About isac_santana

isac_santana · ‎08-12-2025

IF( "Valores - Solicitados" == "Valores - Recuperados" , Color Verde, Color Red)

isac_santana · ‎08-12-2025

Good afternoon, I need help changing the colors of two columns in my <panel>. I need to change the colors of the "Values - Requested" and "Values - Retrieved" columns. When the values in these two columns are the same, color the cell background green. And when they are different, color it red. Does anyone know how to do this?

isac_santana · ‎10-29-2024

Hey, good afternoon. The configurations on these servers weren't done by me, and I have limited knowledge of Splunk administration. That’s why it's been challenging to identify where the "_time" discrepancy is coming from. The search query is exactly the same, retrieving the same data within the same time range. The user’s timezone is set to "Default System TimeZone." I believe all the SHs are also set to "Default System TimeZone" (although it’s been difficult to confirm this information). SH1 and SH2 are older servers, while SH3, which shows the difference in "_time," is a recently installed and configured server within the cluster (also configured by someone else).

isac_santana · ‎10-29-2024

Good morning, I need help. I have three SearchHead servers. Two of them (SH1 and SH2) are presenting the "_time" field correctly. However, the other server (SH3) is presenting the "_time" field with three hours more than the other two (SH1 and SH2). How do I resolve this? SH2 - Normal SH3 - With three more hours. (With same search range)

isac_santana · ‎07-17-2023

Guys, good morning I'm having trouble inverting this table below. I need to leave the horizontal "key_type" information, and the "sync_status" information on the bottom line. does anyone know how i can do this? Current: | eval last_successful=strftime(strptime(last_successful_sync, "%F %T"), "%d/%m/%Y") | eval sync_status=if(sync_status == "t", ":gmud-approved:"." "."Sucesso", ":x-negative:"." "."Falhou"." -- "."Last Successful: ".'last_successful') | stats c as _c by key_type sync_status How I need it to look: EVP CPF CNPJ EMAIL PHONE 'sync_status' 'sync_status' 'sync_status' 'sync_status' 'sync_status'

isac_santana · ‎05-15-2023

Good afternoon I'm trying to send an alert via slack, but my result is a table, and it only sends the first row of the table. How do I get splunk to send all table rows, for example: Settings:

isac_santana · ‎02-08-2023

Good afternoon I'm having trouble changing the color of the indices (numbers) that appear on top of the bars. I need to change the current color (black) to white. Can someone help me? Panel code: { "type": "viz.column", "title": "", "dataSources": { "primary": "ds_7YQhhskC" }, "options": { "foregroundColor": "#FFFFFF", "fontColor": "#FFFFFF", "fieldColors": { "Sum of amount": "#A870EF" }, "legend.placement": "top", "axisTitleX.text": "Days of the week", "axisTitleY.text": "Amount of transactions", "chart.showDataLabels": "all", "legend.labelStyle.overflowMode": "ellipsisNone", "yAxisVisibility": "show", "xAxisVisibility": "show", "backgroundColor": "transparent" }, "showProgressBar": false, "showLastUpdated": false, "context": {} }

isac_santana · ‎01-18-2023

Good afternoon, I would like to know if in dashboard studio it is also possible to hide the menu and buttons (edit, download), just like in classic mode. I want to hide the top menu, title and buttons, leaving only the time range of the image below. in classic mode, hidden by xml, in the code below:

isac_santana · ‎12-20-2022

Good Morning, I'm having trouble converting a whole number to a decimal. Example: | eval Amount = round(tonumber(balance_amount), 2) Result: 814118225.00 But I need the number to look like: 8141182.25

Posts	10
Solutions	0
Karma Given	4
Karma Received	0
Member Since	‎10-21-2022

Online Status	Offline
Date Last Visited	‎08-14-2025 11:03 AM

Change Column Color - Splunk Dashboard

SearchHead with different times (_time)

Reverse data table to horizontal

How do I send an alert by slack channel?

How to edit colors in column chart in Dashboard St...

How do I hide dashboard menu, title and top button...

How can I convert integer to decimal?

Re: Change Column Color - Splunk Dashboard