| stats count by fieldX | where count > 10 Set your alert to run over the past 60 minutes e.g. earliest=-60m then trigger if there are any results. ... View more

Hi everyone, I did grep -rl "<dashboard" /opt/splunk/etc/* | grep "\.xml" | xargs grep "<label></label>", found an .xml file with no content inside <label></label>, changed it to <label>Corvil</label>, restarted Splunk -in fact, the whole system-, tried updating an app -any app- and the 500 Error is still there.   Any suggestion? Thanks! ... View more

I had the same issue (tooltip gets stuck on the first country I mouse over) and found your post while looking into the problem.   Knowing it wasn't something I did (I'm still learning my way around Dashboard Studio) I went on to work on something else.  I just went back to my dashboard an hour later (I had left the dashboard up, I did not reload it just now), and the tooltip is now working as expected (changing for each country I mouse over.)  Looks like it just takes some time to work properly... We are still on Splunk 8.2.6, so maybe it has been fixed in a later version of Splunk... ... View more