About NS

NS · ‎03-31-2021

Hey Splunkers! Please help me with the below query. I have the below table, and i want to create a new column based on the existing column values: Column1 Column2 Column3 Result Apple Grape Cherry Fruits Spinach Potato Raddish Vegetables The Result column is the one Im looking to derive with the below query: | eval Result = if(column1="Apple" OR column2="Grape" OR column3="Cherry" , "Fruits", column1="Spinach" OR column2="Potato" OR column3="Raddish" , "Vegetables",1==1, "Unknown") However im getting an error, can someone please help? Much appreciated. Thanks!

NS · ‎02-09-2021

I tried this, it worked while i tested it the first time, and then the same issue continued after i refreshed the dashboard. Please help !

NS · ‎02-08-2021

Here is the XML: <input type="dropdown" token="theme"> <label>Theme</label> <choice value="one">Panel One</choice> <choice value="two">Panel Two</choice> <choice value="three">Panel Three</choice> <choice value="four">Panel Four</choice> <choice value="five">Panel Five</choice> <change> <condition match="$theme$=="one""> <set token="one">1</set> <unset token="two"></unset> <unset token="three"></unset> <unset token="four"></unset> <unset token="five"></unset> </condition> <condition match="$theme$=="two""> <set token="two">1</set> <unset token="one"></unset> <unset token="three"></unset> <unset token="four"></unset> <unset token="five"></unset> </condition> . . . and so on, for all five panels </change> Later under each panel, am assigning the token: <row> <panel depends="$one$"> ......... </panel> </row> Kindly help!

NS · ‎01-05-2021

Hi All, I am trying to display panel-One when selected One from the dropdown option, and panel-Two when selected Two from the dropdown option, and so on. It was working perfectly fine until last week, but now the issue is: When i select dropdown option One, no panel is displayed, when i select Two, Panel-One is displayed, and later when i select Three, the last selected dropdown option panel is selected, ie. Two. Can someone urgently help please? My dashboard is completely messed up now, and I cant figure out where the actual problem is. Many thanks in advance 🙂

NS · ‎12-09-2020

This is exactly what i was looking for! Thanks a lot.

NS · ‎12-09-2020

Hey Splunkers! I have several events from a particular index, and am looking to extract field value pair from one of the fields. Sample event: Description Type Attribute: environment=PROD\nAttribute: severity=MAJOR\nAttribute: time_ins=2020-11-30T17:45:33\nAttribute: affected_aspect=Exit\nAttribute: plane=Prod\nAttribute: workflow_state=New ALERT I need each of these attributes as another column in the search. environment severity time_ins affected_aspect plane workflow_state Type prod MAJOR 2020-11-30T17:45:33 Exit Prod New ALERT Can someone please guide me? Thank you!

NS · ‎12-01-2020

Hi, I am having the same problem. It works fine if i select any option from the dropdown menu, when i select All, it shows the last one. I want all the panels to be shown on the dashboard by default. Your help is much appreciated. Thanks.

NS · ‎11-30-2020

Hey Splunkers, Currently, I have 3 checkboxes to filter data for the panel. eg: My checkbox names are : Critical, Major and Minor Name Value Critical Sev 1 Major Sev 2 Minor Sev 3 Based on the severity, the panel searches for all the respective tickets. I want to add 2 values in the checkbox, is there a way i can add two values to one checkbox? Name Value1 Value2 Critical Sev 1 Major Sev 2 Sev 3 Minor Sev 4 Sev 5 Or an alternative way to implement this please? Thanks in advance.

NS · ‎11-13-2020

This worked perfectly, thank you. Can you also let me know if i can categorize all the fruits in Column 2 and add a column with the total number of fruits. I expect the result to be like this: Category Column 2 Fruit Apple Veg Carrot Veg Drumstick Fruit Mango Fruit Mango Veg Drumstick Your help is much appreciated.

NS · ‎11-11-2020

from the table output, i want to rename row values for few fields, say for eg: Column 1 Column 2 1 AAA 2 C 3 D 4 MMM 5 MMM 6 DDD I want the result to look like below: Coulmn 1 Column 2 1 Apple 2 Carrot 3 Drumstick 4 Mango 5 Mango 6 Drumstick Basically, I have a list for mapping, Any letter begins with A to be renamed as Apple, and the ones with D to be renamed as Drumstick, and so on. Can someone please help me? I am quite new to Splunk. Thanks in advance.

NS · ‎09-03-2020

I am trying to schedule a report where it will give me the list of tickets created in a day. When i put the filter for yesterday from date picker, it is giving me all the tickets that had an event generated yesterday from service-now. I only need the ones that opened on a particular day, not the ones that were updated. For example, my table(created and _time) has below rows and i want only the first one: created _time 2020-09-02 07:44:55 2020-09-02 14:52:24 2020-08-28 15:27:36 2020-09-02 02:27:00 2020-08-21 16:05:46 2020-09-02 02:25:59 2020-08-24 13:46:39 2020-09-02 00:53:54 Is there a way i can filter this table to get only those rows from created column that have same date as the ones in _time? This might be the simplest query of all, but I am a newbie here. Really appreciate if someone could help me.

Posts	11
Solutions	0
Karma Given	5
Karma Received	0
Member Since	‎09-03-2020

Online Status	Offline
Date Last Visited	‎04-03-2021 02:53 AM

Compare three column values and evaluate fourth

Panels take time to change

Can i extract a dataset from a single column and s...

How to assign multiple values to the same checkbox

Can i rename row values

filter a column from the table search

Compare three column values and evaluate fourth

Re: Panels take time to change

Re: Panels take time to change

Panels take time to change

Re: Can i extract a dataset from a single column a...

Can i extract a dataset from a single column and s...

Re: How to display multiple panels when ALL option...

How to assign multiple values to the same checkbox

Re: Can i rename row values

Can i rename row values

filter a column from the table search