About jwalrath1

jwalrath1 · ‎10-05-2023

Hi @yohhpark If your data is following the format AA-1-a, AA-1-b and so on, then instead of making the value for your dropdown option being AA-1*, make it AA-1-*. This will show everything for only the AA-1- leading characters and would not show AA-10... or AA-11... Again, this would only work if the data does follow the format with the dash (-) at separator AA-1-...

jwalrath1 · ‎10-05-2023

Hi @rferg06, Be sure that your dataSources section, you are specifying the queryParameters with your dateRange token "queryParameters": { "earliest": "$dateRange.earliest$" "latest": "$dateRange.latest$" } You can also add a submit button to your "layout" section so that the tokens will run when the submit button is clicked: "layout": { "options": { "submitButton": true, "height": 1750 } } If you already have these in place, you may want to clear your splunk web cache by adding _bump to the end of your url.

jwalrath1 · ‎10-04-2023

Thanks @gcusello !

jwalrath1 · ‎10-04-2023

Thanks @richgalloway I have a second part to this question. Can I use the manager node to do a deployment to replicate configurations (dashboards and reports) saved on site A to site B? Could this be done with the SHC deployer if I were to do a deployment on a weekly bases for example?

jwalrath1 · ‎10-04-2023

If I have a multisite architecture with site A and site B, can they live on different cloud environments and still have index replication? For example, if I have site A components on Azure but site B is on AWS, can I still utilize index clustering across the two sites for replication?

jwalrath1 · ‎09-27-2023

I understand that there are 2 approved architectures for multi site search head clustering. One, where each site has their own independent search head clustering that has search affinity with index clusters, and a second option where there is a search head cluster stretched across the two sites. For the first option where the search head clusters are independent to each site, I have read that search head clusters are not site-aware. Does this mean that things saved through the search head cluster on site 1 would not replicate to site 2? For example, if I were to create a new dashboard at site 1 on the web UI through the search head cluster, that would not replicate to site 2?

Posts	9
Solutions	1
Karma Given	3
Karma Received	1
Member Since	‎09-27-2023

Online Status	Offline
Date Last Visited	‎10-10-2023 12:00 PM

Can multisite architecture be on different cloud e...

Multi-Site Search Head Clustering

Re: searching for specific result

Re: Dashboard studio visualizations not refreshing...

Re: Multisite Cloud Environments

Re: Multi-Site Search Head Clustering

Can multisite architecture be on different cloud e...

Multi-Site Search Head Clustering

Are you a member of the Splunk Community?