About Sabahat

Sabahat · ‎10-16-2024

Hi, I am facing the same issue, the Timed Out Reached error, but I am unable to find the IP Allow List Management-> "Search Head API Access" inside my server setting on the Splunk Cloud side.

Sabahat · ‎10-16-2024

Actually i have to connect Splunk with power bi. And I have to save the result of search query as a report so I can connect my report with power bi.. the report is created only for the data that is displayed from search query. if the search query do not display data for other table, it is not contained in the report and hence in the power bi.

Sabahat · ‎10-16-2024

I get all the sources list and total events within each source

Sabahat · ‎10-16-2024

The data I have uploaded contains 5 CSV files (mentioned) Apartments.csv, Buildings.csv, Maintenance.csv, Energy Consumption.csv, and Security Events.csv. I used the Splunk web interface and the Add Data feature to upload data. The search query used to search data within the index is index="SC_POC1" If I search for data in the index, then it shows data from the last uploaded table by default. As in the screenshot attached, the search query shows only data on Energy Consumption, however index "SC_POC1" contains data of all the 5 csvs. I can search for the other data like Apartments, Buildings by specifying in the query like index="SC_POC1" source="Apartments.csv", but then it will show only Apartments data. I want to show all the data (events) in the index. For this, I used joins on the tables so that I could search for the entire data of the index. but it also did not work. I want to know if there is a better way to do this. (I am using Splunk Enterprise)

Sabahat · ‎10-14-2024

I have created an index to store my data on Splunk. The data contains 5 csv files uploaded one by one in the index. Now, if I try to show the data inside the index, it shows the latest data (the csv file that was uploaded at the end ) We can show the data of other files by querying, including specific source names, but by default, we can not see the whole data; we can only see the data of the last table. To overcome this challenge we have used joins to join all the tables and show them through the query in one report. I wanted to find out if there is a better way to do this. I have to show this data in Power BI, and for that, I should have a complete report of the data.

Sabahat · ‎10-08-2024

This gets resolved somehow. Now I am trying to connect the remote desktop (my peer's Splunk with my power bi) to do a POC. I almost tried everything but I am unable to connect with other Splunk. I can only connect with my own. @ashvinpandey Sir, can you please guide me?

Sabahat · ‎10-07-2024

I am trying to pull the datasets from Splunk into my Power bi desktop to analyze it. yeah I am fetching it for global search.

Sabahat · ‎10-07-2024

I am trying to get the data from Splunk into PowerBI. For that, I made a connection between Splunk and Power BI through the Splunk ODBC driver.

Sabahat · ‎10-06-2024

I am finally successful in connecting Splunk with Power BI. But while adding a new source and getting data in Power BI, the data models I see are different from those I see in the Splunk datasets tab's interface and I also do not find the table view I created in Splunk.

Posts	9
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎10-06-2024

Online Status	Offline
Date Last Visited	‎10-17-2024 02:46 AM

How to show entire data of the index?

Connecting Splunk with Power bi

Re: Integrating Power BI to Splunk

Re: How to show entire data of the index?

Re: How to show entire data of the index?

Re: How to show entire data of the index?

How to show entire data of the index?

Re: Connecting Splunk with Power bi

Re: Connecting Splunk with Power bi

Re: Connecting Splunk with Power bi

Connecting Splunk with Power bi