About Kaushaas

Kaushaas · ‎06-26-2024

Hi I am trying to get visualization in a way when i select multiple categories i see multiple lines in chart and when single value selected i need to get single line but unable to create chart when passing multiple values in categories Please help | rex field=message "MessageTemplate\\\":\\\"(?<msgType>[^\\\"]+)" | spath | search SAP OR TMD |timechart count by SAP or TMD Expecting result like below but this query gives error | rex field=message "MessageTemplate\\\":\\\"(?<msgType>[^\\\"]+)" | spath | search SAP | timechart count . This is coming fine as I have timechart given by count Thanks in advance Ashima

Kaushaas · ‎06-13-2024

@bowesmana Thanks for the solution | rex field=message "ActionName\\\":\\\"(\w+\.)*(?<ActionName>\w+)" this worked tried similar thing to extract name from below url using below reg ex what did I miss it didnot work i replaced . to /? If you could ecplain to it will be helpful URL --- /api/v1/Publish value expected ---- Publish | rex field=message "reqPath\\\":\\\"(\w+\/)*(?<reqPath>\w+)" Thanks a ton in advance

Kaushaas · ‎06-13-2024

This worked thanks a lot

Kaushaas · ‎06-12-2024

Hi All, I have a raw message which contains Action name like below : CommBank.Api.PricingExtractor.Controllers.EventPublishController.PublishEventsToKafkaTopics (CommBank.Api.PricingExtractor) which I have extracted using below regular expression rex field=message "ActionName\\\":\\\"(?<ActionName>[^\\\"]+)" Is there a way to extract only last part after "." and before "(" i.e "PublishEventsToKafkaTopics" just this I tried few ways but was getting error. Any help will be appreciated Thanks in advance

Kaushaas · ‎05-27-2024

Hi @gcusello I have got the power user access role but i still dont see Edit permissions option . Anything that you can suggest ?

Kaushaas · ‎05-23-2024

hi @gcusello Thanks I will check and get back

Kaushaas · ‎05-22-2024

Hi @gcusello I am really unable to find my role but all I understand is that i dont have all the required permissions .Any suggestion on what kind of role will let me edit permissions for dashboard?

Kaushaas · ‎05-22-2024

@gcusello I am not able to see the roles .Could you please tell me how to find that ?

Kaushaas · ‎05-21-2024

Hi @gcusello I am unable to see, not sure I need any particular permissions or roles for same.

Kaushaas · ‎05-21-2024

I cannot see the option to edit permissions

Kaushaas · ‎05-21-2024

I am not seeing option to make my dashboard public or shared please guide

Posts	11
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎05-13-2024

Online Status	Offline
Date Last Visited	‎06-26-2024 08:50 AM

Visualisation with multiple data

RegEx for splitting data

Shared/Public dashboard

Visualisation with multiple data

Re: RegEx for splitting data

Re: RegEx for splitting data

RegEx for splitting data

Re: Shared/Public dashboard

Re: Shared/Public dashboard

Re: Shared/Public dashboard

Re: Shared/Public dashboard

Re: Shared/Public dashboard

Re: Shared/Public dashboard

Shared/Public dashboard

Are you a member of the Splunk Community?