Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About thatsabhijeet
thatsabhijeet
Explorer
Member since:
01-06-2022
03-20-2023
Community Statistics
| Posts | 14 |
| Solutions | 0 |
| Karma Given | 4 |
| Karma Received | 0 |
| Member Since | 01-06-2022 |
Activity Feed
- Posted Re: How to create a table of availabilities of a given service for a set of hosts on Splunk Search. 03-21-2022 10:24 PM
- Posted How to remove horizontal scrollbar in transpose table? on Dashboards & Visualizations. 03-14-2022 04:42 AM
- Posted How to convert Table of 16X1 to table 4X4? on Splunk Search. 02-26-2022 03:18 AM
- Posted Re: CSS partially not working on Splunk Search. 02-26-2022 02:56 AM
- Karma Re: CSS partially not working for ITWhisperer. 02-26-2022 02:56 AM
- Karma Re: CSS partially not working for ITWhisperer. 02-26-2022 02:23 AM
- Posted Re: CSS partially not working on Splunk Search. 02-26-2022 02:15 AM
- Posted Help with CSS partially not working on Splunk Search. 02-25-2022 10:02 PM
- Tagged Re: How to change font color based on a condition for a particular row using simple xml? on Dashboards & Visualizations. 02-24-2022 06:42 AM
- Posted Re: How to change font color based on a condition for a particular row using simple xml? on Dashboards & Visualizations. 02-24-2022 06:41 AM
- Posted ow can we color the cells according to the percentage of the single value in multi value cell? (Is this achievable witho on Dashboards & Visualizations. 01-24-2022 03:50 AM
- Posted Re: How can I get multiple output in one cell and upon clicking the output, it should show logs in a table below. Below on Dashboards & Visualizations. 01-24-2022 12:10 AM
- Posted Re: How can I get multiple output in one cell and upon clicking the output, it should show logs in a table below. Below on Dashboards & Visualizations. 01-22-2022 02:40 AM
- Karma Re: How can I get multiple output in one cell and upon clicking the output, it should show logs in a table below. Below for ITWhisperer. 01-22-2022 02:13 AM
- Posted Re: How can I get multiple output in one cell and upon clicking the output, it should show logs in a table below. Below on Dashboards & Visualizations. 01-22-2022 01:43 AM
- Posted Re: How can I get multiple output in one cell and upon clicking the output, it should show logs in a table below. Below on Dashboards & Visualizations. 01-22-2022 01:23 AM
- Posted How can I get multiple output in one cell and upon clicking the output, it should show logs in a table below. Below is t on Dashboards & Visualizations. 01-21-2022 11:44 PM
- Posted How to pass Multiple Values in a single token of drilldown on Splunk Enterprise Security. 01-06-2022 06:52 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
03-21-2022
10:24 PM
index=os host IN ("my-db-1.mydomain.net","my-db-2.mydomain.net","my-db-3.mydomain.net","my-db-4.mydomain.net") sourcetype=ps rhnsd | stats count, distinct_count(host) as hostcount | addinfo | eval availability=if(hostcount=0,0,if(count>=(info_max_time-info_min_time)/1800,100,count/((info_max_time-info_min_time)/1800))*100) | table host, availability
... View more
03-14-2022
04:42 AM
How to Remove Horizontal Scrollbar in Transpose Table? The scrollbar is appearing below the table.
... View more
Labels
- Labels:
-
CSS
-
Dashboard Studio
-
simple XML
02-26-2022
03:18 AM
I have a table of applications like this, How can I display the table like in below image,
... View more
Labels
- Labels:
-
table
02-26-2022
02:56 AM
Dear @ITWhisperer , It works perfectly fine now. Thank you so much.
... View more
02-26-2022
02:15 AM
Dear @ITWhisperer , It is working for the above mentioned table. But when I use the same in another table, the data inside the cell is getting hidden. Here is the below code and screenshot. <row> <panel> <html> <style> #highlight tbody td div.multivalue-subcell[data-mv-index="1"] {display: none;} </style> </html> <table id="highlight"> <title>Profile</title> <search> <query> index=*xyz apn IN (/PROFILE) | eval calsuc=case(match('code',"1"), "SUCCESS", match('code',"2"), "WARNING", match('code',"1"), "FAILURE") | dedup requestId | stats count(eval(calsuc="SUCCESS")) as "TotalSuccess" count(eval(calsuc="WARNING")) as "TotalWarning" count(eval(calsuc="FAILURE")) as "TotalFailure" | rename TotalSuccess as S, TotalWarning as W, TotalFailure as F | eval SuccessPerc=round(((S)/(S+W+F)),100,2) | eval WarningPerc=round(((W)/(S+W+F)),100,2) | eval FailurePerc=round(((F)/(S+W+F)),100,2) | eval sign=round(SuccessPerc, 2) | eval colorCd= if(sign>=95,"GREEN",if(95>sign AND sign>=80,"YELLOW", "RED")) | eval TotalCount=mvappend("SUCCESS "+" : "+'SUCCESS' +"("+'SuccessPerc'+")", "WARNING"+" : "+'WARNING' +"("+'WarningPerc'+")", "FAILURE"+" : "+'FAILURE' +"("+'FailurePerc'+")") | eval status=mvjoin(Totalcount," ") | eval statusNew=mvappend(status, colorCd) | chart values(statusNew) as tot by flowNm Country | fillnull value="No Value" </query> <earliest>$sltd_tm.earliest$</earliest> <latest>$sltd_tm.latest$</earliest> </search> <option name="count">20</option> <option name="drilldown">row</option> <format type="color"> <colorPalette type="expression"> case (match(value,"RED"), "#DC4E41", match(value,"YELLOW"),"#F88E34",match(value,"GREEN"),"#53A051") </colorPalette> </format> </table> </panel> </row>
... View more
02-25-2022
10:02 PM
I am trying to hide RED, GREEN and YELLOW, but the xml css is not working for me.
<form>
<row>
<panel>
<html>
<style>
#tbl_Summary tbody td div.multivalue-subcell[data-mv-index="1"]
{display: none;}
</style>
</html>
<table id="tbl_Summary">
<title>Summary</title>
<search>
<query>
index=*xyz
| eval calsuc=case(match('code',"1"), "SUCCESS", match('code',"2"), "WARNING", match('code',"1"), "FAILURE")
| dedup requestId
| eval APPLICATION=case(like('apn',"/PROFILE"),"PROFILE")
| stats Count as "Total Count" count(eval(calsuc="SUCCESS")) as "TotalSuccess" count(eval(calsuc="WARNING")) as "TotalWarning" count(eval(calsuc="FAILURE")) as "TotalFailure"
| rename TotalSuccess as S, TotalWarning as W, TotalFailure as F
| eval SuccessPerc=round(((S)/(S+W+F)),100,2)
| eval sign=round(SuccessPerc, 0)
| eval colorCd= if(sign>=95,"GREEN",if(95>sign AND sign>=80,"YELLOW", "RED"))
| eval ApplicationName=APPLICATION."|".'colorCd'
</query>
<earliest>$sltd_tm.earliest$</earliest>
<latest>$sltd_tm.latest$</earliest>
</search>
<option name="count">20</option>
<option name="drilldown">row</option>
<format type="color">
<colorPalette type="expression">
case (match(value,"RED"), "#DC4E41", match(value,"YELLOW"),"#F88E34",match(value,"GREEN"),"#53A051")
</colorPalette>
</format>
</table>
</panel>
</row>
</form>
... View more
Labels
- Labels:
-
field extraction
02-24-2022
06:41 AM
Not working for me, It shows the log_level value
... View more
- Tags:
- @niketnilay
01-24-2022
03:50 AM
1. How each values can be clickable for a mutivalue cell output. 2. Upon clicking it will show the logs of success/warning/failure 3. How can we color the cells according to the percentage of the single value in multi value cell? (Is this achievable without using javascript or css as I dont have admin access in splunk) SuccessCode=389,876 WarningCode=234, FailureCode=809 for the events. cell color Red for Failurepercent> 80%, Yellow for Failurepercent- 20% to 80%, green for Failurepercent 0%-20% Below is the output table format.
... View more
Labels
- Labels:
-
chart
-
Dashboard Studio
01-24-2022
12:10 AM
Dear Sir, I want the colour of the cell according to Failure percentage, i.e. If Failure Percentage>90% then red, Failure percentage 50%-90% as yellow and Failure percentage as 0%-50% as green. Add the values are picked from the multiple value fields. In the link you have provided, The coloumn name changes. Hence please provide a new solution.
... View more
01-22-2022
02:40 AM
Sir , How to color the cell background as green, yellow and red according to failure percentage. Only using splunk code. No external css should be used.
... View more
01-22-2022
01:43 AM
Fields in the logs are like this.
... View more
01-22-2022
01:23 AM
But sir, If my country names are stored in a field_name as country and application_names are stored in a field_name as applicationName.
... View more
01-21-2022
11:44 PM
How can I get multiple output in one cell and upon clicking the output, it should show logs in a table below. Below is the format. statuscode for success =100, statuscode for warning = 200, statuscode for failure=300 Country1 Country2 Country3 Application1 Success - #count_value Warning - #count_value Failure - #count_value Success - #count_value Warning - #count_value Failure - #count_value Success - #count_value Warning - #count_value Failure - #count_value Application2 Success - #count_value Warning - #count_value Failure - #count_value Success - #count_value Warning - #count_value Failure - #count_value Success - #count_value Warning - #count_value Failure - #count_value Application3 Success - #count_value Warning - #count_value Failure - #count_value Success - #count_value Warning - #count_value Failure - #count_value Success - #count_value Warning - #count_value Failure - #count_value
... View more
Labels
- Labels:
-
Dashboard Studio
01-06-2022
06:52 AM
<query> index=index_test | dedup empID | eval tot = case (match('call.code' , "1") OR match('call.code' , "2") OR match('call.code' , "3") OR match('call.code' , "4") OR match('call.code' , "5") , "Success", match('call.code' , "6"),"Failure") | stats count(eval(tot="Success")) as "TotalSuccess" count(eval(tot="Failure")) as "TotalFailure" | rename TotalSuccess as SUCCESS, TotalFailure as FAILURE </query> In the Drilldown Part:- <drilldown> <set token="abc">$click.value$</set> <set token="xyz">case ($click.name2$="FAILURE", "6", $click.name2$="SUCCESS", "1,2,3,4,5" ) <link target="_blank"> search?q=index=index_test call.operation IN "$abc$" call.code IN "click.name2" | dedup empID | eval tot = case (match('call.code' , "1") OR match('call.code' , "2") OR match('call.code' , "3") OR match('call.code' , "4") OR match('call.code' , "5") , "Success", match('call.code' , "6"),"Failure") </link> </drilldown> Here in drilldown, I want to pass multiple values in $click.name2$="SUCCESS", "1,2,3,4,5". But it is not taking the values.
... View more
Labels
- Labels:
-
other
-
troubleshooting
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-20-2023
09:37 AM
|
