About rthomas247

rthomas247 · ‎04-18-2022

The new DBv3 doesn't like inline comments (--) in the SQL query you must update the query to user multi-line comments to save the queries. Use This: /* your SQL STATEMENT COMMENT */ Not This: --your SQL comment here Once the comment have been cleaned up you should be able to run your queries again. Note: if you're using queries configured with rising columns watch the below video on YouTube by the Splunk team. https://www.youtube.com/watch?v=oPB2Lpd9ZAs good luck!

rthomas247 · ‎08-03-2021

Thanks! This is it!

rthomas247 · ‎07-23-2021

@richgalloway , Thanks for the quick turnaround. I'd like to create a dashboard that shows me all my alerts that have fired over a given time period so I can gauge how often the alerts are fired compared to one another in a bar chart | pie chart. I'm looking to optimize alerts that are fired too often. for example, if I have 100 alerts and 40 of them fire every 10m - 15m. I want to be able to focus these 40 alerts to determine if I can optimize the query, reduce duplications or sunset the alert if it is no longer needed. Ideally, I'd like to start with a line or bar chart once I can see the data perhaps choose another chart to better represent the data.

rthomas247 · ‎07-22-2021

Hi, I'd like to create a visualization that shows trends between alerts that have been fired. The graph will show the frequency of a given range of alerts and how often they was triggered on the source file. Thanks, Rob

rthomas247 · ‎07-07-2021

Hi, not sure if you found the answer to you question but I had a similar case and used this doc to address the issue. https://docs.splunk.com/Documentation/Splunk/8.2.1/Security/SetUpUserAuthenticationWithLDAP hope this helps!

Posts	5
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎07-02-2021

Online Status	Offline
Date Last Visited	‎04-18-2022 05:15 PM

When Migrating from Splunk DBv2 Connect to DBv3

Create a Visualization that shows Dashboard Freque...

When Migrating from Splunk DBv2 Connect to DBv3

Re: Dashboard Frequency of a Splunk Alert

Re: Dashboard Frequency of a Splunk Alert

Create a Visualization that shows Dashboard Freque...

Re: Splunk App for infrastructure entities by role