Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Edwin1471
Edwin1471
Path Finder
Member since:
07-12-2022
09-07-2022
Community Statistics
| Posts | 20 |
| Solutions | 0 |
| Karma Given | 12 |
| Karma Received | 0 |
| Member Since | 07-12-2022 |
Activity Feed
- Karma Re: Changing the color of the table field for ITWhisperer. 09-07-2022 05:28 AM
- Posted Re: Changing the color of the table field on Dashboards & Visualizations. 09-07-2022 05:01 AM
- Posted How to change the color of the table field? on Dashboards & Visualizations. 09-07-2022 02:28 AM
- Karma Re: Delete row values if condition is not met in a table for ITWhisperer. 09-04-2022 11:05 PM
- Posted Re: Delete row values if condition is not met in a table on Splunk Search. 09-04-2022 11:43 AM
- Posted How to delete row values if condition is not met in a table? on Splunk Search. 09-03-2022 09:59 AM
- Karma Re: rex to extract string for ITWhisperer. 09-02-2022 04:25 AM
- Posted How to write rex to extract string? on Splunk Search. 09-01-2022 12:22 PM
- Posted How to change the heigh of panels in XML ? on Splunk Search. 08-30-2022 03:20 AM
- Karma Re: How to create a new field based on existing fields for gcusello. 08-28-2022 11:24 PM
- Posted Re: How to transform a table on Splunk Search. 08-27-2022 12:42 PM
- Posted Re: How to create a new field based on existing fields on Splunk Search. 08-27-2022 07:46 AM
- Posted How to create a new field based on existing fields? on Splunk Search. 08-27-2022 04:53 AM
- Karma Re: How to transform a table for ITWhisperer. 08-24-2022 07:26 AM
- Karma Re: How to transform a table for gcusello. 08-24-2022 07:26 AM
- Posted How to transform a table? on Splunk Search. 08-24-2022 06:26 AM
- Karma Re: How to rename a value in a table for somesoni2. 08-22-2022 07:58 AM
- Posted How to rename a value in a table? on Splunk Search. 08-22-2022 06:21 AM
- Karma Re: stacked Column chart for ITWhisperer. 08-04-2022 02:20 AM
- Karma Re: stacked Column chart for dglauche. 08-04-2022 02:20 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-07-2022
05:01 AM
This changes an entire row to yellow color, which is not what I need. I want to change the color of the last 6 row fields and keep the green color for the others.
... View more
09-07-2022
02:28 AM
Hi all,
how can I change the top row highlighted columns background-color. With HTML, CSS ?
... View more
Labels
- Labels:
-
CSS
-
panel
-
simple XML
09-04-2022
11:43 AM
Didn't work, same result as before My spl query below: sourcetype=e143_csv, index="L134521_e143", PROCESS_ID = "FileDelivery" FREQ="DAY" | rex field=PROCESS_NAME "(?P<Process>.*)for" | eval Process=if(Process="Daily AHS Instrument File ","Daily AH",Process) | eval Process=if(Process="Daily Position File ","Daily Po",Process) | eval Process=if(Process="Daily Credit Risk Info File ","Daily Risk",Process) | eval Process=if(Process="Daily CB File ","Daily File",Process) | eval Process=if(Process="Daily Instrument File ","Daily Instrum",Process) | eval "Daily Po" = if('Daily AH' <= 'Daily Po', 'Daily Po', null()) | eval "Daily Risk" = if('Daily AH' <= 'Daily Po' AND 'Daily Po' <= 'Daily Risk', 'Daily Risk', null()) | eval "Daily File" = if('Daily AH' <= 'Daily Po' AND 'Daily Po' <= 'Daily Risk' AND 'Daily Risk' <= 'Daily File', 'Daily File', null()) | eval "Daily File" = if('Daily AH' <= 'Daily Po' AND 'Daily Po' <= 'Daily Risk' AND 'Daily Risk' <= 'Daily File', 'Daily File', null()) | eval "Daily Instrum" = if('Daily AH' <= 'Daily Po' AND 'Daily Po' <= 'Daily Risk' AND 'Daily Risk' <= 'Daily File' AND 'Daily File' <= 'Daily Instrum', 'Daily Instrum', null()) | table Process, START_TIME, FINISH_TIME, RELATED_GRS_UNIT_ID | sort -START_TIME, -FINISH_TIME, -Process, -RELATED_GRS_UNIT_ID | dedup RELATED_GRS_UNIT_ID, Process sortby -FINISH_TIME | xyseries Process, RELATED_GRS_UNIT_ID, FINISH_TIME | transpose 0 header_field=Process
... View more
09-03-2022
09:59 AM
Hi all,
I need to write a query that checks whether (Daily AH <= Daily Po <= Daily Risk <= Daily File <= Daily Instrum) condition is met for each row. If the condition is not met get rid of the row value that did not meet the condition and all the values after it.
... View more
09-01-2022
12:22 PM
Hi,
REX command rex mode=sed to remove quotation marks and numbers inside of them
OUTPUT file "19214132.IKU" copied to output directory
OUTPUT file "19315133.IKU" copied to output directory
OUTPUT file "19416134.IKU" copied to output directory
....
Desired result -> OUTPUT file .IKU copied to output directory
... View more
08-27-2022
12:42 PM
To follow up, How can I sort a table by column values, instead of rows after transposing it ?
... View more
08-27-2022
07:46 AM
I am getting this result
... View more
08-27-2022
04:53 AM
Hi, how can I combine two fields (2.1 and 2.2) into one field (Main calculation)
I have a table :
I would like to convert it into something like this : where START_TIME is the value of 2.1 and the FINISH_TIME is the value of 2.2 field. Completion_time is sum of both two fields (0.35 + 60.53)
SPL query:
| eval finish_time_epoch = strftime(strptime(FINISH_TIME, "%Y-%m-%d %H:%M:%S"),"%Y-%m-%d %H:%M:%S") | eval start_time_epoch = strftime(strptime(START_TIME, "%Y-%m-%d %H:%M:%S"),"%Y-%m-%d %H:%M:%S") | eval duration_s = strptime(FINISH_TIME, "%Y-%m-%d %H:%M:%S") - strptime(START_TIME, "%Y-%m-%d %H:%M:%S") | eval duration_min = round(duration_s / 60, 2) | rename duration_min AS Completion_time
| eval Process=if(Process="013","2.1 Main calculation",Process)
| eval Process=if(Process="014","2.2 Main calculation",Process)
| table Process, 2.START_TIME, 3.FINISH_TIME , 4.Completion_time
| sort -START_TIME, -FINISH_TIME | sort +Process | transpose 0 header_field=Process column_name=Process | dedup Process
... View more
08-24-2022
06:26 AM
Hi,
How can I transform a table, so that the result would look something like this
... View more
08-22-2022
06:21 AM
Hi,
Is there a way to rename a specific value in the column of the table.
For example:
... View more
08-04-2022
01:41 AM
Hi,
how can I make a stacked column chart . Currently the Purple area displays how long it took for all processes combined to execute. How could I modify my spl query so that it would display how long each individual process took to complete in a column chart. (A1, A2, A3 - process names)
| rex field=PROCESS_NAME ":(?<Process>[^\"]+)"
| eval finish_time_epoch = strftime(strptime(FINISH_TIME, "%Y-%m-%d %H:%M:%S"),"%Y-%m-%d %H:%M:%S")
| eval start_time_epoch = strftime(strptime(START_TIME, "%Y-%m-%d %H:%M:%S"),"%Y-%m-%d %H:%M:%S")
| eval duration_s = strptime(FINISH_TIME, "%Y-%m-%d %H:%M:%S") - strptime(START_TIME, "%Y-%m-%d %H:%M:%S")
| eval duration_min = round(duration_s / 60, 2)
| chart sum(duration_min) as "time" by G_DT
... View more
08-03-2022
05:07 AM
Hi,
I am trying to visualize total execution time for each process. Is there a way to display the results of each process in a single column, like in the example below?
... View more
Labels
- Labels:
-
CSS
-
Dashboard Studio
-
other
07-25-2022
04:50 AM
Hi,
how to center the text in the column ? Using Dashboard studio
... View more
Labels
- Labels:
-
development
-
other
07-23-2022
06:47 AM
Hi,
Is it possible to Make a table like in the example below, that would refresh every 10 minutes and update the status column to either Arrived or Delayed status and change the color of that row to either green or red.
... View more
Labels
- Labels:
-
table
07-18-2022
05:46 AM
Hi,
how can I modify x-axis in order to display date only for each column.
query
| eval finish_time_epoch = strftime(strptime(FINISH_TIME, "%Y-%m-%d %H:%M:%S"),"%Y-%m-%d %H:%M:%S")
| eval start_time_epoch = strftime(strptime(START_TIME, "%Y-%m-%d %H:%M:%S"),"%Y-%m-%d %H:%M:%S")
| eval duration_s = strptime(FINISH_TIME, "%Y-%m-%d %H:%M:%S") - strptime(START_TIME, "%Y-%m-%d %H:%M:%S")
| eval duration_min = round(duration_s / 60, 2)
| chart sum(duration_min) as "time" by TimeDate
... View more
Labels
- Labels:
-
chart
07-12-2022
06:10 AM
Hi,
i need to write a query that converts time format from
minutes to format Xh Xmin Xs
my query
| eval finish_time_epoch = strftime(strptime(FINISH_TIME, "%Y-%m-%d %H:%M:%S"),"%Y-%m-%d %H:%M:%S") | eval start_time_epoch = strftime(strptime(START_TIME, "%Y-%m-%d %H:%M:%S"),"%Y-%m-%d %H:%M:%S") | eval duration_s = strptime(FINISH_TIME, "%Y-%m-%d %H:%M:%S") - strptime(START_TIME, "%Y-%m-%d %H:%M:%S") | eval duration_min = round(duration_s / 60, 2) | chart sum(duration_min) as "time" by Yd_count_data
... View more
07-12-2022
03:39 AM
No The initial query | eval finish_time_epoch = strptime(FINISH_TIME, "%Y-%m-%d %H:%M:%S") | eval start_time_epoch = strptime(START_TIME, "%Y-%m-%d %H:%M:%S") | eval duration = tostring((finish_time_epoch - start_time_epoch), "duration") | rex field="duration" mode=sed "s/\..*$//" | sort -FINISH_TIME | table duration, timeDate
... View more
07-12-2022
03:14 AM
I want to create a query, that would combine all the duration values into one by adding them for each Time Date. The result should look something like this : Duration | TimeDate 03:59:18 | 2022-07-31 ......... | 2022-06-30 ........ | 2022-05-30 and so on
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-07-2022
09:34 AM
|
