I am having trouble to create propper drilldown action between two Custom ITSI Entity Dashboards. They both work fine, when called by clicking the Entity Name in the Service Analyzer. The two Entity Dashboards show data from two custom entity types with some relation to each other. I want to create a navigation between the two Dashboards. I did create a normal drilldown action to call the related Dashboard. This works somehow, but the Token is not handled correctly. for example I defined Token Parameters: host = $click.value2$ and in the target dashboard I see |search host=$click.value2$ instead of the real value that should have been handed over in the token. When I use the Dashboards outside of ITSI, the drilldown action works fine. Looks to me that in ITSI some scripts are used and the handover is not directly to the other Entity Dashboard, but somehow through the Entity (_key) and the defined entity type. Great if somebody could shed some insights on that! ... View more

Hi, I need to switch my Splunk Enterprise SH to the european spacebridge server. Does anybody know the correct URL? Can I just switch by pointing to the other server in securegateway.conf? Many thanks in advance Best Regards Wolfgang ... View more

Hi, I have events which contain 3 Fields: "StartDate", "Value_per_month" and "Nr_of_Month". They basically disclose some monthly financial flow which beginns at "StartDate" and ends after "Nr_of_Month". The goal is to show a sum of "Value_per_month" for each month over all events. In most cases the dates are in the future, so it will be a bit tricky to get this to work. However, at least a table view would be great and use some basic vizualisation on top. I thought I could create fields for each month, for example "value_yyyy-mm" and assign the value to each and then sum up the values in each field accross all events. However I have not found a way to do this dynamically in a loop for X times, based on variable "Nr_of_Month". I have checked combinations of eval, makeresults, foreach, gentimes, etc. Any basic idea how to approach this would be welcome. Many thanks in advance ... View more