Dear All Is there a way that I can change the all the widgets, queries based on the dropdown in dashboard studio? For eg. If I select network from the dropdown, it should give me widgets which I specific only for that selection. If I select Operating System, I would like to see other widgets running other queries.  ... View more

Dear All I am trying to create a dashboard which will have two global inputs. Input1: IPAddress Input2: Panel Name Based on Input2, the layouts and views, tables with change. For example, if Input2 was selected as Firewall traffic, it would show network traffic for that IPAddress. If Input2 was selected as Windows, it would show windows activity from that IP with different layouts, tables, and panels. ... View more

Dear Team I have a splunk lookup with two fields, username and location. The lookup is populated every time the location is US. However, I want to see the location keeps on changing. So, I would like to write a query, which first checks if the username exists in the lookup and if it does, match the location in the event field to the lookup field. If the location from event field doesn't match with that of lookup field, it should remove that username from the lookup.  Any ideas or suggestions would be appreciated.   ... View more

Dear All I have a CSV lookup with a column name column1 with below values   MicroBest GoDear Bear   And I have some logs in which the field1 contains values like MicroBest Infrastructure No-GoDear-To-World Lives The Life I want to write a query that should match the first two events as lookup column value is a substring to field value. Also, I don't want to use *lookup_value* as it will also match something like Mi GoDearSamsung-Phone. I ... View more

Dear All I am new to dashboard studio in Splunk. I have  a single value panel displaying a string. There are two possible values to that string i.e. "Up" and "Down" I would like to change the background color based on these string values.   ... View more

We use Siemplify add-on to ingest alerts from Splunk to Siemplify however, the fields in Siemplify come really horribly and are impossible to read. Does anyone knows how to map the field values from Splunk to Siemplify?   ... View more

Dear All I agree that this may not be the right forum to post this. There are a lot of authentication failures for some accounts and the sources are two Linux servers. Checked with the user, they didn't enter incorrect credentials these many times. For sure, this is some process or job. However, I would like to understand why are these attempts failing. And if these are counted as failed attempts, why these attempts don't lock out the account (considering we have an account lock-out policy) Can someone help me to understand how are these attempts generated? ... View more