Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About abi2023
abi2023
Path Finder
Member since:
04-20-2023
Tuesday
Community Statistics
| Posts | 33 |
| Solutions | 2 |
| Karma Given | 10 |
| Karma Received | 2 |
| Member Since | 04-20-2023 |
Activity Feed
- Posted I am getting "Could not load lookup=LOOKUP-pulse_connectsecure_action_lookup" on Splunk Search. a week ago
- Karma Re: how do I make my macro available all app for isoutamo. a week ago
- Posted how do I make my macro available all app on Splunk Search. a week ago
- Tagged how do I make my macro available all app on Splunk Search. a week ago
- Posted Is it possible to have Single value with Trendline for Percentage When I am using eval to calculate Percentage? on Dashboards & Visualizations. 4 weeks ago
- Posted Re: How to color trend in single value? on Splunk Search. 4 weeks ago
- Karma Re: How to color trend in single value? for niketn. 4 weeks ago
- Karma Re: getting ip range lookup for bowesmana. a month ago
- Posted Re: getting ip range lookup on Splunk Search. a month ago
- Karma Re: how to change color for column chart for bowesmana. a month ago
- Karma Re: how to change color for column chart for bowesmana. a month ago
- Posted How to get ip range lookup? on Splunk Search. 08-23-2023 01:40 PM
- Posted how to change color for column chart on Splunk Search. 08-23-2023 12:38 PM
- Posted LOOKUP table: How to add id field name.csv file? on Splunk Search. 08-15-2023 08:16 AM
- Posted How to compare two matching field from two look up table? on Splunk Search. 08-14-2023 10:18 AM
- Tagged How to compare two matching field from two look up table? on Splunk Search. 08-14-2023 10:18 AM
- Posted Re: displaying different color for column chart base on the percentage on Dashboards & Visualizations. 07-19-2023 08:17 AM
- Posted displaying different color for column chart base on the percentage on Dashboards & Visualizations. 07-19-2023 08:03 AM
- Karma Re: finding percentage different between last week and week before? for PickleRick. 07-17-2023 11:44 AM
- Posted finding percentage different between last week and week before? on Splunk Search. 07-17-2023 07:46 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
a week ago
in my search I have no lookup command. Anyone knows why I am getting this error.
... View more
Labels
- Labels:
-
lookup
a week ago
I try change permission to all app option but I don't see the option. I s anyother way make my macro available for all apps.
... View more
- Tags:
- macro
Labels
- Labels:
-
search job inspector
4 weeks ago
index=main sourcetype=_json status="True" | stats count(status) as True by name | append [| search index=main sourcetype=json status="False" | stats count(status) as False by name] | append [| search index=main sourcetype=json status="*" | stats count(status) as Total by name] | stats sum(True) as True sum(False) as False sum(Total) as Total max(Performance) as Performance by name | eval Percentage=round(((True/Total)*100),0) | fields Percentage Is it possible to show trendline and if Percentage up or down compart to last month.
... View more
Labels
- Labels:
-
chart
-
dashboard
-
simple XML
-
timechart
-
trellis layout
4 weeks ago
How do I change color single value trend by default it either red for negative, and green for positive. I want my single value color to be as I define in my range value even if trend is negative or positive. below is my source code. <earliest>-30d@d</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="colorBy">trend</option>
<option name="colorMode">none</option>
<option name="drilldown">none</option>
<option name="numberPrecision">0</option>
<option name="rangeColors">["0xff1414","0xdc4e41","0x53a051","0xf1813f","0xdc4e41"]</option>
<option name="rangeValues">[20,30,50,100]</option>
<option name="showSparkline">1</option>
<option name="showTrendIndicator">1</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
<option name="trendColorInterpretation">standard</option>
<option name="trendDisplayMode">absolute</option>
<option name="trendInterval">-30d</option>
<option name="unitPosition">after</option>
<option name="useColors">1</option>
<option name="useThousandSeparators">1</option>
</single>
</panel> Thank you in advance.
... View more
a month ago
|inputlookup demo.csv | eval ip = "xx.xxx.xxx.xxx" ```Enter IP address you the Match``` | eval result=if(cidrmatch(ip_range, ip), "true", "false") | search result="true" i am using above spl to return result for the ip address associated with the IP range in lookup table. this work fine. I want do same thing when index=main has field ip which contains IP address. I need to invoke cidrmatch out result assiate with same iprange. how do modifiy my SPL. SINCE lookup table and my index info has nothing in common other than Ip field i have and lookup table has ip tange info. Is there way i can use lookup cammand do this? Thanks
... View more
08-23-2023
01:40 PM
I uploaded csv lookup table has 2 field location and iprange. iS THERE WAY TO GET WHAT ARE POSSIBLE IP IN EACH RANGE. SO I CAN ENTER IP address it will return the location for that range?
... View more
08-23-2023
12:38 PM
| timechart span=1mon count by status | addtotals row=t col=f labelfield=Total True False "Not available" fieldname="Total_Count" | eval percent=round(((True/Total_Count)*100),0) | table Date Percentage I chose visualization column chart but I get only default color. How can I customize the color base on the range. 0- 50% RED 50-70 AS YELLOW 70-100 AS Green. <option name="charting.fieldColors">{"<50":"#e600ac","Up to 60":"#ff0000","Up to 80":"#ffa31a","Up to 100":"#33cc33"}</option> I try modifying but it did not work. Can anion help Thanks
... View more
08-15-2023
08:16 AM
I have two lookup table call name.csv and id.csv. both has matching field call fullname. id.csv file has id field but name.csv doesnot. but I want to add id field to name.csv. Is anyone know how to add id field name.csv file. I try | inputlookup name.csv | lookup id.csv fullname output id but it didnot work.
... View more
- Tags:
- lookup
08-14-2023
10:18 AM
I have two lookup table call lookup1.csv and lookup2.csv both has matching field call fullname. I want match my lookup1.csv to lookup2.csv and output the value not in the lookup1.csv byt in the lookup2.csv?
| inputlookup lookup1.csv | search NOT [| inputlookup lookup.csv | field fullname] but this SPL displaying result found in the both look table. Is any way to do this in splunk?
ADDVANCE Thanks
... View more
07-19-2023
08:17 AM
I do not have the color range option in format visualization. that why I am try in to modify in XML
... View more
07-19-2023
08:03 AM
I calculated i month percentage for status online. and I table to date percentage. displaying it into visualization column chart. I want my chart to reflect different color base on the percentage range e,g 0-40 red 40-60 orange 60-80 yellow 80-100 green. I modify in source <option name="charting.fieldColors">Percentage:0-40:#f13f56,40-60:#f1813f,60-80:#f1da3f,80-100:#72ae0d</option> but no success can someone assist me is the doable in Splunk visualition. Thanks in advance
... View more
Labels
- Labels:
-
chart
-
simple XML
-
timechart
07-17-2023
07:46 AM
I have spl in splunk index=demo search compliance= standard1 | timechart span=1week count by status | add totals row=t enable not_enable fieldname= "total" | eval percentage = round((enable / total ) * 100 , 0) . " %" | reverse | table _time percentage above spl show percentage week over week I want to show anther column show percentage different between last week and week before how do I show this next to last week row? If week before is 56% percentage and last week percentage 70% it need show next last week row 14% how can I do this? I try join append it did not work for me. Thanks in advance
... View more
- Tags:
- timechart
06-27-2023
09:39 AM
I have ServiceNow developer instance. Can I integrate with my Splunk dev environment. The Splunk Add on I am try in use is https://splunkbase.splunk.com/app/1928
... View more
Labels
- Labels:
-
workload management
06-27-2023
07:35 AM
Can I use same token concept in Splunk ES adaptive response action send email action if my notable event return the field?
... View more
06-27-2023
07:33 AM
Can I use same token concept in ES adaptive respond send email action. if my notable event search return the field?
... View more
06-26-2023
08:44 AM
I want to send customize email from Splunk ES adaptive response action. How do i add custom templet for email Message. second can I make To and Subject dynamic for each notable. pick up from event field? Thanks
... View more
Labels
06-20-2023
09:31 AM
I have correlation search creating notable event. the name correlation search testemail. I want to notifying all the mail address in user_email field email address. and I want go from my specified mailbox I create for such alert. how do I configure that. I am not looking change in Mail Server Settings and Send emails as.
... View more
Labels
- Labels:
-
alert action
-
email
06-07-2023
10:22 AM
I am try add to my notable event in correlation search next step analyst need to take. I am see some issue.
when I list next step action for analyst to take. I am getting my my next step action getting truncated in notable event in incident review page.
step 1 and step 2 are in same line even after I separate them by line.
... View more
- Tags:
- es
Labels
- Labels:
-
other
05-04-2023
05:56 AM
When I try to open ES incident review I am getting saying error "KV Store is initializing. Please try again later."
why I am getting this and How do I resolve the issue?
... View more
Labels
- Labels:
-
using Enterprise Security
05-02-2023
03:54 PM
| chart sum(count) as "Total Calls" by path, auditJsonMessage.Code | rename path as "EndPoint"
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Tuesday
|
Karma given to
