Panel_1: <set token="V20">$result.value_20$</set> <set token="V40">$result.value_40$</set> <set token="V0">$result.value_0$</set> <set token="V100">$result.value_100$</set> Panel_2: <format type="color" field="&gt;6hrs-&lt;8hrs"> <colorPalette type="expression">case(value&lt;="$V20$", "#006400", value&gt;"$V20$" AND value&lt;="$V40$", "#ffb200", value&gt;"$V40$", "#800000")</colorPalette> </format> <format type="color" field="&gt;8hrs-&lt;10hrs"> <colorPalette type="expression">case(value&lt;="$V20$", "#006400", value&gt;"$V20$" AND value&lt;="$V40$", "#ffb200", value&gt;"$V40$", "#800000")</colorPalette> </format> <format type="color" field="&gt;10hrs-&lt;12hrs"> <colorPalette type="expression">case(value&lt;="$V20$", "#006400", value&gt;"$V20$" AND value&lt;="$V40$", "#ffb200", value&gt;"$V40$", "#800000")</colorPalette> </format> <format type="color" field="&gt;12hrs-&lt;14hrs"> <colorPalette type="expression">case(value&lt;="$V20$", "#006400", value&gt;"$V20$" AND value&lt;="$V40$", "#ffb200", value&gt;"$V40$", "#800000")</colorPalette> </format> <format type="color" field="&gt;14hrs-&lt;16hrs"> <colorPalette type="expression">case(value&lt;="$V20$", "#006400", value&gt;"$V20$" AND value&lt;="$V40$", "#ffb200", value&gt;"$V40$", "#800000")</colorPalette> </format> The above is Scenario, i have created the tokens from the Panel_1 result and passing those tokens into the Colorpalette expression to highlight the cells dynamically. But i can't able to reach the desired output. How can i reach the desired output? ... View more

Dear team, Can you please help me on the below query: We have a textbox in the Dashboard, whatever the value is given to the textbox that need to be stored in index. is it possible in splunk? ... View more

Below table we have in a dashboard, the cells are highlighted by color using the Javascript. For each cell we wrote the separate javascript file like., <dashboard script="Running.js,Ready.js,Stop.js,Pause.js,Emergency.js,CF.js" stylesheet="New.css"> what we expect is the color of each cell should be same when the Match field value is "Good", if the Match field value is "Bad", Need to Highlight the whole Row. //Sample Javascript Code: require([ 'underscore', 'jquery', 'splunkjs/mvc', 'splunkjs/mvc/tableview', 'splunkjs/mvc/simplexml/ready!' ], function(_, $, mvc, TableView) { // Row Coloring Example with custom, client-side range interpretation var CustomRangeRenderer = TableView.BaseCellRenderer.extend({ canRender: function(cell) { // Enable this custom cell renderer for the confirm field return _(['CF']).contains(cell.field); }, render: function($td, cell) { // Add a class to the cell based on the returned value var value = parseFloat(cell.value); // Apply interpretation for number of if (cell.field === 'CF') { if (value > 0) { $td.addClass('range-cell').addClass('range-CF'); } else { $td.addClass('range-cell').addClass('range-White'); } } // Update the cell content $td.text(value.toFixed()).addClass('numeric'); } }); mvc.Components.get('highlight').getVisualization(function(tableView) { tableView.addCellRenderer(new CustomRangeRenderer()); }); });   //Sample .CSS Code /* Cell Highlighting */ /* #highlight td { background-color: #c1ffc3 !important; } */ #highlight td.range-stop { background-color: #FF1B09 !important; } #highlight td.range-Emergency { background-color: #CB1708 !important; } #highlight td.range-Pause { background-color: #f7bc38 !important; } #highlight td.range-Run { background-color: #65a637 !important; } #highlight td.range-Ready { background-color: #A2CC3E !important; } #highlight td.range-CF { background-color: #6DB7C6 !important; } #highlight td.range-MS { background-color: #000000 !important; } #highlight td.range-White { background-color: #ffffff !important; } #highlight td.range-severe { background-color: #3358FF !important; font-weight: bold; } How can we do that, can you please help us? ... View more

Dear Team, We are generating the Temporary ID based on the Parameter which is crossing beyond the Park Average. Here i have attached a scenario for a single Parameter. For each day alert Generating for a Particular Events. The code which we using, index="alert_id" ID="KirvereGKA42SlipRingTemperatureHigh" |dedup New_ID, Turbine, Alert_ID, Unique_ID, CreatedDate |eval Today=strftime(relative_time(now(), "@d"), "%Y-%m-%d") |eval Date_1 = strptime(CreatedDate,"%Y-%m-%d") |eval Date_2 = strptime(Today,"%Y-%m-%d") |eval Duration = round((Date_2 - Date_1)/86400) |streamstats window=2 range(Date_1) as NDate by ID |eval Dur_Str = round(NDate/86400) |eval Combine = if(Dur_Str<=1,"Open","Closed") |eval OpenDate = if(Combine="Open", CreatedDate, "") |eval ClosedDate = if(Combine="Closed", CreatedDate, "") | streamstats count as S_No by ID |eval Close = case(Combine="Closed",S_No) |eventstats values(eval(if(S_No >= Close, "Closed", "Open"))) as Status by S_No |table S_No, Alert_ID, WindFarm, Turbine, Category, WindFarm, Parameter, WTG_value, farm_avg, CreatedDate, Duration, Dur_Str. Output of the Code ,Please find the below screenshot for your reference. S_No Alert_ID WindFarm Turbine Category Parameter WTG_value farm_avg CreatedDate Duration Dur_Str 1 TE-43065 Kirvere GKA42 High SlipRingTemperature 45.99 33.1 9/4/2020 0 0 2 TE-42243 Kirvere GKA42 High SlipRingTemperature 46.02 32.73 9/3/2020 1 1 3 TE-41336 Kirvere GKA42 High SlipRingTemperature 46.02 32.64 9/2/2020 2 1 4 TE-39260 Kirvere GKA42 High SlipRingTemperature 46.1 31.66 8/31/2020 4 2 5 TE-38213 Kirvere GKA42 High SlipRingTemperature 46.01 32.72 8/30/2020 5 1 6 TE-37103 Kirvere GKA42 High SlipRingTemperature 45.97 33.91 8/29/2020 6 1 7 TE-36017 Kirvere GKA42 High SlipRingTemperature 45.96 34.55 8/28/2020 7 1 8 TE-34988 Kirvere GKA42 High SlipRingTemperature 45.94 34.81 8/27/2020 8 1 9 TE-33969 Kirvere GKA42 High SlipRingTemperature 45.94 34.91 8/26/2020 9 1 10 TE-33042 Kirvere GKA42 High SlipRingTemperature 45.95 34.66 8/25/2020 10 1 11 TE-32112 Kirvere GKA42 High SlipRingTemperature 45.97 34 8/24/2020 11 1 12 TE-31177 Kirvere GKA42 High SlipRingTemperature 45.99 33.21 8/23/2020 12 1 13 TE-30189 Kirvere GKA42 High SlipRingTemperature 46.01 32.74 8/22/2020 13 1 14 TE-29007 Kirvere GKA42 High SlipRingTemperature 46 32.65 8/21/2020 14 1 15 TE-27658 Kirvere GKA42 High SlipRingTemperature 45.98 33.25 8/20/2020 15 1 16 TE-26334 Kirvere GKA42 High SlipRingTemperature 45.97 33.93 8/19/2020 16 1 17 TE-25039 Kirvere GKA42 High SlipRingTemperature 45.97 33.93 8/19/2020 16 0 18 TE-23723 Kirvere GKA42 High SlipRingTemperature 45.98 34.18 8/18/2020 17 1 19 TE-22307 Kirvere GKA42 High SlipRingTemperature 45.97 34.28 8/17/2020 18 1 20 TE-21016 Kirvere GKA42 High SlipRingTemperature 45.98 34.04 8/16/2020 19 1 21 TE-19738 Kirvere GKA42 High SlipRingTemperature 46 33.6 8/15/2020 20 1 22 TE-18365 Kirvere GKA42 High SlipRingTemperature 46 33.08 8/14/2020 21 1 23 TE-17108 Kirvere GKA42 High SlipRingTemperature 45.97 33.41 8/13/2020 22 1 24 TE-15941 Kirvere GKA42 High SlipRingTemperature 45.98 33.36 8/12/2020 23 1 25 TE-14800 Kirvere GKA42 High SlipRingTemperature 45.97 33.8 8/11/2020 24 1 26 TE-13633 Kirvere GKA42 High SlipRingTemperature 45.96 34.48 8/10/2020 25 1 27 TE-12587 Kirvere GKA42 High SlipRingTemperature 46.01 34.63 8/9/2020 26 1 28 TE-11483 Kirvere GKA42 High SlipRingTemperature 46.03 34.22 8/8/2020 27 1 29 TE-10278 Kirvere GKA42 High SlipRingTemperature 46.03 34.21 8/7/2020 28 1 30 TE-9178 Kirvere GKA42 High SlipRingTemperature 46.02 34.04 8/6/2020 29 1 31 TE-8156 Kirvere GKA42 High SlipRingTemperature 46.04 33.51 8/5/2020 30 1 32 TE-7065 Kirvere GKA42 High SlipRingTemperature 45.93 34.11 8/4/2020 31 1 From the above table we need to find the duration of the Particular Events, for that i have derived the day difference from today date and days difference between rows. What we want, you can see the above table from the below we are having the Events occurred from 20/07/2020(Open) to 26/07/2020(Closed) and its not happened till 03/08/2020. After that the same events happened on 04/08/2020(Open) to 31/08/2020(Closed) and its again started on 02/09/2020(Open) to till date. We need the output like the below table: Alert_ID WindFarm Turbine Category Parameter WTG_value farm_avg CreatedDate No.ofDaysOpen OpenDate ClosedDate Please Help me on this, how to we derive OPEN and Closed Status of the Particular Events based on the Date? Thanks in Advance. ... View more

Hi, We are using Splunk Enterprise 7.1.1 version, to develop some predictive models and mail alerts to the specific site peoples is there any deviation. As of now mail alerts are working fine and As our Management want something like tracking\ticketing system for each and every mail alert. is it possible to create some ticket id in mail itself to track? As of Now mail alerts be like: And What my management is expecting to be like: In Subject itself the Ticket ID need to create and ticket ID is need to log in some index to track the changes of that particular Ticket ID. Is it possible? can you guys please suggest something? and One more thing we already tried of that Alert Manager is create the incident once the alert generated? my management is not satisfied with that. Please suggest? ... View more

Hi, In our Production environment we have one Search head and two indexers, all the instance are running in Splunk Version 7.1.1. Recently we faced a issue in one of our indexer like DB_Inputs automatically removed from the Splunk DB Connect App 2.4.0 Version. As our Vendor suggested we upgraded the DB Connect APP to 3.1.4. But now we are facing a different issue, whenever the Splunk DB Connect app 3.1.4 is enabled the Internal logs are not updating? is there any limitation? kindly suggest? ... View more

We have the Actual Generation Data from the Machine and also having the Set Points of the Particular Parameter. we need to plot the set Points as a line chart as a Reference line and actual generation to be plot as a scatter plot in a one chart. please find the below screenshot for your reference. the below chart was plotted in Ms-Excel. we need to plot this in Splunk. ... View more

I am a Windows User and Splunk Server also running in Wondows only, when we are trying to fit the model we are getting the below error: Error in 'fit' command: Error encountered while loading Python for Scientific Computing, see search.log. Can you Please us to resolve the below issue? and we are unable to find the search.log. file in Splunk Folder. ... View more