Hello, Im noticing a similar issue in my dashboard panel. I want to adjust the width of one specific column because there is a lot of content to be displayed. The number of columns here are pretty high(around 22). So there is a scroll bar to move to the right to see the rest of the columns. In this case, even when I assign width  with a specific px or %, it doesnt reflect. But when i reduce my number of columns and scrollbar doesnt appear, it adjusts the width as specified. Please suggest how to work around this. Regards, Megha ... View more

Thanks Giuseppe, We found that the splunk hostname had got changed somehow and it was causing issues with sendemail. Would you know how we can troubleshoot why this change happened. Would it be possible to get some logs on this? Thanks, Megha ... View more

Hi Giuseppe, I tried the below sendemail command from dev, test and Prod: index=_internal | head 5 | sendemail to="magha.manoj@bms.com" subject="Here is an email from Splunk" message="This is an example message" sendresults=true I receive mails on dev and test but not Prod. All three are having the same email settings. Also for the reports run on the server using mailx and mutt, they work fine in Prod as well. We do not have telnet installed yet. Thanks, Megha ... View more

Hi Giuseppe, There is no attachment, its an inline alert. Also I don't see any messages using that query , just events related to the search like: 11-05-2019 03:35:40.651 -0500 INFO StreamedSearch - Streamed search search starting: search_id=remote_ip-172-21-152-54_1572942940.315497, server=ip-172-21-152-54, active_searches=1, search='litsearch (index=_internal error sendmail) | fields keepcolorder=t "*" "_bkt" "_cd" "_si" "host" "index" "linecount" "source" "sourcetype" "splunk_server" | remotetl nb=300 et=1572854400.000000 lt=1572942940.000000 remove=true max_count=1000 max_prefetch=100', remote_ttl=600, apiStartTime='Mon Nov 4 03:00:00 2019', apiEndTime='Tue Nov 5 03:35:40 2019', savedsearch_name="" Thanks , Megha ... View more

The issue is that Xparts is splitting in a format which would not exactly match with Y. Would something like a search function in excel work? ... View more

Yes I did. It does match the first example I posted. But doesn't seem to be working on the actual format. Im checking if I can make any changes in the query. Thanks, Megha ... View more

Thankyou @woodcock The ask is actually to compare all individual values in X with all the individual values in a field of the lookup(in this case Y). And the lookup gets appended over time. Below is a format of X in our data. X 1. \11.177.32.12\iris$\DBD Team\DBD_New\Megha\Capacity Utilization September'19 (1).xlsx 2. \TG2PVFS3\Crystal_AM_Shared\2 - Team Specific Docs\01 - Business Process Document Reviews\AA\OneNote Notebooks\AA's Note\links.one Y 1. \11.177.32.12\iris$ 2. \TG2PVFS3\Crystal_AM_Shared Y could be in the middle or end of X as well and X can include spaces, hyphens etc. Thanks, Megha ... View more

Values of each Y should be compared to all X. ... View more

Hi Gaurav, If say my field value in A does not exactly match with B , then is there a way we can compare and do a match? For eg: A 1/text/text2.xlsx text1/10/text3.xlsx In both cases as '1' and '10' is a partial match to the comma separated values in B, so it needs to be excluded and say if I have a field value in A like the below - then it needs to be included: text5/7/text6.xlsx. In short the match can be in any portion of field A. The values in B will change dynamically and is pulled from lookup which gets appended over time. The ask is actually to compare all individual values in A with all the individual values in a field of the lookup. So in order to compare ,I am trying to merge all values of the field in the lookup and comma separate them to do a comparison with values in A. But the issue here is that the values in A will not be an exact match and there would be some extra text before of after the match. If there is some other way I can do a comparison, please do suggest. Thanks in advance! Megha ... View more

Hi , I do not want break down the Y field, I have merged field values to create the Y field. Is there any way this can be done? Thanks! ... View more

Thankyou! This helps. ... View more

Thankyou! This worked 🙂 ... View more