Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About Raymond2T
Raymond2T
Path Finder
Member since:
04-29-2021
11-21-2023
Community Statistics
| Posts | 21 |
| Solutions | 0 |
| Karma Given | 8 |
| Karma Received | 0 |
| Member Since | 04-29-2021 |
Activity Feed
- Posted How to add flashing animation in Trellis View on Dashboards & Visualizations. 11-20-2023 06:56 PM
- Posted Re: How to record the user who clicked on the row in dashboard? on Dashboards & Visualizations. 11-07-2023 11:23 PM
- Posted Re: How to record the user who clicked on the row in dashboard? on Dashboards & Visualizations. 11-07-2023 06:51 PM
- Posted How to record the user who clicked on the row in dashboard? on Dashboards & Visualizations. 11-07-2023 06:23 PM
- Karma Re: Can I use search head to enhance searching speed? for richgalloway. 03-02-2023 05:58 PM
- Posted Re: Can I use search head to enhance searching speed? on Splunk Search. 03-02-2023 05:57 PM
- Karma Re: Can I use search head to enhance searching speed? for gcusello. 03-01-2023 02:50 PM
- Posted Can I use search head to enhance searching speed? on Splunk Search. 03-01-2023 04:23 AM
- Posted Re: how to enable search for specific index on Splunk Search. 02-21-2023 04:17 AM
- Posted Re: how to enable search for specific index on Splunk Search. 02-21-2023 02:39 AM
- Posted Re: how to enable search for specific index on Splunk Search. 02-21-2023 02:39 AM
- Posted How to enable search for specific index? on Splunk Search. 02-20-2023 04:03 PM
- Karma Re: How to stop searching when first result was found in each index in multisearch for scelikok. 02-08-2023 05:27 AM
- Posted Re: How to stop searching when first result was found in each index in multisearch on Splunk Search. 02-07-2023 06:32 AM
- Karma Re: Can we hide splunk bar base on role or user? for VatsalJagani. 02-07-2023 05:27 AM
- Posted How to stop searching when first result was found in each index in multisearch on Splunk Search. 02-07-2023 05:25 AM
- Posted Re: Can we hide splunk bar base on role or user? on Security. 06-02-2022 06:09 PM
- Posted Can we hide splunk bar base on role or user? on Security. 06-02-2022 08:38 AM
- Karma Re: How to filldown with specific field value for ITWhisperer. 03-03-2022 02:59 AM
- Posted Re: How to filldown with specific field value on Splunk Enterprise. 02-27-2022 09:32 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
11-20-2023
06:56 PM
I have a singlevalue trellis view showing the status of items up (Green) and down (Red). When the status is down (Red), i would like to get the trellis view to flash or blink. I found below html code for blinking effect <html>
<style>
@keyframes blink {
100%,
0% {
opacity: 0.6;
}
60% {
opacity: 0.9;
}
}
#singlevalue rect {
animation: blink 0.8s infinite;
}
</style>
</html> However, it will make all singlevalue are blinking. I am using rangemap to make the background of singlevalue in Red/Green color. How can I specify the trellis will blink in Red color only? Thanks a lot.
... View more
Labels
- Labels:
-
CSS
-
Dashboard Studio
-
single value
11-07-2023
11:23 PM
Thank you so much. it helps me a lot.
... View more
11-07-2023
06:51 PM
Thanks for the information. My dashboard has a field called "URL", AAA.com BBB.com etc. I only want to know which URL the user clicked. How can I run collect command to an index? May I have some references or examples? Thank you. Finally, I just want to match if the user clicks on the URL, let's say "AAA.com", then the "AAA.com" will disappear on the aforesaid dashboard.
... View more
11-07-2023
06:23 PM
I have a simple drilldown on my dashboard that users can click on the cell that links to an external website. How can I get Splunk to log the URL that the users clicked? Is it possible to achieve? Thanks a lot.
... View more
Labels
- Labels:
-
Dashboard Studio
-
drilldown
-
simple XML
03-02-2023
05:57 PM
About accelaration , how can I do it ? On the other hand, can I use GPU to improve the performance?
... View more
03-01-2023
04:23 AM
I am newbie in splunk. I would like to enhance the searching speed. I am using a splunk instance in a VM (Master) that indexed different data (more than 10 imdexes at this moment). Can I create more search head (VM- SH 1 and SH 2) to speed up the search and how can I achieve it? Thank you
... View more
Labels
- Labels:
-
search job inspector
-
subsearch
02-21-2023
04:17 AM
actually i do not want to return huge amount of data, i just want to search from 10Gb data to get my results and process it. But it really really really takes time to complete a search.
... View more
02-21-2023
02:39 AM
because it consists of more than 10GB data. It may takes time to finish a search. therefore I think multisearch could be better solution. On the other hand, could I integrate splunk enterprise with GPU to enhance searching performance?
... View more
02-21-2023
02:39 AM
because it consists of more than 10GB data. It may takes time to finish a search. therefore I think multisearch could be better solution. On the other hand, could I integrate splunk enterprise with GPU to enhance searching performance?
... View more
02-20-2023
04:03 PM
I decided to make a search with following situation.
However, I would like to enhance the performance that when user wanna search Name, it will only enable index A and B but not index C
Can I achieve it?
Thanks a lot.
|multisearch
[ index =A |search Name=* Results =*]
[index =B | search Name=* Age=* Results=*]
[index =C | search Name=* Age=*]
... View more
Labels
- Labels:
-
subsearch
02-07-2023
06:32 AM
it is different because there are different indexes with different field names. For example |multisearch [ index=A |search memberID = 1234567 |eval ID = memberID] [index=B |search ID= 1234567 ] [index=C|search membernum=1234567|eval ID =membernum] I would like to stop the subsearch of index C once first result was found as it has a huge event size, e.g. over 10GB. I don't want it to search all 10GB data that waste a lot of time and it is definitely not a good performance. Thank you
... View more
02-07-2023
05:25 AM
Hello I find it difficult to stop the search when I got first result in multisearch. I tried |head 1 but it can't be implemented in multisearch Is there anyway to stop it to enhance my search efficiency? Because I got over 10 indexes which has over 10 million entires in each index to search. |multisearch [index = A |search ....] [index = B |search ....] [index = C |search ....] [index = D |search ....] .... Thank you so much.
... View more
Labels
- Labels:
-
search job inspector
-
subsearch
06-02-2022
08:38 AM
Hello, Whenever a user logins to Splunk with some role, I want to hide the Splunk App bar from that specific user/role. Without using hidesplunkbar=true How can I achieve it? Thanks a lot.
... View more
Labels
- Labels:
-
access control
02-27-2022
09:32 PM
Thanks for the quick reply. If I could not hardcode the value , All fields value are search result. How could I accomplish it ? Really appreciate for your help.
... View more
02-27-2022
08:25 PM
I have the data format below, and I would like to filldown with specific field value base on command Field1. i.e. Fill Field2 with character 'B' if Field1 is 'A' Fill Filed2 with character 'C' if Field1 is 'B' Data: Field1 Field2 Field3 Field4 A fooA barB A abc def A B ghi jkl B C fooB barC B aaa bbb B ccc ddd Change to below format Field1 Field2 Field3 Field4 A B fooA barB A B abc def A B ghi jkl B C fooB barC B C aaa bbb B C ccc ddd
... View more
Labels
- Labels:
-
development
-
using Splunk Enterprise
12-06-2021
06:04 PM
thanks for replying. How can I upgrade it? I can't find the patch from 6.5 to 7.2 on Splunk download page already.
... View more
12-06-2021
09:45 AM
I have a Linux server with splunk enterprise 6.5. However, my team manager want me to upgrade the splunk from 6.5 to 8.2. I couldn't find old releases from splunk download page. How can I upgrade it?
... View more
04-29-2021
02:59 AM
Thank you so much. It is good solution
... View more
04-29-2021
12:40 AM
I have a query that returns the following result. Column 1 Column 2 A1 A2 B1 B2 C1 C2 D1 D2 And I would like to transform it to something like this 1st row 1st row 2nd row 2nd row 3 rd row 3rd row 4th row 4th row A1 A2 B1 B2 C1 C2 D1 D2 | makeresults
| eval _raw="Column1,Column2
A1,A2
B1,B2
C1,C2
D1,D2"
| multikv forceheader=1
| table Column1,Column2
|.......
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-21-2023
09:12 PM
|
Karma given to
