So I had a javascript file running on my dashboard and it was working fine. Recently I have uploaded an updated version of that javascript file. It shows my updated version on some computers or some users maybe? But for some people they are still seeing the old javascript file being served. Any idea on how to make sure that all users get the new javascript file served to them when they load the dashboard? I have tried clearing cache and restarting computer multiple times. I have also tried a /debug/refresh and _bump which obviously didnt solve my issue. ... View more

I have looked through the forums and can't find exactly what I am looking for. Here is my search and what I think should work, but I don't think I completely understand multisearch.     | multisearch [ search index=patch sourcetype=device host="bradley-lab" device_group=PRE* | where match(host,"bradley-lab")] [ search index=patch sourcetype=device host="bradley-lab" device_group=BFV* | where NOT match(host,"bradley-lab")] | dedup extracted_host | eval my_time=_time | convert timeformat="%Y-%m-%d %H:%M:%S" ctime(my_time) | rename extracted_host as device_Name, my_time as "Date Posted" | table "Date Posted" device_group device_Name current_system_version latest_system_version status       host=bradley-lab will come from a token drilldown on a dashboard if the host is bradley-lab I want it to show all devices with the device_group=PRE and if the host is anything else, I want it to show all devices with device_group=BFV ... View more

I want to search from a lookup table, get a field, and compare it to a search and pull the fields from that search based off of a common field. I would rather not use |set diff and its currently only showing the data from the inputlookup.         | set diff [| inputlookup all_mid-tiers WHERE host="ACN*" | fields username Unit ] [ search index=iis [| inputlookup all_mid-tiers WHERE host="ACN*" | fields username ] | dedup username | dedup SiteIDOverride | eval username=lower(username) | fields username SiteIDOverride unitType installVer os jkversion ] | join type=left [ search index="iis" sourcetype="iis" earliest=-7d@d [| inputlookup all_mid-tiers Where host="*ACN*" | fields username] | dedup username | eval username=lower(username) | eval timedelta=now()-_time | eval time_delta_days=floor(timedelta/86400) | stats first(time_delta_days) as Status by username | eval Status=if(Status<"0","0",Status) | eval StatA=Status | rangemap field=StatA OK=0-0 Monitor=1-1 Contact=2-9999 | rename range as Status ] | lookup all_mid-tiers host AS SiteIDOverride OUTPUT Unit Weaponsystem Last_access | eval Last_access=strftime(Last_access, "%Y-%m-%d") | rename Weaponsystem as unitType | dedup Unit | table Status Unit SiteIDOverride unitType installVer os jkversion Last_access     I can't seem to get it to pull SiteIDOverride unitType...^^ from the search.  ... View more