I am getting error "could not create search". How to fix this error ? xml:: <input type="multiselect" token="environment"> <label>Environments</label> <choice value="cfp08">p08</choice> <choice value="cfp07">p07</choice> <choice value="*">ALL</choice> <default>*</default> <valuePrefix>environment =</valuePrefix> <delimiter> OR </delimiter> <search> <query/> </search> <fieldForLabel>environment</fieldForLabel> <fieldForValue>environment</fieldForValue> </input> ... View more

Hello Team, I am trying for a solution using multiselect input filter where the index token is passed to panels. From the below code, I currently see the filter values "Stack1", "Stack2" and "Stack3". But I face an issue that the value passed is from label. I need the index_tkn to hold value aws_stack02_p, aws_stack01_p, aws_stack01`_n. <input type="multiselect" token="index_tkn" searchWhenChanged="false"> <label>Select Stack</label> <valuePrefix>index="</valuePrefix> <valueSuffix>"</valueSuffix> <delimiter> OR </delimiter> <fieldForLabel>index</fieldForLabel> <fieldForValue>label</fieldForValue> <search> <query>index IN ({aws_stack02_p,aws_stack01_p,aws_stack01_n}) | eval label = case(index == "aws_stack02_p", "Stack1",index == "aws_stack01_p", "Stack2",index == "aws_stack01_n", "Stack3") |stats count by label</query> <earliest>$time_tkn.earliest$</earliest> <latest>$time_tkn.latest$</latest> </search> </input>   ... View more

I am using regex to extract the field from the below json data. I want to extract the fields in key-value pair specially log.message from the json data. Example if I need "action" field from log.message clusterName: cluster-9gokdwng4f internal_tag: internal_security log: { [-] message: {"action":"EXECUTE","class":"System-Queue","eventC":"Data access event","eventT":"Obj-Open with role","timeStamp":"Wed 2024 Apr 03, 04:58:28:932"} stack: thread_name: Batch-1 timestamp: 2024-04-03T04:58:28.932Z version: 1 } } ... View more

Hello Team, I have 2 input drilldown filter - filter1, filter2. Filter2 is based on the token from filter1.  When i click submit i should pass the token from filter1, filter2 to create a new dashboard.   ... View more

Hello Team,   I have 2 look up data and I want to join them through a common field MonthYear. I need to calculate transmission per dept = Total transmission *(size of dept/total size of dept) In lookup1 I need to calculate the propotion of size based on dept eg; Transmission for Eng dept = 119 *((100+23)/ 170) Lookup1: MonthYear  size  org  dept July 2022 100 research Eng July 2022 23 research Eng July 2022 2 data IU July 2022 45 research Lab Total size 170   Lookup2: MonthYear Transmission ID July 2022 60 global July 2022 34 global July 2022 23 Pbg July 2022 2 pcf Total transmission 119   I made a merge of 2 lookup with join using MonthYear but I am able to pass only one token value at a time. I need to get pie chart based on calculated formula for org and sort for top values in dept Code: |inputlookup lookup2.csv |search MonthYear="July 2022" |join MonthYear   [|inputlookup lookup1.csv]  |stats sum(Transmission) as TotalTransmission, sum(size) as Totalsize by MonthYear  |join MonthYear  [|inputlookup lookup1.csv   |search dept="Eng"   |stats values(MonthYear) as MonthYear,sum(size) as DeptMem by dept] |eval "Transmission per dept" = round(("Transmission per dept") * (DeptMem/Totalsize),2) |fields "Transmission per dept" ... View more

Hi, I am working on a POC project. I need to add timestmap command to use predict algorithm. My dataset however has the below fields. MonthYear Year Quarter Month Subscription ID Subscription name   I was looking for a solution to randomly add timestamps for a period of one year. I have data from March2023 till May2023.   March 2023   Qtr 1 March 020b3b0c-5b0a-41a1-8cd7-90cbd63e06 SUB-PRD-EU-EDLCONTACTS March 2023   Qtr 1 March 020b3b0c-5b0a-41a1-8cd7-90cbd63e06 SUB-PRD-EU-EDLCONTACTS   ... View more

Hello Team, I need to use the predict command but currently i have only 110 data events therefore to have more data points i am trying to add mock data with only time field which is different. Also in my dataset i have only MonthYear field and data collected from March month of this year.  I read about repeat function and dataset literal can we use it in this scenario Quarter Subscription ID Subscription name Azure service Azure region Usage MonthYear Qtr 1 020b3b0c-5b0a-41a1-8cd7-90cbd63e06 SUB-PRD-EDL Azure Data Factory West 9,10E-12 March 2023 Qtr 1 020b3b0c-5b0a-41a1-8cd7-90cbd63e06 SUB-PRD-EDL Azure Data Factory West 0 March 2023 Qtr 1 020b3b0c-5b0a-41a1-8cd7-90cbd63e06 SUB-PRD-EDL Azure Data Factory West 4,40303E-09 March 2023 ... View more

Hello Team, I need to send an alert on all working day at 8.00 AM with a time range of 24hrs except on Monday with a time range of 3 days. Will this be possible in our alert settings for the same SPL query but different time range. OR should we add in SPL query ?   ... View more

Hello Team, I am trying to migrate from classic to dashboard studio and facing issue with setting token. In classic I define it as a single value panel and it comes as a subscript <set token="money_avg">$result.money_avg$</set> and  <option name="underLabel">+/- $money_avg$</option>.   In Studio I am unable to get this option in single value panel. (highlighted yellow).   Is there any workaround ? ... View more

I need visualisation with box plot graph.IS this feature available in Dashboard studio ... View more

I am looking for drilldown option in boxplot. I tried editing in source and tried to do drilldown but it is not working. Is there any workaround solution for this ? ... View more