Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About jaibalaraman
jaibalaraman
Path Finder
Member since:
09-28-2020
11-30-2024
Community Statistics
| Posts | 144 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 3 |
| Member Since | 09-28-2020 |
Activity Feed
- Posted Re: How to freeze the tile in the dashboard on Dashboards & Visualizations. 11-30-2024 02:54 PM
- Posted Re: How to freeze the tile in the dashboard on Dashboards & Visualizations. 11-27-2024 01:38 PM
- Posted How to freeze the tile in the dashboard on Dashboards & Visualizations. 11-26-2024 07:11 PM
- Posted How to share the dashboard as URL ??? on Dashboards & Visualizations. 11-26-2024 06:53 PM
- Posted Re: How to create reset in the dashboard on Getting Data In. 11-07-2024 01:01 AM
- Posted How to create reset in the dashboard on Getting Data In. 11-06-2024 02:11 PM
- Posted Re: How to display day , month and time in single value tile on Dashboards & Visualizations. 11-05-2024 04:16 PM
- Posted How to display day , month and time in single value tile on Dashboards & Visualizations. 11-04-2024 08:08 PM
- Posted How to install Splunk UF to AIX ? on Deployment Architecture. 10-29-2024 03:00 PM
- Tagged How to install Splunk UF to AIX ? on Deployment Architecture. 10-29-2024 03:00 PM
- Posted Re: How to convert the value into months , days on Splunk Search. 10-22-2024 08:31 PM
- Posted How to convert the value into months , days on Splunk Search. 10-22-2024 03:54 PM
- Posted Re: How to find out Server Uptime & Downtime on Splunk Search. 10-14-2024 05:26 PM
- Posted How to find out Server Uptime & Downtime on Splunk Search. 10-14-2024 04:15 PM
- Posted How to find out overall health status for VMWARE on Splunk ITSI. 09-08-2024 09:15 PM
- Posted Re: Missing Data in the Dashboard Tile on Splunk Search. 08-30-2024 02:42 AM
- Posted Re: Missing Data in the Dashboard Tile on Splunk Search. 08-30-2024 02:32 AM
- Posted Missing Data in the Dashboard Tile on Splunk Search. 08-30-2024 01:46 AM
- Posted Re: Spl query is not working on Splunk Search. 08-21-2024 08:26 PM
- Posted Re: Spl query is not working on Splunk Search. 08-21-2024 06:12 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
12-01-2024
05:37 AM
Try something like this (in SimpleXML of course!) <row id="banner">
<panel>
<html>
<style>
div[id="banner"].dashboard-row {
top: 0;
position: sticky;
z-index: 9999;
}
div[id="banner"] div {
background-color: yellow;
}
</style>
<h1>Your banner panel</h1>
</html>
</panel>
</row>
... View more
11-26-2024
11:25 PM
Hi @jaibalaraman , do you need a dashboard or can you use a report? It's possible to share a report. To share a dashboard users must be authenticated, so the real question is: is it possible to implement SSO in Splunk? For more infos see at https://docs.splunk.com/Documentation/UBA/5.4.1/Admin/SSO Ciao. Giuseppe
... View more
11-16-2024
07:40 AM
1 Karma
Hi @jaibalaraman yes this should be fine, visit compatibility Matrix: https://docs.splunk.com/Documentation/Splunk/9.3.2/Installation/Systemrequirements#Supported_Operating_Systems
... View more
11-07-2024
01:01 AM
Hi I found the below information from the community page,, however i am bit confused on step by step procedure Link to the splunk community - https://community.splunk.com/t5/Getting-Data-In/Reusable-Script-How-to-Reset-All-Tokens-with-a-Single-Click/td-p/472141?_gl=1*kqgr9a*_gcl_au*MTQ1NTQ1MDI1My4xNzMwNzcyMzM2*_ga*MTAzODg1MjI0My4xNzMwNzcyMzM2*_ga_5EPM2P39FV*MTczMDk2OTY3OC4xMS4xLjE3MzA5Njk5MTEuNjAuMC4xNjEyNDY3NTUx*_fplc*eWNFa0M3NWtnT0VvQjdhUjltM0VxTU9ocG1TNjh3aHFIc1l1cnFHN2g3ZGpXaFExTEpBcTdJckFPJTJCJTJCM1czMDBEU1BrUWdzVkE0Z2JrJTJCdkNnOWdpMFRBNyUyQmFGcFU4R3A4d3ExZGdrajdDUVA2VElkcEdPSjMlMkYzc2pzRVZuUSUzRCUzRA.. Thanks
... View more
11-06-2024
02:17 AM
Hi @jaibalaraman , good for you, see next time! Ciao and happy splunking Giuseppe P.S.: Karma Points are appreciated by all the contributors 😉
... View more
10-23-2024
01:12 AM
What unit of time is your BatteryAge in, seconds, hours, days? How long is a month? If your current day is the 5th of the month and the age equates to 40 days, what result would you expect?
... View more
10-14-2024
07:14 PM
1) >>> I am trying to find out Server Up time & Downtime or offline the logs got a field "Uptime", may i know if the unit is seconds? 2) how to find out the downtime or offline? 3) this command will give you number of hours before the logline was received | eval Uptime = round((now() - _time) / (60 * 60), 1) pls suggest us how you like to use this value 4) may i know why you use the | search Uptime="4.0"
... View more
09-09-2024
04:53 AM
Not quite sure what you are looking for? VMware has different components - but you will find a range of pre configured KPI's you can adapt to your requirements for ESX, Virtual Machines, Storage etc in the ITSI Content pack for Vmware
... View more
08-30-2024
03:19 AM
Try this over last 30 days index=*
| timechart span=1d count by sourcetype
... View more
08-22-2024
02:08 AM
Please share the spl query and some sample data. The data format hasn't been changed in the meanwhile?
... View more
08-21-2024
08:26 PM
Problem from dashboard, this dashboard comes with default package of ITSI which i am trying to do reverse engineering fixing the dashboard How do i fix this issue What is ldapfilter command ? and how do i fix the token issue
... View more
08-17-2024
09:07 AM
Hi @jaibalaraman, Here's a static example that uses separate elements to display a Sankey-like bar: {
"visualizations": {
"viz_GGlMQrhz": {
"type": "splunk.rectangle",
"options": {
"fillColor": "#5a4575",
"strokeColor": "#5a4575"
}
},
"viz_sdLspBWZ": {
"type": "splunk.rectangle",
"options": {
"fillColor": "#5a4575",
"strokeColor": "#5a4575",
"fillOpacity": 0.5,
"strokeOpacity": 0.5
}
},
"viz_G2e5COXh": {
"type": "splunk.rectangle",
"options": {
"fillColor": "#0877a6",
"strokeColor": "#0877a6"
}
},
"viz_izmTEXa4": {
"type": "splunk.singlevalue",
"options": {
"backgroundColor": "transparent",
"majorFontSize": 20
},
"dataSources": {
"primary": "ds_zydmsUyG"
}
},
"viz_OBDGe1i4": {
"type": "splunk.markdown",
"options": {
"markdown": "****Account Temporarily Locked Out (403120)****",
"fontSize": "custom",
"customFontSize": 20
}
}
},
"dataSources": {
"ds_zydmsUyG": {
"type": "ds.search",
"options": {
"query": "| stats count\n| eval count=123",
"queryParameters": {
"earliest": "0",
"latest": ""
}
},
"name": "Search_1"
}
},
"defaults": {
"dataSources": {
"ds.search": {
"options": {
"queryParameters": {
"latest": "$global_time.latest$",
"earliest": "$global_time.earliest$"
}
}
}
}
},
"inputs": {
"input_global_trp": {
"type": "input.timerange",
"options": {
"token": "global_time",
"defaultValue": "-24h@h,now"
},
"title": "Global Time Range"
}
},
"layout": {
"type": "absolute",
"options": {
"width": 1440,
"height": 960,
"display": "auto"
},
"structure": [
{
"item": "viz_GGlMQrhz",
"type": "block",
"position": {
"x": 0,
"y": 0,
"w": 20,
"h": 70
}
},
{
"item": "viz_sdLspBWZ",
"type": "block",
"position": {
"x": 20,
"y": 0,
"w": 510,
"h": 70
}
},
{
"item": "viz_G2e5COXh",
"type": "block",
"position": {
"x": 530,
"y": 0,
"w": 20,
"h": 70
}
},
{
"item": "viz_izmTEXa4",
"type": "block",
"position": {
"x": 430,
"y": 0,
"w": 100,
"h": 70
}
},
{
"item": "viz_OBDGe1i4",
"type": "block",
"position": {
"x": 30,
"y": 20,
"w": 400,
"h": 30
}
}
],
"globalInputs": [
"input_global_trp"
]
},
"description": "",
"title": "Sankey-like"
}
... View more
08-08-2024
08:52 PM
Hi I have few question regarding dashboard studio is there any way to customise the shape menu ex - line Can i rotate the image based on my design ( Dashboard Studio ) How or Where to find out more shape image ( Dashboard Studio ) attached image below How to make a text appear like a shadow in this space
... View more
- Tags:
- spl search
Labels
- Labels:
-
Dashboard Studio
08-08-2024
08:47 PM
Hi Alll I have created Map tile in the dashboard studio however the query is running with no issue but i cannot see the out and i am getting the same error message for multiple map tile. The below map layout are from dashboard studio Marker Layer with Base Configurations Marker Layer with Dynamic Coloring Bubble Layer with Single Series Bubble Layer with Multiple Series Choropleth Layer World Choropleth Layer with hidden base layer Code - index=test "event.Properties.apikey"="*" "event.endpoint"="*" | iplocation event.Properties.ip | dedup event.Properties.ip | top limit=20 Country Output - Blank with data however no errror was triggered
... View more
- Tags:
- spl search
Labels
- Labels:
-
Dashboard Studio
05-23-2024
05:20 AM
May I misunderstand your question, but it's simple:
index= testing field1="write" field2="*@abc.com"
|table field1, field2, ....
if "@abc.com" is a user name and not a domain (as I assume) you do not need to put the wildcard (*) before. If you put it, it will result in every user with @abc.com. Like, user1@abc.com, user2@abc.com...
alternative:
index=testing | stats count by field1 field2 | search field1="write" AND field2"*@abc.com"
Regards,
... View more
05-10-2024
07:10 AM
@jaibalaraman , your searches return a consistent set of results regardless of the time zone you are in.
... View more
04-22-2024
03:55 PM
Use this index=testing
| timechart max("event.Properties.duration") as maxDuration
| eval maxDuration=round(maxDuration/1000, 3)
... View more
04-10-2024
07:41 AM
PowerCoonnect from RHONDS includes tons of out-of-the-box dashboards for SAP's SaaS offerings. You should reach out to them. You can see more information HERE
... View more
04-09-2024
10:58 PM
Instead of dealing with the messiness of a natural language, it might be better to use standard notation of duration, like | fieldformat max(event.Properties.duration) = tostring('max(event.Properties.duration)', "duration") Instead of 40 mins , 30 mins or 1 hrs, you get 00:40:00, 00:30:00, 01:00:00, and so on.
... View more
- Tags:
- tostring
04-04-2024
01:55 AM
Try something like this index=events event.Properties.errMessage!="Invalid LoginID" event.Properties.errMessage!="Account Temporarily Locked Out" event.Properties.errMessage!="Permission denied" event.Properties.errMessage!="Unauthorized user" event.Properties.errMessage!="Account Pending Verification" event.Properties.errMessage!="Invalid parameter value"
| stats count by event.Properties.errMessage
... View more
04-02-2024
08:06 PM
Create a composite field with the two labels concatenated and count by that I am not sure how to create composite filed, could you please advice on this please
... View more
04-02-2024
01:12 AM
The below 2 commands are not working | `histogram("event.Properties.duration", 31)` bin "$var$" bins=$bins$ | stats count by "$var$" | makecontinuous "$var$" | fillnull count What type of graph or visualization would you like to create? Just want to create a dashboard tile to show the metric
... View more
03-21-2024
06:29 AM
Hello, Here's the image. I want to have the time range change based on the selected Grade. For example: If I select Kindergarten, the time will change to "last 24 hours" Thank you
... View more
02-07-2024
06:35 PM
After a timechart split by a field you cannot use the field name after the timechart as it no longer exists. The field names are the values of your 'series' field. You need to use the foreach method in your initial post The reason why index=aws returns nothing is that the data you are searching for does not exist in that index. What makes you think it did? It is in the _internal index, so you should definitely include that Change your earliest/latest settings to define the time period you want to search for, or use the time picker instead and remove the earliest and latest totally.
... View more
05-12-2023
05:09 AM
Open the dashboard and click on the edit option Then click on the edit Data Overview button Click on the pencil for the search you want to update Or create a new search Paste your search into the Search with SPL box
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-30-2024
06:15 PM
|
