About GioCortez

GioCortez · ‎03-29-2023

Works fine for the dashboard itself, but when i try "Schedule PDF" it tells me "Invalid earliest_time" on the PDF. I'm running crazy. i'm ok having no forms/inputs on a to-be-scheduled dashboard, but where/how should i define the time range it shall run for?

GioCortez · ‎03-28-2023

Hello. I'm creating a dashboard which will then be used as a monthly report, with some statistics in it. I will use pdf delivery, so that i have avoided using any timerange picker in it. Point is, without timerange picker, how can i define to run the search for -30d@d until -1d@d in all my panels?

GioCortez · ‎12-23-2020

Thanks @scelikok for helping out! That made the trick!

GioCortez · ‎12-16-2020

Thanks @scelikok, that made my day! One more thing: what if instead of using now() i want to use the "latest" date selected in the range picker? Is there a variable where starttime and endtime is stored? So that i could do something like the below? | stats count max(_time) as _time by orderNumber | eval wait_time=rangepickerenddate()-_time | search count=1 wait_time>3600 | addcoltotals

GioCortez · ‎12-16-2020

Thanks @scelikok for the quick response! That did the trick. Now i would like to complex things a little bit...basically i have orders flowing from one system to another. I have logs for which an order is sent ("processStarted") and for which an order is saved in the target system ("orderSaved"). But the problem with this, is that, basing on the search time restriction the user is setting, i may loose "orderSaved" events which happened after the timeframe. Is there any feasible (and acceptable, in terms of performances) solution for this?

GioCortez · ‎12-14-2020

Hi all. A silly question. I have the below searchresult (in my application i'm printing logs for different processing status of a specific order: I would like to know if (and how) would it be possible to extract the number of orders for which i do have a "processStarted" log, and not an "orderSaved" one. And another query to extract the orderNumbers for these case. orderNumber action 123 processStarted 123 orderSaved 125 processStarted 125 orderSaved 301 processStarted As per the above example, i would like 1) a query to extract the count (1 in this case, since only order 301 don't have an "orderSaved" entry) 2) a query to extract the orderNumbers for which i do have "processStarted", but not "orderSaved"). Only 301 in this case Which operation you would suggest me to investigate? Can you point me to some examples?

Posts	6
Solutions	0
Karma Given	2
Karma Received	0
Member Since	‎12-14-2020

Online Status	Offline
Date Last Visited	‎03-30-2023 05:45 AM

How can I define to time range in panel without ti...

Count variables for which an event is missing

Re: How can I define to time range in panel withou...

How can I define to time range in panel without ti...

Re: Count variables for which an event is missing

Re: Count variables for which an event is missing

Re: Count variables for which an event is missing

Count variables for which an event is missing

Are you a member of the Splunk Community?