About ViniciusMariano

ViniciusMariano · ‎06-07-2024

Hey guys I have a question about CSS in splunk, I want to move these displays like this: And I can't use dashboard studio because I need some special things that dahsboard studio doesn't have yet, like depends functionality, I'm trying with css grid but I couldn't find a way to do this yet

ViniciusMariano · ‎05-21-2024

My current search is something like this: (index=1 sourcetype="x") OR (index=2 sourcetype="y" "some extra filters") "*(a name like RU3NDS just for testing but there are many like this one)*" | eval joined_name = upper(coalesce(NAME, name)) NAME(upper) is from the index 1, and name(lower) from index 2 and this gave me table like this: joined_name others values from index 1 others values from index 2 H-RU3NDS_DAT_CDSD231_01 ... H-RU3NDS_DAT_CDSD231_02 ... RU3NDS ... The first two values are from index number 2 and the third is from index number 1 And I need to join this first column as a unique value like RU3NDS, I've tried rex command too, but didn't work

ViniciusMariano · ‎05-20-2024

Hey guys, I'm having trouble joining two datasets with similar values I'm trying to join two datasets, both have a common "name" field, but the one on the left has the correct value and the one on the right has this pattern: left dataset name field + some characters e.g.: left dataset name right dataset name RU3NDS RU3NDS_sdsavdg_SoKdsVI3 Is there any way to use a wildcard when joining?

ViniciusMariano · ‎10-02-2023

I tried this option, but when I try to put "*" as a value it doesn't work, do you know why?

ViniciusMariano · ‎09-28-2023

The "All" option would search beyond the available options, I have my groups(options) but I think would be helpful if the dashboard could search more options.

ViniciusMariano · ‎09-28-2023

Hello folks, I have a question about multiple checkbox, I'm using them to fill a "IN" command in my search and I have an "All option" and I was thinking if is it possible when I check this "All option" the others will be unchecked like in this example below: 1: 2: and if possible only using XML (without JavaScript).

ViniciusMariano · ‎06-01-2023

Hey Guys, I have a problem: I have two time fields because one of the type source is json file and there is another script running, but now I have to mix both, so I created this eval: | eval _time=if(match(source, "[(\S).json]\w+"), strptime(time, "%Y/%m/%d %H:%M:%S.%f"), _time) but when I search I just receive the .json file search, so Is there any other way to "join"?, or at least the "if" statement ignore and just modify the json source?

ViniciusMariano · ‎04-25-2023

But, is there any way to do this condition?: if there is no event from this device this month, take an event from last month and get all data from this month as a copy, using eval with tstats

ViniciusMariano · ‎04-24-2023

Hello everyone, I'm introducing in splunk, and I have a question about Timecharts, it is possible to create a timechart per every single device? For example, I created a timechart with this: | datamodel release_management_info flat | search Location=* AND Model=* | timechart span=month distinct_count(Name) by Category But this doesn't cover all devices as some of them haven't created events in a few months.

Posts	9
Solutions	0
Karma Given	4
Karma Received	0
Member Since	‎04-24-2023

Online Status	Offline
Date Last Visited	‎06-11-2024 01:50 PM

Ho can I use CSS grid/flex to move these displays?

Join similar fields

When one checkbox is selected, the others are unch...

Any other way to compare between the same variable...

It is possible to create a timechart per every sin...

Ho can I use CSS grid/flex to move these displays?

Re: Join similar fields

Join similar fields

Re: When one checkbox is selected, the others are ...

Re: When one checkbox is selected, the others are ...

When one checkbox is selected, the others are unch...

Any other way to compare between the same variable...

Re: Timechart per device

It is possible to create a timechart per every sin...