About goyals05

goyals05 · ‎03-28-2018

Hi, How can we split Time in two different column.

goyals05 · ‎03-28-2018

Hello, How to display these logs in table format. Raw data Source 1: 2018-03-25 00:30:00 Backup Process Started 2018-03-25 11:44:03 Backup process Finished 2018-03-25 11:50:00 backup_size=5.2T Source 2: 2018-03-21 00:30:00 Backup Process Started 2018-03-21 11:45:22 Backup process Finished 2018-03-21 11:50:00 backup_size=5.5T Output: Start Finish size 2018-03-21 00:30:00 2018-03-21 11:45:22 5.2T 2018-03-25 00:30:00 2018-03-25 11:44:03 5.5T Thankyou

goyals05 · ‎03-16-2018

But they have admin privilege they can change permission back. Let me clear my requirement bit more. we have developed one app and providing this app to some other group. They will install on their server. I don't have authority to change anything on their server. we have spend plenty of time to develop dashboards on that app and don't want they will change or use some other way. so looking for possibilities to add some restriction before giving to them.

goyals05 · ‎03-16-2018

I don't want to let them change dashboards.

goyals05 · ‎01-24-2018

Not sure if 1st one can be used in data model. But 2nd option worked for me. Cheers!!

goyals05 · ‎01-24-2018

Hi, In one of my numeric field sometimes I am getting value as " * ". I want to replace it with either NA or NULL if its " * ". I am looking to add this regex in data model.

goyals05 · ‎01-23-2018

Hi, I am using data-models. In raw data I am getting date as YYYYMMDD, I want to convert it in DD/MM/YYYY. Is there a simple way to convert this as there is no separator ? Otherwise I have to separate them in 3 different fields and use it. ^(?<year>\d\d\d\d)(?<month>\d\d)(?<day>\d\d) Example : 20180112 to 12/01/2018 Thanks

goyals05 · ‎11-24-2017

Nice work arond. cheers 🙂

goyals05 · ‎11-23-2017

Hi, I am setting default time as relative time in time picker. <input type="time" token="time_token" searchWhenChanged="true"> <label>Reports Time Picker</label> <default> <earliest>-3h@h</earliest> <latest>now</latest> </default> </input> Is it possible to set epoch time of -3hr rather than -3h@h?

goyals05 · ‎10-27-2017

Hi, I am getting time stamp as "2017-10-26T16:59:29.565+0200". How can I convert it in "2017-10-26 16:59:29" format. Thanks

goyals05 · ‎03-30-2017

Thanks but my requirement is slightly different. In below example if value of LIVE_or_DROP is set then Query 1 should be run otherwise Query 2 should be run. <set token="LIVE_or_DROP">LIVE</set> <query>Query 1</query> <earliest>abc</earliest> <latest>xyz</latest> <finalized> <set token="x">$result.total$</set> <query>Query 2</query> <earliest>abc</earliest> <latest>xyz</latest> <finalized> <set token="x">$result.total$</set>

goyals05 · ‎03-28-2017

I have two different searches and i want to run those searches based on the token. if any value is set for that token then Query 1 should run, else Query 2 should run.

Posts	12
Solutions	0
Karma Given	46
Karma Received	6
Member Since	‎03-28-2017

Online Status	Offline
Date Last Visited	3 weeks ago

split one field in two column

Displaying data in table

replace special character "*" with NULL in datamod...

convert string date(without seprater) to readable ...

set earliest default time in epoch format.

Convert Time format

How can we run searches based on token value?

split one field in two column

Displaying data in table

Re: Restrict to update Splunk App

Re: Restrict to update Splunk App

Re: replace special character "*" with NULL in dat...

replace special character "*" with NULL in datamod...

convert string date(without seprater) to readable ...

Re: set earliest default time in epoch format.

set earliest default time in epoch format.

Convert Time format

Re: How can we run searches based on token value?

How can we run searches based on token value?