About Borntowin

Borntowin · ‎05-01-2022

I would like to hide/not display the panel when there is no data. Is it possible in Splunk dashboard studio? If yes, how can we acheive it? Can anyone plz guide.

Borntowin · ‎04-26-2022

I would like to freeze the header(date) in the timeline visualization,

Borntowin · ‎04-20-2022

Hi Team, There is a column formatting (table) to highlight colours for the values..but i could see formatting says "String" instead of number tried updating in the code but still unable to do it.. Could anyone please let me know how to change it to number from "string" to add the colours value.

Borntowin · ‎04-20-2022

There is a timeline visualzation set on one of the panel in the dashboard where would like to freeze the header since, the timeline visualization header will be date & time..just wanted to freeze that and see the data to scroll down/view the full information.

Borntowin · ‎04-20-2022

Hi Team, We have splunk dashboard created by using dashboard beta app. just would like to know is that possible to increase the size of the page. As we have customized more than 10 panels after we save the dashboard and try to download couldn't see the last few panels. will that be possible to increase the size.?

Borntowin · ‎04-20-2022

Hi Team, I have created a dashboard where i would like to freeze the header(time) on timeline visualization. could you please advise on how to do that by opening the <html> tag.

Borntowin · ‎04-08-2022

Thank you, if i have already used Join by (time field) post that i need to check whether the source file is available if not then it should pick the previous day/ available file. how do we mention or use command in the query

Borntowin · ‎04-08-2022

Hi Team, There is a two reports one report(1st report) has timestamp other report(2nd report) doesn't have timestamp so, extracted date from source filename..the report which doesn't have timestamp have few fields which needs to be join from 1st report and 2nd report but sometimes the 2nd report will not be received. In that case, which need to be pick up the previous day or available previous file. is there any earliest comparison and pick the values from 2nd report? what command to be used in that case?

Borntowin · ‎03-29-2022

Hi Team, I have two reports where one report(report1)has timestamp field where other report(report2) doesn't have it has only the date in the source filename. Report 2 will not be send it to splunk in realtime. Now i would like to combine those two reports and populate the data. I have extracted the date from source.(search time) from report1 & report2 one common field is there.. I have already ingested the file how do i compare the date and populate the data. Can anyone suggest "where clause" can be used in this case?

Borntowin · ‎03-27-2022

Hi Team, I have indexed the file as current timestamp but would like to execute the query by taking the filename timestamp as _time will that be possible now? if yes, how do we do that.

Borntowin · ‎03-13-2022

Thank you.. But how do i pick those events and map it to some field as i need to get the count.

Borntowin · ‎03-13-2022

I would like to match/pick only the event which contains "ccexpire". sample event :- 09/Dec/2021 23:52:39,Query,"SELECT ccexpire FROM creditcard WHERE userid = 624",7 There are many events which has ccexpire would like to extract the events which has ccexpire.

Borntowin · ‎03-10-2022

Hi Team, I would like to learn building splunk queries and dashboard. Is there any link or splunk page available where we can learn it via lab exercises or scenario based..

Posts	13
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎03-10-2022

Online Status	Offline
Date Last Visited	‎05-02-2022 12:30 AM

Is it possible in Splunk dashboard studio to hide/...

How to change "string" in dashboard studio to add ...

Is it possible to increase size of panels in dashb...

How to freeze the header(time) on timeline visuali...

How to search two reports when one report doesn't ...

How to combine two reports if only one report has ...

How to change the index time as filename timestamp...

How do I create a field extraction that match/pick...

How do I learn Splunk to write queries and build ...