I have a singlevalue trellis view showing the status of items up (Green) and down (Red). When the status is down (Red), i would like to get the trellis view to flash or blink. I found below html code for blinking effect <html>
<style>
@keyframes blink {
100%,
0% {
opacity: 0.6;
}
60% {
opacity: 0.9;
}
}
#singlevalue rect {
animation: blink 0.8s infinite;
}
</style>
</html> However, it will make all singlevalue are blinking. I am using rangemap to make the background of singlevalue in Red/Green color. How can I specify the trellis will blink in Red color only? Thanks a lot.
... View more
Thanks for the information. My dashboard has a field called "URL", AAA.com BBB.com etc. I only want to know which URL the user clicked. How can I run collect command to an index? May I have some references or examples? Thank you. Finally, I just want to match if the user clicks on the URL, let's say "AAA.com", then the "AAA.com" will disappear on the aforesaid dashboard.
... View more
I have a simple drilldown on my dashboard that users can click on the cell that links to an external website. How can I get Splunk to log the URL that the users clicked? Is it possible to achieve? Thanks a lot.
... View more
I am newbie in splunk. I would like to enhance the searching speed. I am using a splunk instance in a VM (Master) that indexed different data (more than 10 imdexes at this moment). Can I create more search head (VM- SH 1 and SH 2) to speed up the search and how can I achieve it? Thank you
... View more
actually i do not want to return huge amount of data, i just want to search from 10Gb data to get my results and process it. But it really really really takes time to complete a search.
... View more
because it consists of more than 10GB data. It may takes time to finish a search. therefore I think multisearch could be better solution. On the other hand, could I integrate splunk enterprise with GPU to enhance searching performance?
... View more
because it consists of more than 10GB data. It may takes time to finish a search. therefore I think multisearch could be better solution. On the other hand, could I integrate splunk enterprise with GPU to enhance searching performance?
... View more
I decided to make a search with following situation.
However, I would like to enhance the performance that when user wanna search Name, it will only enable index A and B but not index C
Can I achieve it?
Thanks a lot.
|multisearch
[ index =A |search Name=* Results =*]
[index =B | search Name=* Age=* Results=*]
[index =C | search Name=* Age=*]
... View more
it is different because there are different indexes with different field names. For example |multisearch [ index=A |search memberID = 1234567 |eval ID = memberID] [index=B |search ID= 1234567 ] [index=C|search membernum=1234567|eval ID =membernum] I would like to stop the subsearch of index C once first result was found as it has a huge event size, e.g. over 10GB. I don't want it to search all 10GB data that waste a lot of time and it is definitely not a good performance. Thank you
... View more
Hello I find it difficult to stop the search when I got first result in multisearch. I tried |head 1 but it can't be implemented in multisearch Is there anyway to stop it to enhance my search efficiency? Because I got over 10 indexes which has over 10 million entires in each index to search. |multisearch [index = A |search ....] [index = B |search ....] [index = C |search ....] [index = D |search ....] .... Thank you so much.
... View more
Hello, Whenever a user logins to Splunk with some role, I want to hide the Splunk App bar from that specific user/role. Without using hidesplunkbar=true How can I achieve it? Thanks a lot.
... View more
Thanks for the quick reply. If I could not hardcode the value , All fields value are search result. How could I accomplish it ? Really appreciate for your help.
... View more