About supraja

supraja · ‎01-24-2023

Hi , its already tried index = ............ | fields ............ |where clause ........... |table <fileds> |outputlookup test.csv

supraja · ‎01-24-2023

Hi Team, i want store the query results in lookup file , but outputlookup command is not updating the csv as per results set . index = ........ queryresults ............| outputlookup test.csv is there any changes required in the query ? regards, supraja

supraja · ‎12-27-2022

Hi , could you please let me know how to change the structure of table in above format.

supraja · ‎11-07-2022

Hi Team, kindly let us know which one is better for performance tuning. Dashboard taking so much time to load. index=abc "DONE" or index=abc myfield="DONE"

supraja · ‎11-07-2022

the above example taken from https://www.splunk.com/en_us/blog/tips-and-tricks/splunk-clara-fication-dashboarding-best-practices.html?locale=en_us

supraja · ‎11-07-2022

Hi Team, i tried created a dashboard with tab view. used linklist to create a tabs. i would like to load the panels only when linked tab is clicked. could some one please suggest me on how to achieve that . <form theme="dark"> <label>search_depends</label> <description>test</description> <init> <unset token="dont_run"></unset> <set token="run"></set> </init> <fieldset submitButton="false"> <input type="link" token="tok_tabs"> <label>tabs</label> <choice value="panel1">panel1</choice> <choice value="panel2">panel2</choice> <default>DataAnalysis</default> <change> <condition value="panel1"> <set token="panel1">true</set> <unset token="panel2"></unset> </condition> <condition value="panel2"> <set token="panel2">true</set> <unset token="panel1"></unset> </condition> </change> </input> </fieldset> <row depends="$panel1$"> <panel> <single> <title>load only panel1</title> <search depends="$run$" id="dont_run"> <query>|makeresults|eval data="Can you see me?!"</query> <earliest>-24h@h</earliest> <latest>now</latest> </search> <option name="drilldown">none</option> <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option> <option name="refresh.display">progressbar</option> <option name="underLabel"># tickets closed last month</option> </single> </panel> </row> <row depends="$panel2$"> <panel> <single> <title>load only panel2</title> <search depends="$dont_run$" id="run"> <query>|makeresults|eval data="Can you see me?!"</query> <earliest>-24h@h</earliest> <latest>now</latest> </search> <option name="drilldown">none</option> <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option> <option name="refresh.display">progressbar</option> <option name="underLabel"># tickets closed last month</option> </single> </panel> </row> </form>

supraja · ‎11-04-2022

Hi Team, could some one please suggest on changing the data label color in bar chart . changing the font color of data label 192.

supraja · ‎10-27-2022

<form> <fieldset submitButton="false"> <input type="multiselect" token="tok_input" searchWhenChanged="true"> <label>drilldowncheck</label> <fieldForLabel>city</fieldForLabel> <fieldForValue>city</fieldForValue> <search> <query>| makeresults count=5 | streamstats count | eval age = case(count=1, 25, count=2, 39, count=3, 31, count=4, 20,count=5,60) | eval city = case(count=1 OR count=3, "San Francisco", count=2 OR count=4, "Seattle",count=5,"UAE") | stats avg(age) BY city</query> <earliest>-24h@h</earliest> <latest>now</latest> </search> <valuePrefix>"</valuePrefix> <valueSuffix>"</valueSuffix> <delimiter>,</delimiter> </input> </fieldset> <row> <panel> <chart> <title>testing</title> <search> <query>| makeresults count=5 | streamstats count | eval age = case(count=1, 25, count=2, 39, count=3, 31, count=4, 20,count=5,60) | eval city = case(count=1 OR count=3, "San Francisco", count=2 OR count=4, "Seattle",count=5,"UAE")|where city IN ($tok_input$) | stats avg(age) BY city</query> <earliest>-24h@h</earliest> <latest>now</latest> </search> <option name="charting.chart">pie</option> <option name="charting.drilldown">all</option> <option name="refresh.display">progressbar</option> <drilldown> <set token="tok_input">$click.value$</set> <set token="form.tok_input">$click.value$</set> </drilldown> </chart> </panel> </row> </form>

supraja · ‎10-26-2022

Hi team, i have multiselect input filter , i need to set the value of multiselect input filter value to drilldown value of pie chart how to change the input filter value to drill down token value. Please guide on this

supraja · ‎10-26-2022

Hi , could some one please answer.

supraja · ‎10-24-2022

Hi team , How to reduce the input text font size in multiselect drop down filter . please let me know

supraja · ‎10-06-2022

is variance inflation factor {VIF} available in splunk mltk app.

supraja · ‎10-03-2022

with this below code, i am able to create border for panel . <panel depends="$alwaysHideCSS$"> <html> <style> #filterpanel{ height:100px !important; border: 4px groove grey; } </style> </html> </panel> <panel id="filterpanel"> -- --- </panel> in the same way , how to create border for entire dashboard ?

supraja · ‎10-03-2022

could some one please help me on this

supraja · ‎10-03-2022

hi, then you could you please help me on how to highlight the max and min values in line chart

supraja · ‎10-03-2022

could some one please look into this ?

supraja · ‎10-02-2022

the below one is not working, if you add one more token of other filter , it is not working .

supraja · ‎10-01-2022

<form> <fieldset submitButton="false"> <input type="time" token="tok_time"> <label>Time</label> <default> <earliest>-24h@h</earliest> <latest>now</latest> </default> </input> <input id="Reset" type="link" token="resetTokens" searchWhenChanged="true"> <label></label> <choice value="Reset">Reset</choice> <change> <condition value="Reset"> <unset token="tok_Time"></unset> <unset token="form.tok_Time"></unset> <set token="resetTokens">yes</set> <set token="form.resetTokens">yes</set> </condition> </change> </input> <html depends="$alwaysHideCSSOverride$"> <style> div[id^="Reset"] button{ width: 180px !important; background: rgb(192,192,192,1); padding: 10px; border-radius: 10px; color: Blue !important; } </style> </html> </fieldset> </form>

supraja · ‎10-01-2022

Clara-fication: Customizing SimpleXML Dashboards With Inline CSS | Splunk" border="0">\0

supraja · ‎10-01-2022

Posts	30
Solutions	1
Karma Given	1
Karma Received	0
Member Since	‎11-30-2021

Online Status	Offline
Date Last Visited	‎01-24-2023 06:59 AM

Why is outputlookup not updating to store search ...

Table structure - How to modify?

Splunk dashboard performance issue- Which one is b...

What does this mean "Search was not dispatched. To...

How to change the input filter value to drill down...

How to reduce the input text font size in multisel...

Is variance inflation factor {VIF} available in s...

How to reset time filter in the below case?

How to create a border for dashboard ?

How to add maxspotcolor and minspotcolor in line c...

Re: outputlookup is not updating to store search ...

Why is outputlookup not updating to store search ...

Table structure - How to modify?

Splunk dashboard performance issue- Which one is b...

Re: Search was not dispatched. To adjust search di...

What does this mean "Search was not dispatched. To...

Re: Change color of value text in chart

Re: how to change the input filter value to drill ...

How to change the input filter value to drill down...

Re: How to reduce the input text font size in mult...