Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About elomotanpru
elomotanpru
Path Finder
Member since:
01-20-2022
Thursday
Community Statistics
| Posts | 14 |
| Solutions | 0 |
| Karma Given | 6 |
| Karma Received | 0 |
| Member Since | 01-20-2022 |
Activity Feed
- Posted Re: Setting 2 X-Axis Values in a Chart on Dashboards & Visualizations. Thursday
- Posted How to set 2 X-Axis Values in a Chart? on Dashboards & Visualizations. Thursday
- Posted Re: Is is possible to have bulleted description in the Splunk Dashboard? on Dashboards & Visualizations. Thursday
- Karma Re: Is is possible to have bulleted description in the Splunk Dashboard? for gcusello. Thursday
- Karma Re: Is is possible to have bulleted description in the Splunk Dashboard? for gcusello. Thursday
- Posted Re: Is is possible to have bulleted description in the Splunk Dashboard? on Dashboards & Visualizations. Monday
- Posted Is is possible to have bulleted description in the Splunk Dashboard? on Dashboards & Visualizations. a week ago
- Posted Re: How to set a dependent Y-Axis max value depending on the selected $click.value2$ on Dashboards & Visualizations. a week ago
- Karma Re: How to set a dependent Y-Axis max value depending on the selected $click.value2$ for ITWhisperer. a week ago
- Posted Re: How to set a dependent Y-Axis max value depending on the selected $click.value2$ on Dashboards & Visualizations. 2 weeks ago
- Posted Re: How to set a dependent Y-Axis max value depending on the selected $click.value2$ on Dashboards & Visualizations. 2 weeks ago
- Posted Re: How to set a dependent Y-Axis max value depending on the selected $click.value2$ on Dashboards & Visualizations. 2 weeks ago
- Posted How to set a dependent Y-Axis max value depending on the selected $click.value2$? on Dashboards & Visualizations. 2 weeks ago
- Posted Re: Formatting _time to be able to be used in the timepicker on Splunk Search. 03-24-2022 07:40 AM
- Posted Re: Formatting _time to be able to be used in the timepicker on Splunk Search. 03-22-2022 09:19 AM
- Karma Re: Formatting _time to be able to be used in the timepicker for Marco_Develops. 03-22-2022 08:22 AM
- Posted Re: Formatting _time to be able to be used in the timepicker on Splunk Search. 03-22-2022 07:54 AM
- Posted How to able Formatting _time to be used in the timepicker? on Splunk Search. 03-22-2022 07:03 AM
- Tagged How to able Formatting _time to be used in the timepicker? on Splunk Search. 03-22-2022 07:03 AM
- Tagged How to able Formatting _time to be used in the timepicker? on Splunk Search. 03-22-2022 07:03 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
Thursday
Is there a way to implement not using charts with the default Splunk dashboard capabilities?
... View more
Thursday
Hey everyone,
Currently making a report for my team that requires to have two X-Axis values based on the excel sheet shared with me. Below are some screenshots of the desired output, my progress so far, and search query based on what I have learned so far.
The goal:
What I am familiar with using chart in the search:
My search string
| eval DATE=strftime(strptime(DATE,"%d%b%Y"),"%Y-%m-%d")
| eval _time=strptime(DATE." ","%Y-%m-%d")
| where _time >= strptime("$from$", "%m/%d/%Y") AND _time <= strptime("$to$", "%m/%d/%Y")
| eval epochtime=strptime(TIME, "%H:%M:%S")| eval desired_time=strftime(epochtime, "%I:%M:%S %p")
| chart sum(VIO_PAGING_SEC) as "$lpar$ Sum of VIO_PAGING_SEC" sum(SYSTEM_PAGEFAULTS_SEC) as "$lpar$ SYSTEM_PAGEFAULTS_SEC" sum(SWAP_PAGIN_SEC) as "$lpar$ SWAP_PAGIN_SEC" sum(LOCAL_PAGEFAULTS_SEC) as "$lpar$ LOCAL_PAGEFAULTS_SEC" over desired_time
... View more
- Tags:
- chart
- splunk-search
Thursday
No worries. Was able to make it work. This was a huge throw back to my high school days learning HTML basics again. Thanks for the help.
... View more
Monday
Will check that out somehow since the link below was not working. If you could resend it that would be a huge help. Thanks
... View more
a week ago
Hi splunkers, I am currently searching for a way to make the description in the dashboard in bullet form to make it more readable for the users. Is there a way to do this in the default version of version 8.1.3? Thank you <description>1) Select one from the "Select to View" dropdown button.
2) Input the desired month to be generated by placing what date to start from in the "From MM/DD/YYYY" input and the end period in the "To MM/DD/YYYY" input similar to the default values
3) Click the "Submit" button to generate the report (Note: Submit button must be used whenever selecting another option from "Select to View" dropdown or when a new Date Range is placed in the text input)</description>
... View more
a week ago
Was able to make my event handler work after watching some Youtube videos about it. Thanks for the suggestion
... View more
2 weeks ago
<condition label="D7X0">
<set token="max">118784</set>
</condition>
<condition label="H7X0">
<set token="max">106496</set>
</condition>
<condition label="D1D0">
<set token="max">67584</set>
</condition>
<condition label="DAD0">
<set token="max">48128</set>
</condition>
<condition label="E1D0">
<set token="max">65536</set>
</condition>
<condition label="H1D0">
<set token="max">86016</set>
</condition>
<condition label="WSYS">
<set token="max">32768</set>
</condition>
<condition label="XSYS">
<set token="max">32768</set> I accidentally removed this from the code above. It is supposed to go after the first input.
... View more
2 weeks ago
Not that familiar on how to set it. This is what I came up with but I was unable to set it up properly: <form theme="dark">
<label>CSC/ERSC/PSI_MSTOR Report</label>
<fieldset submitButton="true" autoRun="false">
<input type="dropdown" token="select">
<label>Select to View</label>
<choice value="*-------*">*-------*</choice>
<choice value="D7X0">D7X0</choice>
<choice value="H7X0">H7X0</choice>
<choice value="D1D0">D1D0</choice>
<choice value="DAD0">DAD0</choice>
<choice value="E1D0">E1D0</choice>
<choice value="H1D0">H1D0</choice>
<choice value="WSYS">WSYS</choice>
<choice value="YSYS">YSYS</choice>
<default>*-------*</default>
</input>
<input type="text" token="from">
<label>From MM/DD/YYYY</label>
<default>03/01/2022</default>
</input>
<input type="text" token="to">
<label>To MM/DD/YYYY</label>
<default>03/31/2022</default>
</input>
</fieldset>
<row>
<panel>
<title>Check select ($select$) from dropdown. Check max ($max$) as hidden value</title>
<chart>
<title>Area Chart - $select$ $from$ - $to$</title>
<search>
<query>index=mainframe-platform
sourcetype="mainframe:mstor"
MVS_SYSTEM_ID=$select$
| eval DATE=strftime(strptime(DATE,"%d%b%Y"),"%Y-%m-%d")
| eval _time=strptime(DATE." ","%Y-%m-%d")
| where _time >= strptime("$from$", "%m/%d/%Y") AND _time <= strptime("$to$", "%m/%d/%Y")
| chart avg(CSAVG_AVAIL_MB) as "CSAVG_AVAIL_MB: $select$" first(CSMIN_AVAIL_MB) as "CSMIN_AVAIL_MB: $select$" over HOUR</query>
<earliest>0</earliest>
<latest></latest>
</search>
<option name="charting.axisLabelsY.majorUnit">3000</option>
<option name="charting.axisLabelsY2.majorUnit">2000</option>
<option name="charting.axisTitleY2.text">CSMIN_AVAIL_MB: $lpar$</option>
<option name="charting.axisY.maximumNumber">$max$</option>
<option name="charting.axisY.minimumNumber">3000</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.maximumNumber">$max$</option>
<option name="charting.axisY2.minimumNumber">0</option>
<option name="charting.axisY2.scale">linear</option>
<option name="charting.chart">area</option>
<option name="charting.chart.overlayFields">"CSAVG_AVAIL_MB: E1D0","CSAVG_AVAIL_MB: D1D0","CSAVG_AVAIL_MB: DAD0","CSAVG_AVAIL_MB: H1D0","CSAVG_AVAIL_MB: H7X0","CSAVG_AVAIL_MB: D7X0","CSAVG_AVAIL_MB: WSYS","CSAVG_AVAIL_MB: XSYS"</option>
<option name="charting.drilldown">none</option>
<option name="charting.legend.placement">top</option>
<option name="charting.seriesColors">[DA171E,E6FFFF]</option>
<option name="height">617</option>
<option name="refresh.display">progressbar</option>
</chart>
</panel>
</row>
... View more
2 weeks ago
Would I need to make a whole new dropdown for this? That was something I tried but I was hoping there was a way to reduce the number of inputs our users would be clicking.
... View more
2 weeks ago
Hi everyone,
Would anyone know a way to make it possible for my Y-Axis highest value to change depending on the $click.value2$.
For context below are some screenshots of the dashboard that I am working on for my team. What it aims to do are the following:
Display three (3) different reports by setting the following:
Select a report to view via "Select to View" then click "Submit"
The default date would be used in the "From MM/DD/YYYY" and "To MM/DD/YYYY" text input. User will have to edit the date in them to adjust the time period.
Proceed to the panel on the left where they must click one of the values($click.value2$) which will then generate the Area Chart on the right panel.
My current dilemma is that each specific report has its own "Max Y-Axis Value".
Is there a way for me to set that without using "Chart Overlay" so that it would be easier for our business unit to understand it. Preferably using XML or any default Splunk features (version 8.1.3).
Thank you.
... View more
- Tags:
- splunk-search
Labels
- Labels:
-
chart
-
drilldown
-
simple XML
03-24-2022
07:40 AM
Sorry for the delayed response. When I tried using the same query with the timepicker, the results was that it could not be found but my other query that uses a Text Input was able to return the desired data minus the DateTime format. I thought that I needed to add the where clause for it to work because of that result. I check for the dates between February 1 2022 to March 1, 2022.
... View more
03-22-2022
09:19 AM
Yes it worked for the statistics table version. Would also be able to help me applying this for the time picker version (please see screenshots for reference). I was unable to use the same search query. Did I use the wrong token (timerange) by any chance when using it for earliest and latest?
... View more
03-22-2022
07:54 AM
Hi, The desired out put would be something like this: 3/14/2022 09:00:00
... View more
03-22-2022
07:03 AM
Hi everyone,
Pretty new to Splunk and would really appreciate your insight on my current project. Currently creating a dashboard where I want to use a timepicker to change the values in my charts depending on the time period selected by the user via the Date Range - Between. Currently experiencing problems formatting my _time value to include DATE and eventHour together. Below is my search query and search result for reference.
Thank you in advance.
index=mainframe-platform sourcetype="mainframe:cecmaverage" EXPRSSN = D7X0
| dedup DATE EXPRSSN MIPS
| eval DATE=strftime(strptime(DATE,"%d%b%Y"),"%Y-%m-%d")
| eval HOUR=if (isnull(HOUR),"0",HOUR) | eval eventHour=substr("0".HOUR,-2,2).":00:00"
| eval _time=strptime(DATE." ".eventHour,"%Y-%m-%d %H:%M:%S")
| table DATE eventHour _time EXPRSSN MIPS
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Thursday
|
