Hi,  I need to update an sso_error HTML file in Splunk, but I'm not sure of the best approach. Could anyone provide guidance on how to do this? Thanks in advance for your assistance.  ... View more

Hi Experts, Is it possible to change the "Return to Splunk" link on the home page so that it goes to custom URL instead of default URL? If anyone knows how to do this, I'd appreciate the help! Thanks ... View more

I have header panels on a dashboard. Say this dropdown has a token called tok_panel. Is there a way to make the panels depend on specific values of tok_panel? i.e., if I select "All" in the dropdown, only panel "All" should be visible instead of *. In my case i'm using Static options for all to display. Others options coming based on |stats c by field name. @gcusello  @ITWhisperer  @PickleRick @richgalloway  ... View more

Hi Experts,  I have a question regarding our Splunk Dashboard. I want to show the logic of the calculation used in a single value panel. Specifically, I would like to display this information when a user hovers over the panel or clicks a question mark (?) or information (i) symbol.  Is it possible to add this feature to a particular single value panel? Any guidance or examples would be greatly appreciated. Thank you ... View more

Hi, I'm working with a dashboard where I have three rows of data. Each row is filtered based on specific conditions. I have enabled drilldown for all these rows for eg: row 1: Panel 1: token name: r1_drill, condition: success ,  Panel 2: token name: r1_drill, condition: failed row 2 :  Panel 1: token name: r2_drill, condition: success, type: abc , Panel 2: token name: r2_drill, condition: failed, type: abc  row 3:  Panel 1: token name: r3_drill, condition: success, type: def,  Panel 2: token name: r3_drill, condition: failed, type: def The problem is while passing tokens to the piecharts:      Clicking on r3_drill works as expected.      Clicking on r2_drill sets r3_drill conditions as default, causing incorrect filtering.      I need to unset r3_drill when r2_drill is set and vice versa for all. Any guidance or examples would be greatly appreciated. Thanks   ... View more

Hi,  I'm trying to join two lookups based on the name field. Here's what i have, |inputlookup abc.csv |table name published |lookup def.csv name as name OUTPUT releaseyear When i run this, i get a multiple values in the field. How to get rid of these multiple values and ensure only one value per field? Thanks! ... View more

Hi Experts,  I have a list of dates in the field called my_date like below: 45123 45127 45130 How can I convert this?  Thank you! ... View more