaScript based drilldown: https://answers.splunk.com/answers/471329/is-it-possible-to-drilldown-from-an-status-indicat.html
... View more
04-03-2017
04:30 AM
just throwing out there but if you want to capture the searches, you can go with something like this:
| history | table _time search | outputlookup searches.csv
... View more
03-31-2017
05:36 AM
You can use CSS directly in your SimpleXML. Add the following to your XML just above the </form> or </dashboard>
<row depends="$noshow$">
<html>
<style>
.input-dropdown {
min-width: 120px !important;
width: 120px !important;
max-width: 120px !important;
}
.splunk-dropdown .select2-container {
min-width: 120px !important;
width: 120px !important;
max-width: 120px !important;
}
</style>
</html>
</row>
... View more
08-30-2016
09:45 PM
Thanks for the reply.
... View more
08-29-2016
06:14 AM
http://docs.splunk.com/Documentation/Splunk/6.4.3/Admin/Propsconf
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
