About AleCanzo

AleCanzo

Hi @livehybrid, Let me explain better. I have SOAR and Enterprise on Cloud. I'm trying to get, via "run query" in a playbook, some resultst from SIEM to SOAR. The query is a simple | inputlookup command on a csv. However i don't get all the results. Where's the problem? Splunk Cloud? the request from SOAR? Thanks 🙂

AleCanzo

Hi guys, is there a limit of the number's events returned in splunk? I'm trying to run a query with inputlookup, but i see only 50_000 results, while my lookup has more results. The limit.conf file seems to be useless, any suggestions? Thanks 🙂

AleCanzo · ‎08-11-2025

Hi @livehybrid , I'm not trying to build a custom visualization, i'm trying to visualize a 3d object in a dashboard's panel.

AleCanzo · ‎08-07-2025

Hi guys, I'm trying to put a 3d visualization that i've made with three.js in my splunk dashboard, but it doesn't work. I've put my main.js in .../appserver/static and the html in an html in my dashboard. Any docs/recommendations? Thanks, Alecanzo.

AleCanzo · ‎08-05-2025

Thank you @thahir, it's working. But when i try to navigate the page with TAB, the outlines are hidden... I'm taking your answer as correct, hoping no developer is going to hate me 😉 Thank you, AleCanzo.

AleCanzo · ‎08-05-2025

Hi guys, I'm searching for a way to disable the outline of the links in splunk classic dashboard. There was a similar question on the community, but i'm not understanding the answers. In my css i'm trying with: a:focus{ outline: none !important} but it doesn't work. Thank you!

AleCanzo · ‎07-08-2025

Hi guys, I'm trying to customize an app I created. For the dashboards, I placed the CSS file in appserver/static and linked it in the dashboard using stylesheet="my.css". How does it work for the app's CSS? Where should I put the CSS file? Do I also need to reference it in any .conf file? Thanks for your attention.

AleCanzo · ‎06-19-2025

Hi everyone, What's the value of a token if is not set in an input? An empty string, null() or? I was trying to do something like: | eval user=if(isnull("$user_token$"), user, "$user_token$"), but it doesn't work.

AleCanzo · ‎06-13-2025

Thank you @bowesmana !

AleCanzo · ‎06-12-2025

Hi, i'm searching for a way to modify my app/dashboard to be able to modify the entries of a table (such as delete/duplicate/copy/multiselect rows). Any suggestions? Maybe i have to look at the scripts from the lookup editor app? I really don't know where to start. I know how to write in python but i haven't created a script already. Thanks 🙂 Dashboard view

AleCanzo · ‎06-11-2025

No, i'm trying to do something different. Every time my Alert is triggered, i want to output some fields (like severity, expiration, ss_name...) to a kvs lookup. Then i want to see the lookup on a dashboard: i'm doing this cause i'm trying to create an app where i can manage alerts (like Alert Manager). Of course i can just create a dashboard where i table all the events from the Alert, but then i'm not sure i'm going to be able to modify the table.

AleCanzo · ‎06-11-2025

Hi, this is my first interaction with Splunk Community so be patient please 🙂 I'm trying to output some fields from an Alert to a kvs lookup. I'm using a Lookup editor app and a KVS app, but probably i'm missing some theory. Thanks!

Posts	12
Solutions	0
Karma Given	31
Karma Received	0
Member Since	‎06-11-2025

Online Status	Offline
Date Last Visited	2 weeks ago

Limits of events returned

Three.js

Disable outline in splunk

Custom css for app

What's the value of a token if is not set in an in...

How to modify a dashboard

There is a way to send some fileds of an alert to ...

Re: Limits of events returned

Limits of events returned

Re: Three.js

Three.js

Re: Disable outline in splunk

Disable outline in splunk

Custom css for app

What's the value of a token if is not set in an in...

Re: How to modify a dashboard

How to modify a dashboard

Re: There is a way to send some fileds of an alert...

There is a way to send some fileds of an alert to ...

Join the Conversation