×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
sanjum01
Explorer
Member since: ‎10-27-2021
‎11-22-2021
Community Statistics
Posts 12
Solutions 0
Karma Given 3
Karma Received 0
Member Since ‎10-27-2021
Activity Feed
Topics I've Started
View All

how can I show bar for small number of count in ba...

by in Splunk Search
‎11-22-2021 11:32 AM
‎11-22-2021 11:32 AM
Hi Folks, I am facing the issue where I am not able to see red bar in the below panel. The count is for each hour and error count is mostly 1 or 2 events per hour. how can I make red bar visible? Any help or suggestion please?     ... View more
Labels

Any suggestion for my Legend behavior? what can I ...

by in Splunk Search
‎11-13-2021 04:45 PM
‎11-13-2021 04:45 PM
Hi Folks, I have a bar chart where I have more then one bars and legends for a single day, If I click on a single bar it works fine and shows the next level of dashboard as expected which takes single day date/time for query  and when I hover over any legend it selects all the bars which are related to that specific legend which I assume is normal behavior also but problem I am facing with Legend is when I click on any legend it prompts to next level of dashboard which taken only a single day date/time and fails to show next level of dashboard level. what can I do with Legend? I  am sure if I can disable Legends so they are not clickable? I don't want to hide legend as we need them in this panel and they are user friendly.   ... View more
Labels

css styles not working for dashboard title.

by in Splunk Search
‎11-04-2021 09:38 PM
‎11-04-2021 09:38 PM
Hi Folks, so I have below code but for some reason my css code not rendering, what am I missing? <dashboard> <label>Processing_Step_Clone_2</label> <row> <panel id="PStitle"> <title>Processing Steps for Source$form.Source$ - $form.earliest_date$ - $form.time$</title> <html> <style> .dashboard-row #PStitle .dashboard-panel panel-title { font-size: 40px !important; color: #7FFF00; } </style> </html> ... View more

Re: how to subtract timepicker's (Number of days) ...

by in Splunk Search
‎11-03-2021 09:36 PM
‎11-03-2021 09:36 PM
@ITWhisperer the solution you provided works with fixed number of days in eval. but I need to give the number from time picker.. here is what I have. <fieldset submitButton="false"> <input type="time" token="field1"> <label></label> <default> <earliest>-7d@d</earliest> <latest>now</latest> </default> . . . . <drilldown target="_blank"> <set token="datatype_value">$click.value$</set> <set token="time1">$click.value$</set> <eval token="time2">relative_time($click.value$, "-$field1$")</eval> <link target="_blank">/app/search/trend_by_source_clone_2?form.Datatype1="Lab"&amp;form.second_dash.earliest=$form.field1.earliest$&amp;form.time1=$time1$&amp;form.time2=$time2$</link> </drilldown> any help please?? ... View more

Re: how to subtract timepicker's (Number of days) ...

by in Splunk Search
‎11-03-2021 05:18 PM
‎11-03-2021 05:18 PM
so it means if i take the value from time picker as a token I can try  like below?  because number is not always going to be 15 it depends on what user select on time picker.       <eval token="newearly">relative_time($click.value$,"-TokenTimePicker")</eval>         ... View more

how to subtract timepicker's (Number of days) from...

by in Splunk Search
‎11-03-2021 02:55 PM
‎11-03-2021 02:55 PM
Hi Folks, I have below requirement, I have a dashboard where I have timepicker with token and and bar chart panel. so lets see if i choose 15days from timepicker it shows data in15 bars (Oct 20th to Nov 3rd). so now lets suppose I click on a bar ($click.value$) it takes me to next panel where I want to see the data from $click.value$ to 15 PREVIOUS days. e.g if i click on bar of Oct 20th, the next panel should show me data for past 15 days (6th Oct to 20th Oct). can someone help me with setting up earliest and latest time through tokens for above scenario? ... View more
Labels

how to make Legend NOT clickable?

by in Dashboards & Visualizations
‎10-31-2021 09:32 AM
‎10-31-2021 09:32 AM
Hi all, I am trying to change the behavior of legend, I am trying to make it NOT clickable. I have below properties related to bar chart. <option name="charting.chart">column</option> <option name="charting.drilldown">all</option> <option name="charting.legend.labelStyle.overflowMode">ellipsisEnd</option> <option name="charting.legend.mode">standard</option> <option name="charting.legend.placement">right</option> <option name="trellis.enabled">0</option> <option name="refresh.display">progressbar</option> Any suggestions please? I am not seeing any other options related to legend in splunk docs. ... View more
Labels

Re: how should I assign a value on base of conditi...

by in Dashboards & Visualizations
‎10-30-2021 11:47 PM
‎10-30-2021 11:47 PM
Thank you so much for your prompt response. The logic you have provided works as expected for me. Have a good day! ... View more

Re: how should I assign a value on base of conditi...

by in Dashboards & Visualizations
‎10-30-2021 11:13 PM
‎10-30-2021 11:13 PM
@skrajkumar_splu Thank you for your suggestion. I tried the suggestion you have provided but it did not work. What else I should try so that my token could get numeric value after i click on bar in a bar chart from previous panel? <set token="ps">$click.value$></set> |eval token="ps2">if($click.value$="ESB - Canonical - Tibco", "6" , if($click.value$="Guiding Care - Tibco", "21" , "false")) , if( $click.value$="Guiding Care - Tibco", "21" , if($click.value$="ESB - Raw data - Boomi", "1" , "false)), if($click.value$="ESB - Raw data - Boomi", "1" , if($click.value$="ESB - Raw data - Tibco", "2" , "false")), if($click.value$="ESB - Raw data - Tibco", "2" , if( $click.value$="HealthShare - Tibco","41", "false")) , if( $click.value$="HealthShare - Tibco","41" , if( $click.value$="ESB - Canonical - Boomi","5", "false")) , if( $click.value$="ESB - Canonical - Boomi","5" , if($click.value$="EDWADS", "10" , "false")) , if($click.value$="EDWADS", 10 , if($click.value$="EDWIDS", 15 ,"false")) , if($click.value$="EDWIDS", "15" , if($click.value$="Guiding Care - Boomi", "20" , "false")), if($click.value$="Guiding Care - Boomi", "20" , if($click.value$="Guiding Care - PopHealthServices (PHS)","25" , "false")), if($click.value$="Guiding Care - PopHealthServices (PHS)","25" , if($click.value$="CareAnalyzer (CA)", "30" , "false"), if($click.value$="CareAnalyzer (CA)", "30" , if($click.value$="HealthShare", "40" , "false")), if($click.value$="HealthShare", "40") </drilldown> ... View more

how should I assign a value on base of condition?

by in Dashboards & Visualizations
‎10-30-2021 06:28 PM
‎10-30-2021 06:28 PM
Hi Folks, I have below code from dashbaord source <set token="ps">$click.value$></set> |eval ps>if($click.value$="ESB - Canonical - Tibco", <set token="ps2">6</set>) OR if( $click.value$=="Guiding Care - Tibco",<set token="ps2">21</set>) OR if($click.value$=="ESB - Raw data - Boomi",<set token="ps2">1</set>) OR if($click.value$=="ESB - Raw data - Tibco",<set token="ps2">2</set>) OR if( $click.value$=="HealthShare - Tibco",<set token="ps2">41</set>) OR if( $click.value$=="ESB - Canonical - Boomi",<set token="ps2">5</set>) OR if($click.value$=="EDWADS",<set token="ps2">10</set>) OR if($click.value$=="EDWIDS",<set token="ps2">15</set>) OR if($click.value$=="Guiding Care - Boomi",<set token="ps2">20</set>)OR if($click.value$=="Guiding Care - PopHealthServices (PHS)",<set token="ps2">25</set>)OR if($click.value$=="CareAnalyzer (CA)",<set token="ps2">30</set>)OR if($click.value$=="HealthShare",<set token="ps2">40</set>) I am tryin to assign a value to ps2 on base of condition, but it appears it is always assigning last value (40) no matter what ? any help suggestion please? Thanks. ... View more
Labels

Re: how can I replace token value which I get afte...

by in Dashboards & Visualizations
‎10-30-2021 12:58 PM
‎10-30-2021 12:58 PM
@bowesmana thank you for your response. I am trying to make bar chart more precise on based of index and sourcetype, as your code is showing all the processing steps in bar chart but i am looking for only which user selected on in previous bashbaord screen. in previous screen user select which Datatype and which sourcetype user want to dig in for processing steps. ... View more

how can I replace token value which I get after cl...

by in Dashboards & Visualizations
‎10-27-2021 10:56 AM
‎10-27-2021 10:56 AM
I am trying to assigning back Numeric value to $ps$ token which I change to ProcessingStepName1, ProcessingStepName2, ProcessingStepName3, ProcessingStepName4 by Eval. after I click the Bar in a bar chart and token $ps$ gets the value as one of the processingStepNames(ProcessingStepName1, ProcessingStepName2, ProcessingStepName3, ProcessingStepName4) but I need to to change the Names back to Number's which I changed by Eval. How should I do that? I tried Eval to do so but it is not working. Any suggestion please? <dashboard> <label>Processing_Step_Clone_2</label> <row> <panel> <chart> <title>$form.Source$ between $form.earliest_date$ $form.second_dash.earliest$ - $form.second_dash.latest$</title> <search> <query>index=Idx1 sourcetype=sourcetype#  Datatype=$form.Datatype$ |spath Source | search Source=$form.Source$ |eval type = if(ProcessStatus=0,"Success","Failure") |eval ProcessingStep=if(ProcessingStep="6","ProcessingStepName1",ProcessingStep) |eval ProcessingStep=if(ProcessingStep="21","ProcessingStepName2",ProcessingStep) |eval ProcessingStep=if(ProcessingStep="1","ProcessingStepName3",ProcessingStep) |eval ProcessingStep=if(ProcessingStep="2","ProcessingStepName4",ProcessingStep) |chart count over ProcessingStep </query> <earliest>$form.second_dash.earliest$</earliest> <latest>now</latest> <sampleRatio>1</sampleRatio> </search> <option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option> <option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option> <option name="charting.axisTitleX.visibility">visible</option> <option name="charting.axisTitleY.visibility">visible</option> <option name="charting.axisTitleY2.visibility">visible</option> <option name="charting.axisX.abbreviation">none</option> <option name="charting.axisX.scale">linear</option> <option name="charting.axisY.abbreviation">none</option> <option name="charting.axisY.scale">linear</option> <option name="charting.axisY2.abbreviation">none</option> . . . <option name="trellis.size">medium</option> <drilldown> <set token="ps">$click.value$></set> </drilldown> </chart> </panel> </row> <row> <panel> <chart> <title>Success/Failure visualization for $ps$ </title> <search> <query>index=Idx1 sourcetype=sourcetype# Datatype=$form.Datatype$ | spath Source | search Source=$form.Source$ | eval type = if(ProcessStatus=0,"Success","Failure") | search ProcessingStep=$ps$ | timechart count by type</query> <earliest>$form.second_dash.earliest$</earliest> <latest>now</latest> </search> ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎11-22-2021 07:08 PM
Karma given to