About sanjum01

sanjum01 · ‎11-22-2021

Hi Folks, I am facing the issue where I am not able to see red bar in the below panel. The count is for each hour and error count is mostly 1 or 2 events per hour. how can I make red bar visible? Any help or suggestion please?

sanjum01 · ‎11-13-2021

Hi Folks, I have a bar chart where I have more then one bars and legends for a single day, If I click on a single bar it works fine and shows the next level of dashboard as expected which takes single day date/time for query and when I hover over any legend it selects all the bars which are related to that specific legend which I assume is normal behavior also but problem I am facing with Legend is when I click on any legend it prompts to next level of dashboard which taken only a single day date/time and fails to show next level of dashboard level. what can I do with Legend? I am sure if I can disable Legends so they are not clickable? I don't want to hide legend as we need them in this panel and they are user friendly.

sanjum01 · ‎11-04-2021

Hi Folks, so I have below code but for some reason my css code not rendering, what am I missing? <dashboard> <label>Processing_Step_Clone_2</label> <row> <panel id="PStitle"> <title>Processing Steps for Source$form.Source$ - $form.earliest_date$ - $form.time$</title> <html> <style> .dashboard-row #PStitle .dashboard-panel panel-title { font-size: 40px !important; color: #7FFF00; } </style> </html>

sanjum01 · ‎11-03-2021

@ITWhisperer the solution you provided works with fixed number of days in eval. but I need to give the number from time picker.. here is what I have. <fieldset submitButton="false"> <input type="time" token="field1"> <label></label> <default> <earliest>-7d@d</earliest> <latest>now</latest> </default> . . . . <drilldown target="_blank"> <set token="datatype_value">$click.value$</set> <set token="time1">$click.value$</set> <eval token="time2">relative_time($click.value$, "-$field1$")</eval> <link target="_blank">/app/search/trend_by_source_clone_2?form.Datatype1="Lab"&form.second_dash.earliest=$form.field1.earliest$&form.time1=$time1$&form.time2=$time2$</link> </drilldown> any help please??

sanjum01 · ‎11-03-2021

so it means if i take the value from time picker as a token I can try like below? because number is not always going to be 15 it depends on what user select on time picker. <eval token="newearly">relative_time($click.value$,"-TokenTimePicker")</eval>

sanjum01 · ‎11-03-2021

Hi Folks, I have below requirement, I have a dashboard where I have timepicker with token and and bar chart panel. so lets see if i choose 15days from timepicker it shows data in15 bars (Oct 20th to Nov 3rd). so now lets suppose I click on a bar ($click.value$) it takes me to next panel where I want to see the data from $click.value$ to 15 PREVIOUS days. e.g if i click on bar of Oct 20th, the next panel should show me data for past 15 days (6th Oct to 20th Oct). can someone help me with setting up earliest and latest time through tokens for above scenario?

sanjum01 · ‎10-31-2021

Hi all, I am trying to change the behavior of legend, I am trying to make it NOT clickable. I have below properties related to bar chart. <option name="charting.chart">column</option> <option name="charting.drilldown">all</option> <option name="charting.legend.labelStyle.overflowMode">ellipsisEnd</option> <option name="charting.legend.mode">standard</option> <option name="charting.legend.placement">right</option> <option name="trellis.enabled">0</option> <option name="refresh.display">progressbar</option> Any suggestions please? I am not seeing any other options related to legend in splunk docs.

sanjum01 · ‎10-30-2021

Thank you so much for your prompt response. The logic you have provided works as expected for me. Have a good day!

sanjum01 · ‎10-30-2021

@skrajkumar_splu Thank you for your suggestion. I tried the suggestion you have provided but it did not work. What else I should try so that my token could get numeric value after i click on bar in a bar chart from previous panel? <set token="ps">$click.value$></set> |eval token="ps2">if($click.value$="ESB - Canonical - Tibco", "6" , if($click.value$="Guiding Care - Tibco", "21" , "false")) , if( $click.value$="Guiding Care - Tibco", "21" , if($click.value$="ESB - Raw data - Boomi", "1" , "false)), if($click.value$="ESB - Raw data - Boomi", "1" , if($click.value$="ESB - Raw data - Tibco", "2" , "false")), if($click.value$="ESB - Raw data - Tibco", "2" , if( $click.value$="HealthShare - Tibco","41", "false")) , if( $click.value$="HealthShare - Tibco","41" , if( $click.value$="ESB - Canonical - Boomi","5", "false")) , if( $click.value$="ESB - Canonical - Boomi","5" , if($click.value$="EDWADS", "10" , "false")) , if($click.value$="EDWADS", 10 , if($click.value$="EDWIDS", 15 ,"false")) , if($click.value$="EDWIDS", "15" , if($click.value$="Guiding Care - Boomi", "20" , "false")), if($click.value$="Guiding Care - Boomi", "20" , if($click.value$="Guiding Care - PopHealthServices (PHS)","25" , "false")), if($click.value$="Guiding Care - PopHealthServices (PHS)","25" , if($click.value$="CareAnalyzer (CA)", "30" , "false"), if($click.value$="CareAnalyzer (CA)", "30" , if($click.value$="HealthShare", "40" , "false")), if($click.value$="HealthShare", "40") </drilldown>

sanjum01 · ‎10-30-2021

Hi Folks, I have below code from dashbaord source <set token="ps">$click.value$></set> |eval ps>if($click.value$="ESB - Canonical - Tibco", <set token="ps2">6</set>) OR if( $click.value$=="Guiding Care - Tibco",<set token="ps2">21</set>) OR if($click.value$=="ESB - Raw data - Boomi",<set token="ps2">1</set>) OR if($click.value$=="ESB - Raw data - Tibco",<set token="ps2">2</set>) OR if( $click.value$=="HealthShare - Tibco",<set token="ps2">41</set>) OR if( $click.value$=="ESB - Canonical - Boomi",<set token="ps2">5</set>) OR if($click.value$=="EDWADS",<set token="ps2">10</set>) OR if($click.value$=="EDWIDS",<set token="ps2">15</set>) OR if($click.value$=="Guiding Care - Boomi",<set token="ps2">20</set>)OR if($click.value$=="Guiding Care - PopHealthServices (PHS)",<set token="ps2">25</set>)OR if($click.value$=="CareAnalyzer (CA)",<set token="ps2">30</set>)OR if($click.value$=="HealthShare",<set token="ps2">40</set>) I am tryin to assign a value to ps2 on base of condition, but it appears it is always assigning last value (40) no matter what ? any help suggestion please? Thanks.

sanjum01 · ‎10-30-2021

@bowesmana thank you for your response. I am trying to make bar chart more precise on based of index and sourcetype, as your code is showing all the processing steps in bar chart but i am looking for only which user selected on in previous bashbaord screen. in previous screen user select which Datatype and which sourcetype user want to dig in for processing steps.

sanjum01 · ‎10-27-2021

I am trying to assigning back Numeric value to $ps$ token which I change to ProcessingStepName1, ProcessingStepName2, ProcessingStepName3, ProcessingStepName4 by Eval. after I click the Bar in a bar chart and token $ps$ gets the value as one of the processingStepNames(ProcessingStepName1, ProcessingStepName2, ProcessingStepName3, ProcessingStepName4) but I need to to change the Names back to Number's which I changed by Eval. How should I do that? I tried Eval to do so but it is not working. Any suggestion please? <dashboard> <label>Processing_Step_Clone_2</label> <row> <panel> <chart> <title>$form.Source$ between $form.earliest_date$ $form.second_dash.earliest$ - $form.second_dash.latest$</title> <search> <query>index=Idx1 sourcetype=sourcetype# Datatype=$form.Datatype$ |spath Source | search Source=$form.Source$ |eval type = if(ProcessStatus=0,"Success","Failure") |eval ProcessingStep=if(ProcessingStep="6","ProcessingStepName1",ProcessingStep) |eval ProcessingStep=if(ProcessingStep="21","ProcessingStepName2",ProcessingStep) |eval ProcessingStep=if(ProcessingStep="1","ProcessingStepName3",ProcessingStep) |eval ProcessingStep=if(ProcessingStep="2","ProcessingStepName4",ProcessingStep) |chart count over ProcessingStep </query> <earliest>$form.second_dash.earliest$</earliest> <latest>now</latest> <sampleRatio>1</sampleRatio> </search> <option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option> <option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option> <option name="charting.axisTitleX.visibility">visible</option> <option name="charting.axisTitleY.visibility">visible</option> <option name="charting.axisTitleY2.visibility">visible</option> <option name="charting.axisX.abbreviation">none</option> <option name="charting.axisX.scale">linear</option> <option name="charting.axisY.abbreviation">none</option> <option name="charting.axisY.scale">linear</option> <option name="charting.axisY2.abbreviation">none</option> . . . <option name="trellis.size">medium</option> <drilldown> <set token="ps">$click.value$></set> </drilldown> </chart> </panel> </row> <row> <panel> <chart> <title>Success/Failure visualization for $ps$ </title> <search> <query>index=Idx1 sourcetype=sourcetype# Datatype=$form.Datatype$ | spath Source | search Source=$form.Source$ | eval type = if(ProcessStatus=0,"Success","Failure") | search ProcessingStep=$ps$ | timechart count by type</query> <earliest>$form.second_dash.earliest$</earliest> <latest>now</latest> </search>

Posts	12
Solutions	0
Karma Given	3
Karma Received	0
Member Since	‎10-27-2021

Online Status	Offline
Date Last Visited	‎11-22-2021 07:08 PM

how can I show bar for small number of count in ba...

Any suggestion for my Legend behavior? what can I ...

css styles not working for dashboard title.

how to subtract timepicker's (Number of days) from...

how to make Legend NOT clickable?

how should I assign a value on base of condition?

how can I replace token value which I get after cl...