Thanks @bowesmana one of my recently published examples app for our upcoming Splunk .Conf20 session Itsy Bitsy App for Splunk shows two CSS overrides (on similar lines to create Tabs using Dashboard Names  Navigation menu and Links within dashboard. Do check out the SplunkTrust track talk TRU1276C: Splunk dashboard journey: Past, Present and Future with amazing @cmerriman  ... View more

Also you might not have access to Internal index (i.e. _internal) so try changing to an index which you may have access to. ... View more

@akarivaratharaj try the other debug steps I have mentioned. Hope that will help at-least figuring out where the issue is. ... View more

@akarivaratharaj which version of Splunk are you using? Also when you open Browser Inspector do you seen any Console Log Errors? Hope you have tried bump, refresh, restart of Splunk in your Dev environment and also internet browser  history cleanup. In order to test JS being picked up you can try changing the Browser URL to the JS file. For example since we are using JS searchcontrolsevents.js file, you can try the following (http or https depending on your Dev environment setup). PS: App folder name is case-sensitive hope MyApp is spelled with correct casing). If it opens the JS then it implies JS is in the right path. You should verify the code as well. In the JS code block you can add console.log("My Custom Search UI"); as first piece of JS code before declaring submitted and default token model. This can help you debug further or atleast confirm whether JS is loading and has not syntax errors. http(s)://<yourSplunkURL:port>/en-US/static/app/MyApp/searchcontrolsevents.js While my previous answer was from 2017, I just tested in version 8.0.5 and it works as expected. (Latest screenshot attached for reference).   ... View more

@yshen Simple XML JS extension should work as the issue you have listed is unrelated to dashboard. Have you added id="multi1" for the multi-select input you have created in the UI? If so please share Simple XML snippet for multi-select as well. Also while debugging JS it is good practice to add console.log like console.log("Inside my multi-select JS script") as first executable JS line so that you can debug into issues through Browser console. In your example you are having console log inside multiselect change handler which may not execute if mulitselect with ID multi1 does not exists in SimpleXML. Also you may have to bump, refresh, restart Splunk, followed by internet Browser history cleanup depending on your Dev environment configuration for static files like JS, CSS, images to work. Following is bare-minimal code which I tried and worked (shows output in Browser Inspector Console).   <form script="multiselect.js"> <label>Multiselect through JS</label> <fieldset submitButton="false"> <input id="multi1" type="multiselect" token="multi1" searchWhenChanged="true"> <label>Multiselect 1</label> <choice value="a">Apple</choice> <choice value="b">Beta</choice> <choice value="c">Charlie</choice> </input> </fieldset> </form> Following is required JS but do not know its actual purpose and catch watch whole video tutorial to understand what is your use case. Just want to let you know that most Multi-Select output can be handled in Simple XML as well (following answer explains similar use case but with check-box instead of multi-select: https://community.splunk.com/t5/Dashboards-Visualizations/Can-I-hide-unhide-specific-text-boxes-using-a-single-checkbox/m-p/413895). require([ 'jquery', 'underscore', 'splunkjs/mvc', 'splunkjs/mvc/simplexml/ready!' ], function ($, _, mvc) { console.log("Inside Multiselect JS"); var multi1 = mvc.Components.get("multi1") multi1.on("change", function () { current_val = multi1.val() console.log("Current Vals: " + current_val) var first_choice_value = multi1.options.choices[0].value; if (current_val.length > 1 && current_val.indexOf(first_choice_value) == 0) { multi1.val(_.without(current_val, first_choice_value)); } if (current_val.length > 1 && current_val.indexOf(first_choice_value) > 0) { multi1.val([first_choice_value]); } }); });       ... View more

@sbhatnagar88 for issue 1 you need a developer with JavaScript/jQuery knowledge (This is not a Splunk related issue). What have you tried to get Stars displayed in front-end? What has not worked? For issue 2, writing to CSV is incorrect approach, ideally you should be writing to KVStore for this kind of use case not CSV. Nevertheless, you can get the logged in Splunk User name by two approach: Option 1. Use environment token $env:user$ in Simple XML to set a token using Independent search.  The following example explains the approach with an independent search to set the token loggedInUser through SimpleXML and accesses token loggedInUser in JS using default or submitted token model. (you can find several examples for accessing tokens from change event handler of default and submitted token models in Splunk Dev or Splunk Answers. https://dev.splunk.com/enterprise/docs/developapps/visualizedata/binddatausingtokens/transformandvalidate/) <!-- Independent Search to get Logged in User Name --> <search> <query>| makeresults | fields - _time | eval loggedInUser="$env:user$" </query> <earliest>-1s</earliest> <latest>now</latest> <done> <set token="loggedInUser">$result.loggedInUser$</set> </done> </search> Option 2: Use splunk.config library to access User Name from object SplunkConfig['USERNAME']   require([ ... ... 'splunk.config' ], function(..., SplunkConfig) { ... // Set the currently logged in user from Splunk Configuration to Token var username = SplunkConfig['USERNAME']; ... }); ... View more

@vvemula Actual answer will depend on your current SPL and how you are coming to the Time field, what is its use case? Why it can't be YYYY-mm-dd format. One of the options would be to use fieldformat to format Time instead of eval. So that original time remains epoch. | table _time | fieldformat _time=strftime(_time,"%d-%b-%y") | sort _time  Following is a run anywhere example: | makeresults | fields - _time | eval data="27-Aug-20,17-jul-20,4-sep-20,30-jul-20,16-jul-20" | makemv data delim="," | mvexpand data | eval _time=strptime(data,"%d-%b-%y") | table _time | fieldformat _time=strftime(_time,"%d-%b-%y") | sort _time ... View more

@BernardEAI  this is a known issue with 7.3.3 with some workaround documented in the following answer: https://community.splunk.com/t5/Dashboards-Visualizations/How-to-include-CSS-in-Dashboards-with-the-latest-Splunk-version/m-p/465917 Also, ideally after testing CSS Style you should try to migrate the same from XML to a CSS static file. ... View more

@ARaman77 just add the following two SPL pipes to your existing search. Current you have only one series with numerical data. So only one series color gets applied. | eval {RAG}=errCount | fields - RAG errCount   ... View more

@alonsocaio you can use Simple XML JS Extension for POST. Refer to KV Store implementation (you may not need to convert dashboard to HTML, this can be done through Simple XML JS extension directly). https://dev.splunk.com/enterprise/tutorials/tutorialusekv/addarecord ... View more

@spicynuggs try one of following answer of mine: https://community.splunk.com/t5/Dashboards-Visualizations/XML-to-display-in-a-proper-format-with-tag/m-p/464895 ... View more

@sjbriggs you can use Link Input from Splunk as Submit button with some CSS override and Token handling 🙂 Heck, you can have multiple Submit buttons as well. Refer to one of my older answers on similar lines: https://community.splunk.com/t5/Dashboards-Visualizations/Each-Dashboard-Panel-should-able-to-run-query-on-submit/m-p/502663 ... View more

@AlexV which version of Splunk? May be reach out to Dashboard Team dashboards-beta@splunk.com with issue details like errors in UI, console, splunkd logs etc. ... View more

@akarivaratharaj try one of my older answers on similar lines: https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-app-banner-css-when-open-search-in-search-bar/m-p/336388 If it does not work post details on error/issue like screenshot from UI or Console error. ... View more

@Digvijay You may have to check Splunk Dashboard App (Beta) for pixel perfect PDF or PNG download option. Refer to the following blog: https://www.splunk.com/en_us/blog/tips-and-tricks/dashboards-beta-v0-7-export-dashboard-to-png-pdf-and-self-service-install-for-splunk-cloud.html ... View more

@danielgp89 as suggested even browser history needs to be cleaned up. If you are in your dev instance you can remove caching features for faster static file changes (not for production environments). Refer to Splunk Documentation for web.conf config: https://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/CustomVizTutorial   Do accept/up vote the answer if it helped! ... View more

@jason_hotchkiss that would be because you are running version 7.3.3 which had this as an issue. PS. Once tested you should move the CSS style to a stylesheet so that it is re-usable. Once you do so </p> workaround will not be required. Following is an old answer for reference: https://community.splunk.com/t5/Dashboards-Visualizations/How-to-include-CSS-in-Dashboards-with-the-latest-Splunk-version/m-p/465917 ... View more