Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About jonvijay1993
jonvijay1993
Explorer
Member since:
04-13-2023
06-20-2023
Community Statistics
| Posts | 14 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 0 |
| Member Since | 04-13-2023 |
Activity Feed
- Posted Re: Refer part of query as a table on Splunk Search. 06-20-2023 08:11 AM
- Posted How can I refer part of query as a table? on Splunk Search. 06-20-2023 07:55 AM
- Posted Re: Dropdown retains entries from old query result on Splunk Search. 05-24-2023 05:24 AM
- Posted Re: Dropdown retains entries from old query result on Splunk Search. 05-24-2023 04:29 AM
- Posted Why does Dropdown retain entries from old query result? on Splunk Search. 05-24-2023 01:56 AM
- Posted Re: Execute/ignore block of code based on token values? on Splunk Search. 05-24-2023 01:46 AM
- Posted Re: Execute/ignore block of code based on token values? on Splunk Search. 05-17-2023 07:48 AM
- Karma Re: Execute/ignore block of code based on token values? for ITWhisperer. 05-17-2023 07:47 AM
- Posted Re: Execute/ignore block of code based on token values? on Splunk Search. 05-17-2023 07:45 AM
- Posted Re: Execute/ignore block of code based on token values? on Splunk Search. 05-17-2023 07:36 AM
- Karma Re: Execute/ignore block of code based on token values? for ITWhisperer. 05-17-2023 07:25 AM
- Posted Re: Execute/ignore block of code based on token values? on Splunk Search. 05-17-2023 07:24 AM
- Posted How to execute/ignore block of code based on token values? on Splunk Search. 05-17-2023 06:31 AM
- Posted Re: How to filter multiselect entries based on its own selection? on Splunk Search. 04-17-2023 01:48 AM
- Posted Re: How to filter multiselect entries based on its own selection? on Splunk Search. 04-14-2023 04:59 AM
- Posted How to filter multiselect entries based on its own selection? on Splunk Search. 04-13-2023 04:07 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
06-20-2023
08:11 AM
My use case is I want to change this select * from (an entire query replacing a table name) to select * from a_table normally I would add the query in the table name as an emergency solution but the query has dbxquery and join etc that makes splunk go crazy. I shall look into named searches, thank you! Will get back to you!
... View more
06-20-2023
07:55 AM
I have a dbx query plus SPL commands that makes me a certain table, which I want to refer to via a table name, is it possible?
The present table needs some new columns and that's what the above query adds, but the schema for my final table for my bar chart is a little different from the source table and hence I can't build on top of the above query using |, or I don't know how. Hence I was wondering if I can just use this via a table name.
... View more
05-24-2023
05:24 AM
Do you know how I can set the dropdown to the first result in the query, like if the query returns a list of strings, how do I get the first element and set it to the form.token? <unset token="form.project_name"></unset>
<set token="form.project_name">$form.result blah blah$</set> btw the unset method worked, my old results are gone
... View more
05-24-2023
04:29 AM
Ok I shall try this, thank you! I thought splunk was able to handle this by default, but solutions are also good!
... View more
05-24-2023
01:56 AM
I have a query for for my dropdown with tokens inserted here and there and whenever the values on those tokens change my query runs to populate the dropdown.
But the problem is that sometimes the new values and old values are displayed together and I don't want that.
And worse is, the old value remains selected sometimes. I have to manually select my new entry. I have SelectFirstValue to true.
... View more
Labels
- Labels:
-
eval
-
field extraction
-
fields
-
subsearch
05-24-2023
01:46 AM
Hi, I found another solution to my issue that doesn't require me to have the 2nd block of code in the first place. But if I did go ahead with that block I'd have chosen this method. Thanks!
... View more
05-17-2023
07:48 AM
I'm gonna try these and get back to you sir, May the Splunk God be with you!
... View more
05-17-2023
07:45 AM
Is ``` some sort of commenting?
... View more
05-17-2023
07:36 AM
can you give me an example in code, this seems interesting this method of skinning a cat seems interesting
... View more
05-17-2023
07:24 AM
I am doing that right now, and it's messy, very messy because my block of code is large and has many other tokens in it. It's just a big mess.
... View more
05-17-2023
06:31 AM
I have a union [] command that I want to execute only if a check box is checked, how can I manage this? SPL2 branch doesn't work on my dashboard for some reason and the eval if else only works for assigning a value to a var, what options do I have now?
| search | if value = 'so and so' execute union [sql]
... View more
04-14-2023
04:59 AM
Hi, I think your way of filtering based on the query makes sense. The reason why I asked the question in the first place was, I was already doing some <set> operations within <change> and splunk wouldn't allow me to have condition and eval within change tag, and I was clueless. Thanks for the answer, I will try this and post results.
... View more
04-13-2023
04:07 AM
I have a multiselect for software version (version is just yyyy.mm.dd or an alphanumeric string). If the user selects a certain version, multiselect has to hide all its entries below selected version, so that user would only see multiselect versions higher than what he selected. Is this possible? <input type="multiselect" token="VERSION" searchWhenChanged="true">
<label>Version</label>
<fieldForLabel>VERSION</fieldForLabel>
<fieldForValue>VERSION</fieldForValue>
<choice value="all">ALL</choice>
<!--<default>all</default>-->
<!--<initialValue>all</initialValue>-->
<valuePrefix>'</valuePrefix>
<valueSuffix>'</valueSuffix>
<delimiter> AND </delimiter>
<change>
<eval token="form.VERSION">if(mvcount('form.VERSION')=3, mvindex('form.VERSION',0, 1),'form.VERSION')</eval>
</change>
<search>
<query>| dbxquery query="select distinct VERSION from table WHERE blah blah blah" connection="blah" maxrows=0</query>
</search>
</input> Basically we're trying to get a setup for selecting a range of versions, like 2022.01.01 to 2023.01.02 using two multiselect inputs.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-20-2023
11:31 AM
|
