Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About ravikumar_sri20
ravikumar_sri20
Engager
Member since:
08-01-2022
02-17-2025
Community Statistics
| Posts | 13 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 08-01-2022 |
Activity Feed
- Posted Re: Match a column from a main query with a column in a subquery on Splunk Search. 02-16-2025 09:49 PM
- Posted Re: Match a column from a main query with a column in a subquery on Splunk Search. 02-13-2025 11:19 PM
- Posted Re: Match a column from a main query with a column in a subquery on Splunk Search. 02-13-2025 09:19 AM
- Posted Match a column from a main query with a column in a subquery on Splunk Search. 02-13-2025 06:32 AM
- Posted Re: Sum columns selected from a dropdown menu on Dashboards & Visualizations. 10-17-2024 12:50 PM
- Posted Sum columns selected from a dropdown menu on Dashboards & Visualizations. 10-17-2024 11:46 AM
- Posted Re: Splunk Pivot with dropdown menu and timepicker on Dashboards & Visualizations. 09-26-2024 07:33 AM
- Posted Re: Splunk Pivot with dropdown menu and timepicker on Dashboards & Visualizations. 09-26-2024 12:32 AM
- Posted Splunk Pivot with dropdown menu and timepicker on Dashboards & Visualizations. 09-25-2024 11:17 AM
- Posted Re: Need help in parsing events on Splunk Search. 02-21-2023 09:12 AM
- Tagged Re: Need help in parsing events on Splunk Search. 02-21-2023 09:12 AM
- Posted Re: Need help in parsing events on Splunk Search. 02-21-2023 09:11 AM
- Posted How to parse these events? on Splunk Search. 02-21-2023 04:31 AM
- Posted How do I set token in d3 js visulization? on Dashboards & Visualizations. 08-01-2022 03:37 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
02-16-2025
09:49 PM
At times, LKUP_DSN will match exactly with DS_NAME. In other instances, LKUP_DSN will contain all the characters of DS_NAME except for the last nine characters.
... View more
02-13-2025
11:19 PM
The file ACF2DS_Data.csv comprises columns such as TIMESTAMP, DS_NAME, and JOBNAME. I need to perform a partial match of the LKUP_DSN column from the DSN_LKUP.csv file with the DS_NAME column in the ACF2DS_Data.csv file in order to retrieve the relevant events from ACF2DS_Data.csv.
... View more
02-13-2025
09:19 AM
Hi, Thanks for your reply!!..I need to do partial match on LKUP_DSN. Could you please help ? Thanks, Ravikumar
... View more
02-13-2025
06:32 AM
Hi Experts, The file ACF2DS_Data.csv contains columns including TIMESTAMP, DS_NAME, and JOBNAME. I need to match the DS_NAME column from this file with the LKUP_DSN column in DSN_LKUP.csv to obtain the corresponding events from ACF2DS_Data.csv. The query provided below is not working as expected. Could you please assist me in resolving the issue with the query? source="*ACF2DS_Data.csv" index="idxmainframe" earliest=0 latest=now [search source="*DSN_LKUP.csv" index="idxmainframe" earliest=0 latest=now | eval LKUP_DSN = "%".LKUP_DSN."%" | where like(DS_NAME,LKUP_DSN) | table DS_NAME] | table TIMESTAMP, DS_NAME, JOBNAME Thanks, Ravikumar
... View more
Labels
- Labels:
-
lookup
10-17-2024
12:50 PM
Thank you so much Victor!!
... View more
10-17-2024
11:46 AM
I have a multi select drop down menu with field names as values.
When i one or mone values from the drop down menu, those fields/columns need to totaled.
I tried the below code as sugged by Meta AI..But it is not producing any result. Please help me
<dashboard>
<label>Sum Selected Fields</label>
<row>
<panel>
<input type="dropdown" token="selected_fields">
<label>Select Fields</label>
<choice value="field1">Field 1</choice>
<choice value="field2">Field 2</choice>
<choice value="field3">Field 3</choice>
</input>
<chart>
<search>
| eval sum_fields="$selected_fields$"
| stats sum(eval(split(sum_fields, ","))) as Total by Jobname
</search>
</chart>
</panel>
</row>
</dashboard>
... View more
Labels
- Labels:
-
Classic dashboard
09-26-2024
07:33 AM
Looks like there was some invisible junk character(s) in the code. I got it working...Thanks for your help.
... View more
09-26-2024
12:32 AM
Hi marnall, I have changed fieldForLabel and fieldForValue to "APPLICATION". Still the dropdown menu is returning only "All". Could you please help ?..Below is the latest code. <form hideChrome="true" version="1.1">
<label>SCODE_VIEW</label>
<fieldset submitButton="false" autoRun="false">>
<input type="time" token="field1" searchWhenChanged="true" >
<label></label>
<default>
<earliest>-30d@d</earliest>
<latest>now</latest>
</default>
</input>
<input type="dropdown" token="SelectedApp" searchWhenChanged="true">
<label>Application Name</label>
<Search>
<query>
index="idxmainframe" source="*_SCODE_DATA.CSV"
earliest=$field1.earliest$ latest=$field1.latest$
| table APPLICATION
| dedup APPLICATION
| stats count by APPLICATION
</query>
</Search>
<fieldForLabel>APPLICATION</fieldForLabel>
<fieldForValue>APPLICATION</fieldForValue>
<choice value="*">All</choice>
<default>All</default>
</input>
</fieldset>
<row>
<panel>
<table>
<search>
<query>| pivot Scode ds dc(USR_ID) AS "Distinct Count of USR_ID"
SPLITROW APPLICATION AS APPLICATION
SPLITROW MENU_DES AS MENU_DES
SPLITROW REPORTING_DEPT AS REPORTING_DEPT
SPLITCOL USER_TYPE BOTTOM 0 dc(USR_ID)
ROWSUMMARY 0
COLSUMMARY 0
NUMCOLS 100
SHOWOTHER 1 | sort 0 APPLICATION MENU_DES REPORTING_DEPT
</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
</row>
</form>
... View more
09-25-2024
11:17 AM
Hi Experts, My data source consists of a CSV file containing columns such as TIMESTAMP, APPLICATION, MENU_DES, REPORTING_DEPT, USER_TYPE, and USR_ID. I have developed a Dashboard that includes a time picker and a pivot table utilizing this data source. Currently, the user wishes to filter the pivot table by APPLICATION. I have implemented a dropdown menu for APPLICATION and established a search query accordingly. However, the dropdown only displays "All," and the search query dont seeem to be returning values to the dropdown list. Additionally, I need to incorporate a filter condition for APPLICATION in the pivot table based on the selection made from the dropdown menu. Could you please assist me with this? Below is my dashboard code. <form hideChrome="true" version="1.1">
<label>Screen log view</label>
<fieldset submitButton="false" autoRun="false">>
<input type="time" token="field1">
<label></label>
<default>
<earliest>-30d@d</earliest>
<latest>now</latest>
</default>
</input>
<input type="dropdown" token="SelectedApp" searchWhenChanged="true">
<label>Application Name</label>
<search>
<query>
index="idxmainframe" source="*_screen_log.CSV"
| table APPLICATION
| dedup APPLICATION
| sort APPLICATION
</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
</search>
<fieldForLabel>apps</fieldForLabel>
<fieldForValue>apps</fieldForValue>
<choice value="*">All</choice>
<default>All</default>
</input>
</fieldset>
<row>
<panel>
<table>
<search>
<query>| pivot screen ds dc(USR_ID) AS "Distinct Count of USR_ID"
SPLITROW APPLICATION AS APPLICATION
SPLITROW MENU_DES AS MENU_DES
SPLITROW REPORTING_DEPT AS REPORTING_DEPT
SPLITCOL USER_TYPE BOTTOM 0 dc(USR_ID)
ROWSUMMARY 0
COLSUMMARY 0
NUMCOLS 100
SHOWOTHER 1 | sort 0 APPLICATION MENU_DES REPORTING_DEPT
</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
</row>
</form>
... View more
Labels
- Labels:
-
Classic dashboard
02-21-2023
09:12 AM
Hi, Below are the sample events Event 1 : TRANEND TRANS ABENDS TRN1 ABN1 blah blah Event 2 : TRANEND CICS_TRAN_Abends CICT1 TRN3 ABN3 blah blah Event 3 : TRANSUMM CICS_TSUM_Rate CICT1 = * blah blah Event 4 : TRANDYN TRANS ABENDS TRN2 ABN2 blah blah Event 5 : SYSTEM CICS_RDSA_MaxFree CICt2 * * blah blah Event 6 : TRANDYN CICS_TRAN_Abends CICT1 TRN4 ABN4 blah blah Events containing below text should be in output. So, Events 2,3,5 need to be excluded from the result "TRANEND TRANS ABENDS" "TRANEND CICS_TRAN_Abends" "TRANDYN TRANS ABENDS" "TRANDYN CICS_TRAN_Abends" I want below output Traction Abend code TRN1 ABN1 TRN3 ABN3 TRN2 ABN2 TRN4 ABN4 Thanks, Ravikumar
... View more
- Tags:
- regex
02-21-2023
09:11 AM
Hi, Below are the sample events Event 1 : TRANEND TRANS ABENDS TRN1 ABN1 blah blah Event 2 : TRANEND CICS_TRAN_Abends CICT1 TRN3 ABN3 blah blah Event 3 : TRANSUMM CICS_TSUM_Rate CICT1 = * blah blah Event 4 : TRANDYN TRANS ABENDS TRN2 ABN2 blah blah Event 5 : SYSTEM CICS_RDSA_MaxFree CICt2 * * blah blah Event 6 : TRANDYN CICS_TRAN_Abends CICT1 TRN4 ABN4 blah blah Events containing below text should be in output. So, Events 2,3,5 need to be excluded from the result "TRANEND TRANS ABENDS" "TRANEND CICS_TRAN_Abends" "TRANDYN TRANS ABENDS" "TRANDYN CICS_TRAN_Abends" I want below output Traction Abend code TRN1 ABN1 TRN3 ABN3 TRN2 ABN2 TRN4 ABN4 Thanks, Ravikumar
... View more
02-21-2023
04:31 AM
Hi Experts, I have below events Event 1 : TRANEND TRANS ABENDS TRN1 ABN1 blah blah Event 2 : TRANEND CICS_TRAN_Abends CICT1 TRN3 ABN3 blah blah Event 3 : TRANSUMM CICS_TSUM_Rate CICT1 = * blah blah Event 4 : TRANDYN TRANS ABENDS TRN2 ABN2 blah blah Event 5 : SYSTEM CICS_RDSA_MaxFree CICt2 * * blah blah Event 6 : TRANDYN CICS_TRAN_Abends CICT1 TRN4 ABN4 blah blah I want below output Traction Abend code TRN1 ABN1 TRN3 ABN3 TRN2 ABN2 TRN4 ABN4 Events 2,3,5 needs to be excluded from the result Could you please help me ? Thanks, Ravikumar
... View more
Labels
- Labels:
-
regex
08-01-2022
03:37 AM
Experts,
I have below XML Dashboard code. The first panel displays calender heat map using d3 js library as shown below.
My requirement is, when a day on the calender is clicked, that date value needs to be passed as token to the second panel. I could not get this working. Could you please help me ?
<form script="autodiscover.js" hideChrome="true" > <label>Monthly Utilization</label> <row> <panel> <title>Rolling Average</title> <html> <div id="search1" class="splunk-manager" align="center" data-require="splunkjs/mvc/searchmanager" data-options='{ "search": { "type": "token_safe", "value": "source=...........| timechart span=1d values(AverageVAL) as \"Average VAL\""}, "cancelOnUnload": true, "preview": true }'> </div> <div id="heat_map" class="splunk-view" align="center" data-require="app/MFDashboard/calendarheatmap/calendarheatmap2" data-options='{ "id" : "fcal", "managerid" : "search1", "domain" : "month", "subDomain" : "day" }'> </div> </html>
<drilldown> <set token="Selectedday">$click.value$</set> </drilldown> </panel> </row>
<row> <panel depends="$Selectedday$"> <html> <p> Testing... </p> </html> </panel> </row> </form>
... View more
Labels
- Labels:
-
drilldown
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-17-2025
01:10 AM
|
