About kensternberg

kensternberg · ‎05-14-2014

I tried that. The constraint always wants to treat the right side of the expression as a string, not a field name. The eval method described in the answer I posted was much more effective.

kensternberg · ‎05-14-2014

@somesoni2: The problem is that the 'where' clause isn't a legal operator in the constraints object.

kensternberg · ‎05-14-2014

It turns out you can't create a where clause in Pivot. But, you can create a calculated field. In the Data Model Editor, Add Attribute -> Eval Expression. I used the field name is_internal_communication , and an evaluation if (sender_domain = receiver_domain, 1, 0) After previewing and saving, I was able to create a new child object with the constraint is_internal_communication = 1 , and obviously I could add a child object with the constraint in_internal_communication = 0 for external communications.

kensternberg · ‎05-14-2014

I want to use a 'where' clause (which allows the comparison of two fields) as a pivot constraint. My original search is index=maillog (event=SEND OR event=RECEIVE) Which gives me all the successful mail handling events. The input source breaks out the root domain of the sender and receiver into individual fields, and I want to be able to say | where sender_domain=receiver_domain In a standard search, this was easy. I'd like to use this in pivot, but I can't figure out how to make the 'where' clause a child constraint of the main search, so I can say "show me the maillog of internal communications." Help, please?

kensternberg · ‎12-06-2013

The WebFramework uses the jQuery-based Select2 Dropdown, which comes with its own set of CSS requirements. It looks to me that the authors of Select2 have chosen to enforce a CSS min-width of 200px in their CSS, right there in line 6 of their CSS file: .select2-container{min-width:200px;margin-bottom:8px;} You could override this by setting the min-width for the container object after the Select2 objects have been loaded: #field2 .select2-container{ min-width: 150px; } Doing this will allow your dropdowns to be 150px wide; you will still have to set the width on the control itself.

Posts	5
Solutions	2
Karma Given	2
Karma Received	2
Member Since	‎03-21-2013

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

pivot | where

Re: pivot | where

Re: pivot | where

Re: pivot | where

pivot | where

Re: Splunk 6 dropdown menu - decrease width