Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About CodingMaestro
CodingMaestro
Path Finder
Member since:
02-16-2023
05-19-2023
Community Statistics
| Posts | 29 |
| Solutions | 1 |
| Karma Given | 8 |
| Karma Received | 0 |
| Member Since | 02-16-2023 |
Activity Feed
- Posted Can I make a Splunk Table Export CSV button? on Splunk Search. 05-15-2023 08:26 AM
- Posted Re: Splunk Dashboard Text FIlter on Splunk Search. 05-11-2023 06:35 AM
- Posted Re: Splunk Dashboard Text FIlter on Splunk Search. 05-11-2023 06:08 AM
- Posted Re: Splunk Dashboard Text FIlter on Splunk Search. 05-11-2023 05:39 AM
- Posted How to achieve Splunk Dashboard text filter? on Splunk Search. 05-11-2023 04:07 AM
- Posted Re: Splunk Tendline Line Chart on Splunk Search. 05-01-2023 07:01 AM
- Karma Re: Splunk Tendline Line Chart for rut. 05-01-2023 07:01 AM
- Posted Why is there no link between the two data points in Splunk trendline line chart? on Splunk Search. 05-01-2023 01:41 AM
- Posted How to increase Splunk Trendline Marker Data Points? on Dashboards & Visualizations. 03-21-2023 05:59 AM
- Posted Re: Splunk Line Chart Visual on Dashboards & Visualizations. 03-21-2023 04:58 AM
- Posted How to have a Splunk Line Chart Visual to have a bullet point at each data point entry? on Dashboards & Visualizations. 03-21-2023 04:19 AM
- Karma Re: Hide Visual on Splunk Dashboard for ITWhisperer. 03-09-2023 02:13 AM
- Karma Re: Hide Visual on Splunk Dashboard for ITWhisperer. 03-09-2023 02:13 AM
- Posted Re: Hide Visual on Splunk Dashboard on Dashboards & Visualizations. 03-09-2023 02:05 AM
- Posted Re: Hide Visual on Splunk Dashboard on Dashboards & Visualizations. 03-09-2023 01:28 AM
- Posted Hide Visual on Splunk Dashboard on Dashboards & Visualizations. 03-09-2023 01:17 AM
- Karma Re: Splunk Time chart Line Chart for ITWhisperer. 03-08-2023 04:23 AM
- Posted Re: Splunk Time chart Line Chart on Dashboards & Visualizations. 03-08-2023 03:47 AM
- Posted Re: Splunk Time chart Line Chart on Dashboards & Visualizations. 03-08-2023 02:30 AM
- Posted Re: Splunk Time chart Line Chart on Dashboards & Visualizations. 03-08-2023 01:53 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
05-15-2023
08:26 AM
So I have a Splunk dashboard and i have multiple filters, and i am using a base search. I want to have a button that allows me to export the base search table as a csv file when i click the button, and it should export the table with the filters i have applied in the filter section, how can i achieve this. Any help would be greatly appreciated. I know that you can press the export button at the bottom of the file to export the table but my table is hidden, so i just want a button that export the report.
Thanks.
... View more
Labels
- Labels:
-
table
05-11-2023
06:08 AM
Could you please explain further how to set up a change handler, and how to do it. Thanks.
... View more
05-11-2023
04:07 AM
I have a splunk dashboard that looks like below,
And i have added the text filter. But when i try to search of the text filter it works. But it only works when i search by one App. But i want it to search so that if i search, Max, Pan, Ian It will give me the details for the 3 rows. I have 4000 unique apps so i want it so that if i search Max, Pan, Ian it will give me 3 row details. If someone can help me on this, it would be greatly appreciated.
... View more
Labels
05-01-2023
01:41 AM
So i have a trendline like below:
I dont know why is there no link between the two data points between april and may and may and june. Here is the query i have: | inputlookup category | eval _time=strptime(_time, "%m/%d/%Y") | search envcor="$env$" | eval group=envcor."_" | timechart sum(Total_Number_Unique_Names) sum(Total_Number_Shops) by group
Please help. Thanks.
... View more
Labels
- Labels:
-
timechart
03-21-2023
05:59 AM
So currently I have a line chart below with a marker for each data point and here is the code below for that. <option name="charting.chart.showMarkers">true</option> <option name="charting.chart.markerSize">3</option>
but when I try increase the marker size it does not work. If anyone has a solution, it would be greatly appreciated. Thanks.
... View more
- Tags:
- marker data points
03-21-2023
04:58 AM
<option name="charting.chart.showMarkers">true</option> <option name="charting.chart.markerSize">3</option>
... View more
03-21-2023
04:19 AM
Hi Guys,
So currently i have a line chart on a dashboard which looks like below:
But i need the line chart to have a bullet point at each data point entry something like below. If someone could help me out on how i can achieve this. Would be great. Thanks
... View more
03-09-2023
02:05 AM
Perfect, Thank you for your help. Worked like a charm!! 🙂
... View more
03-09-2023
01:28 AM
Hello @ITWhisperer , I am not really sure where i should set and unset my token, if you could help would be great: <input type="dropdown" token="bc"> <label>Book Category</label> <choice value="*">(All)</choice> <default>*</default> <initialValue>*</initialValue> <fieldForLabel>Book_Categrories</fieldForLabel> <fieldForValue>Book_Categrories</fieldForValue> <search> <query>| inputlookup Book_Categrories | stats count by Book_Categrories</query> <earliest>-24h@h</earliest> <latest>now</latest> </search> </input>
... View more
03-09-2023
01:17 AM
So currently I have a dashboard that has a single select dropdown, and a trendline visual on the dashboard. I want a way where that trendline panel/visual is hidden if the option is "*" when it is any other option the panel should be shown. Below is my SPL for the trendline: <panel> <title>Total Number of Books Read</title> <chart> <search> <query>| inputlookup BooksRead.csv | search Books_Category="$bc$" | table _time Total_Books Total_Books_Read</query> <earliest>-60m@m</earliest> <latest>now</latest> </search> <option name="charting.chart">line</option> <option name="charting.drilldown">none</option> <option name="refresh.display">progressbar</option> </chart> </panel> Any help would be greatly appreciated.
... View more
Labels
- Labels:
-
chart
-
dashboard
-
panel
-
simple XML
-
token
03-08-2023
03:47 AM
I cannot really do that as i need the stats sum(books) because for example the books field might have 8, its not always one henceforth that is why i am using stats sum
... View more
03-08-2023
02:30 AM
@ITWhisperer index=..... | stats latest(bookName) by id bookNumber _time | stats dc(bookNumber ) as Books by id _time | table id Books _time | timechart span=24h sum(Books) as Total_Books_Read | search Total_Books_Read!="null" the search is running for the last 24 hours.. So i am getting a visual(trendline) that has 524,900 for sum(books)for the last 24 hours but i need a visual that shows the sum(books) every 4 weeks, for the last year. but when i use span=4w for example and have the search run for last year it shows the sum(books) only for that particular day.
... View more
03-08-2023
01:53 AM
@ITWhisperer Hello, i tried this but the issue with this is that it is not counting the sum(books) as the total it is only counting the sum(books) total for that particular day.,
... View more
03-08-2023
01:51 AM
I tried this did not work 😞
... View more
03-08-2023
01:50 AM
@bowesmana My current query is as below: | timechart span=24h sum(Books) as Total_Books | search Total_Books!="null"
... View more
03-07-2023
02:54 PM
Hello,
So currently I have a trendline like below...
But I need to have the visual in a way where it shows the stats sum(books) for another date which shows the trend of what it was 4 weeks ago for the stats sum (books) and what it is currently, i tried using span but what that does is it shows me how many books for that particular day and not the stats sum(books) in total. I need something like below.. any help would be greatly appreciated.
... View more
02-24-2023
01:39 AM
Is there a way in splunk that i can have a indicator or symbol that shows the different entry points something like above just a circle of when each waypoint is logged.
... View more
Labels
- Labels:
-
timechart
02-23-2023
10:54 AM
i tried adding your timechart command after the last line but it did not work
... View more
02-23-2023
10:53 AM
index..... | stats latest(...) latest(....) latest(....) by ..... | rename latest(*) as * | eval eaten_90d = case(isnull(daysSince), null(), daysSince < 90, 1, 1=1, 0) |eval eaten_30d = case(isnull(daysSince), null(), daysSince < 30, 1, 1=1, 0) |eval eaten_60d = case(isnull(daysSince), null(), daysSince < 60, 1, 1=1, 0) | stats dc(....) as Donuts sum(....) as Disabled sum(eaten_90d) as 90d_eaten sum(eaten_30d) as 30d_eaten sum(eaten_60d) as 60d_eaten by ... Donuts | lookup ..... id as ..... OUTPUT...... | lookup .... OUTPUT ...... | search ..... | sort .... | search 90d_eaten=0 AND 60d_eaten=0 AND 30d_eaten=0 | stats sum(Donuts)
... View more
02-23-2023
01:06 AM
So I currently have a stats sum donuts for the last 90 days and i am getting the following results like below
sum(donuts)
54000
But i need a line chart to show the total number of donuts (sum (donuts) field) for the last 90 days but just on a 4 weeks interval. So i should have something like below
I have a field for the lastEaten date but that shows how many were eaten on that specific date.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-19-2023
08:33 AM
|
