Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About ISP8055
ISP8055
Path Finder
Member since:
10-02-2020
05-18-2023
Community Statistics
| Posts | 17 |
| Solutions | 0 |
| Karma Given | 8 |
| Karma Received | 2 |
| Member Since | 10-02-2020 |
Activity Feed
- Posted Re: Is there a way to split a token after a user click generates the token? on Dashboards & Visualizations. 01-26-2023 08:47 AM
- Posted Re: Is there a way to split a token after a user click generates the token? on Dashboards & Visualizations. 01-25-2023 09:30 AM
- Karma Re: Searching a field using another field for richgalloway. 01-19-2023 09:54 AM
- Posted Is there a way to split a token after a user click generates the token? on Dashboards & Visualizations. 01-19-2023 09:52 AM
- Karma Re: Convert seconds into hours, minutes and seconds for tallpaulf. 12-22-2022 09:59 AM
- Posted Re: Is it possible to get sum of Top 5 values per field? on Splunk Search. 04-26-2022 10:38 AM
- Posted Re: Is it possible to get sum of Top 5 values per field. on Splunk Search. 04-22-2022 01:51 PM
- Posted Is it possible to get sum of Top 5 values per field? on Splunk Search. 04-20-2022 02:17 PM
- Karma Re: Pass the label of an input to the title of a panel for niketn. 01-18-2022 07:37 AM
- Posted Is it possible to output Splunk alert via API other than email? on Dashboards & Visualizations. 11-29-2021 02:47 PM
- Karma Re: How to get unique Maximum value of corresponding field? for kamlesh_vaghela. 07-28-2021 08:39 AM
- Posted How to get unique Maximum value of corresponding field? on Splunk Search. 07-09-2021 08:40 AM
- Posted Combining different sourcetypes with no common field ( except _time) on Getting Data In. 07-06-2021 09:37 AM
- Karma Re: Dynamic dropdown field options using another dropdown value for manjunathmeti. 02-24-2021 06:39 PM
- Posted Re: Dynamic dropdown field options using another dropdown value on Dashboards & Visualizations. 02-24-2021 06:38 PM
- Posted Re: Dynamic dropdown field options using another dropdown value on Dashboards & Visualizations. 02-24-2021 12:57 PM
- Posted Dynamic dropdown field options using another dropdown value on Dashboards & Visualizations. 02-24-2021 10:01 AM
- Tagged Dynamic dropdown field options using another dropdown value on Dashboards & Visualizations. 02-24-2021 10:01 AM
- Tagged Dynamic dropdown field options using another dropdown value on Dashboards & Visualizations. 02-24-2021 10:01 AM
- Karma Re: Searching a field using another field for richgalloway. 11-30-2020 09:41 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 |
01-26-2023
08:47 AM
Hi there, I need 3 tokens to be linked to the other dashboard ( Field A, FieldB, FieldC). With your syntax above, we are getting FieldA only <drilldown>
<eval token="FieldA">mvindex(split($click.value$,"-"),0)</eval>
<link target="_blank">/app/app_name/nameoflinked_dashboard?token_name=$FieldA$</link>
<eval token="FieldB">mvindex(split($click.value$," "),1)</eval>
<link target="_blank">/app/app_name/nameoflinked_dashboard?token_name=$FieldB$</link>
<eval token="FieldC">mvindex(split($click.value$," "),2)</eval>
<link target="_blank">/app/app_name/nameoflinked_dashboard?token_name=$FieldC$</link>
</drilldown> I tried the above with FieldB and FIeldC tokens, but that doesn't work either. only FieldA is being linked.
... View more
01-25-2023
09:30 AM
Hi there, currently, my drilldown looks like this: <drilldown> <link target="_blank">/app/app_name/nameoflinked_dashboard?token_name=$click.value$</link> </drilldown> Will your eval statement work here?
... View more
01-19-2023
09:52 AM
Hi there, I have a dashboard with bar charts. The value of a bar chart would be in this format. e.g. "foo-10-bar". After an user clicks on the bar-chart, it leads to another dashboard with drilldown generating token with field values as $field$= "foo-10-bar" in this case. Is this possible to split the field value in three parts with - as a separator, when user clicks on the bar chart. so in this case, it would be three tokens as $FieldA$= foo; $FieldB$=10; $FieldC$=bar? Thanks.
... View more
04-26-2022
10:38 AM
Sorry, I'm getting no results found using this syntax.
... View more
04-22-2022
01:51 PM
| eval Server="G".((random() % 5)+1)
Will I need this syntax if my all of my actual server names don't start with G? What does this command do?
| eval Load=random() %
Could you explain what does this syntax do?
... View more
04-20-2022
02:17 PM
Hi there, So, I have table with Server Names and their load values
Server Load capacity
G1 10
G1 80
G2 6
G2 25
G1 50
G3 15
G2 5
G4 20
G5 30
and so on...
Is there a way to get sum of top 3 fields by Server? I can do that if I limit it to just one server by:
my search | search "Server"="G1" | sort- Load | head 3 | stats sum(Load) But I want to know for all servers to see which one is getting highest loads on average.
... View more
Labels
- Labels:
-
stats
11-29-2021
02:47 PM
I found that we can create alerts in Splunk and output the alert to specific email recipients. Is there a way to send alerts or dashboard values to 3rd party apps other than email?
... View more
07-09-2021
08:40 AM
Hi there, I have data like this: Server load A 65 A 50 B 35 C 55 B 45 C 70 I want to get a maximum peak loads of each server type and display in a table format. So, Server Peak load A 65 B 45 C 70 I need help in how can I do that?
... View more
Labels
- Labels:
-
table
07-06-2021
09:37 AM
Hi, I have one sourcetypeA which has following fields Cluster1 UsageA A 10 B 15 and so on then I have one sourcetypeB which has fields: Cluster 2 Usage B C 5 D 20 I want to make a Splunk syntax so that I combine both sourcetypes to see top 3 usage in total among all clusters. so like this: Cluster Usage D 20 B 15 A 10 So, neither Cluster 2, cluster 1 nor usage A and Usage B are common fields. Is this possible to do?
... View more
Labels
- Labels:
-
sourcetype
02-24-2021
06:38 PM
Hi, I did further troubleshooting and found the issue with my search query. Your syntax helped. Thanks.
... View more
02-24-2021
12:57 PM
Hi there, I tried your search syntax. However, when I select a option from the first dropdown list, the second dropdown doesn't let me select. Second dropdown is greyed out.
... View more
02-24-2021
10:01 AM
Hi there, Is there a way to create/display a dynamic dropdown using value selected from another dropdown? For example of what I'm trying to do: Suppose I have 2 fields: Region and Server Name. Region Server NY A1 B1 X1 Z1 LA A2 Y2 Z2 TO A3 B3 C3 So, the first drop-down gives the user option of selecting region : TO, NY or LA. User selects the region: NY, then it should display a dropdown listing the name of NY's server names and when the user selects a NY server: B1, then it displays the panel based on search for server: S1
... View more
Labels
- Labels:
-
panel
11-26-2020
11:56 AM
1 Karma
Hi there, I applied this syntax. I'm getting the following error: Error in 'where' command: The expression is malformed. Expected ).
... View more
11-26-2020
08:43 AM
1 Karma
Hi there, I want to search events for example A =B*xy Where B is another field name with different values depending on user input. * is the wildcard So. I'm looking for events where A would be NYabxy, NYccxy, etc. Here value of B is NY How would I do search syntax? This doesn't work: | search A=B*xy as here B is considered a string not a field name. would "where" be better alternative? The main point of me doing this I wanna make my search more efficient as I want Splunk to only search events where A=NY*xy is applicable instead of searching every event with A field.
... View more
Labels
- Labels:
-
saved search
10-02-2020
03:48 PM
Hi there, I have a table with 5 fields. E column is numeric value, C is sub category of A I want to sum E by column C AND column A. A B C D E a x 30 a y 20 a x 40 b y 10 b x 40 if I do stats(sum E) by A = it will give output of sum of first three rows of E. if I do stats(sum E) by c = it will give output of rows by x and by e. I want to output be like a x 50 ( 50 is 30 + 20 in this case) Hope, I conveyed what I'm going for.
... View more
Labels
- Labels:
-
stats
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-18-2023
11:54 AM
|
Karma given to
