About pitmod

pitmod · ‎06-08-2021

I've a panel with Splunk_ML_Toolkit.OutliersViz. The chart on Y axis shows name: Series 2. I'd like to change it to something else or remove that name. How can I do it?

pitmod · ‎05-27-2021

Is there a way to show trend with Horseshoe Meter viz in the similar way as with single viz?

pitmod · ‎05-07-2021

@cmerriman works great. Thanks

pitmod · ‎04-22-2021

I have a two saved searches A and B. Each gives an output like below: A: host host1 host2 host 3 B: host host 2 host 3 host 4 I'd like to execute search that uses results of both saved searches to perform set subtraction: A - B. So in this example I should get host1 as an result. The number of hosts for A and B can be greater than 10000 so I'd like to avoid using subsearch command as my output could be truncated.

pitmod · ‎10-20-2020

@t_shreya Which makro should be edited? On the screenshot you've attached I don't see a horizontal threshold line.

pitmod · ‎10-19-2020

Hello, how can I add treshold line in my forecastviz? I've tried as below but it's not visable on the chart. With normal line chart it works fine. | mysearch | eval Treshold=90| timechart span=120min latest(Treshold) as Treshold avg(MyPredictedValue) as PredictedValue | predict "PredictedValue" as prediction algorithm=LLT holdback=12 future_timespan=96 upper95=upper95 lower95=lower95 | `forecastviz(96, 12, "PredictedValue", 95)` | filldown Threshold

pitmod · ‎10-15-2020

Hello, In my lookup I have the following data: _time='2020-10-21 15:00' usage='1' host='A' _time='2020-10-26 15:00' usage='2' host='B' _time='2020-10-21 16:00' usage='3' host='A' _time='2020-10-23 18:00' usage='4' host='A' _time='2020-10-24 15:00' usage='2' host='B' I want to get only the earliest entry for each host so it will look like this: host='A' _time='2020-10-21 15:00' usage='1' host='B' _time='2020-10-24 15:00' usage='2' How can I do it?

pitmod · ‎10-13-2020

Hello, I have the following data book="title1" reader="reader1" book="title1" reader="reader1" book="title1" reader="reader2" book="title1" reader="reader2" book="title2" reader="reader1" book="title2" reader="reader3" book="title2" reader="reader3" book="title2" reader="reader3" ... I'd like to represent it in a multi-series bar chart showing number of reads by reader per title as in a drawing below: count ^ | _____________ _____________ | | | | | | |_reader1_____| | | | | | |_reader3_____ | | |_reader2_____| |_reader1_____ | ----------------------------------------------------> titles title1 title 2

pitmod · ‎09-01-2020

I have the following dashboard: <form> <label>RHN Status sandbox</label> <row> <panel> <title>Test</title> <html> <div> <img src="http://collab.ubs.net/adventskalender/IconBrowser/com.ubs.a00.icons.ui/src/web/icons/32x32/0239_OK6.png"/> </div> </html> <input type="checkbox" token="show_details"> <label></label> <choice value="1">Details</choice> </input> </panel> </row> </form> The input checkbox is always above the img in div. Do could I put input below the img?

pitmod · ‎08-14-2020

I fixed it by renaming both fields. Thanks

pitmod · ‎08-13-2020

Thanks Giuseppe, the second approach would work for me. The issue is that the fields have different names and format: hostname for someindex is base name and host for otherindex is fqdn. I've tried to run eval and rename like here: (index=someindex source=somesource) OR (index=otherindex source=othersource) | eval myhostname=mvindex(split(host,"."),0) | rename myhostname as hostname | stats dc(index) AS dc_index values(index) AS index BY hostname but it returns only hostnames for the otherindex search so sth is not right.

pitmod · ‎08-13-2020

Hi, I have the following search and sub-search: index=someindex source=somesource | search [search index=otherindex source=othersource | fields hostname] My subsearch generates list of hostnames. As a result I'd like to get list of hosts that have been found by main search and list of hosts that have not been found. The hosts not found I'd like to put in one table and the on hosts found apply some filter and present in another table.

Posts	12
Solutions	0
Karma Given	10
Karma Received	2
Member Since	‎08-13-2020

Online Status	Offline
Date Last Visited	‎06-09-2021 07:12 AM

Splunk_ML_Toolkit.OutliersViz how to change series...

Horseshoe Meter trend

Two sets subtraction

draw treshold line in predict forecastviz

Earliest entry for each host

Bar chart with multiple series

Panel input bottom align

How to put found and not found results of search i...