Thank you Sir, Thank you Sir, Thank you Sir, ... View more

Still it is showing Black color, in your code your are populating only count. count <panel> <title>count 100</title> <single> <search> <query>index = _internal | head 100 | stats count AS cnt | eval per= (cnt+1)/9 | eval Percent =ROUND(per,2)."%"| table Percent</query> <earliest>-15m</earliest> <latest>now</latest> <sampleRatio>1</sampleRatio> </search> <option name="colorMode">block</option> <option name="rangeColors">["0x65a637","0x6db7c6","0xd93f3c"]</option> <option name="rangeValues">[0,100]</option> <option name="useColors">1</option> </single> </panel> ... View more

<panel> <single> <search> <query>index=index|eval conversion=((AAA_Error/Total_user)*100)|eval Percent =ROUND(conversion,2)."%"| table Percent</query> <earliest>0</earliest> <sampleRatio>1</sampleRatio> </search> <option name="colorMode">block</option> <option name="drilldown">none</option> <option name="rangeColors">["0x98AFC7","0x98AFC7","0x98AFC7"]</option> <option name="rangeValues">[0]</option> <option name="useColors">1</option> </single> </panel> ... View more

yes , how this app is useful? ... View more

yes , how it useful? ... View more

Thanks working for me ... View more

Thanks ..working for me ... View more

got answer ... View more

<title>Authentication</title> <search> <query>index="index"| rex "(?:[^\t\n]*\t){16}(?P&lt;runcode&gt;[^\t]*)"|rex "(?:[^\t\n]*\t){17}(?P&lt;reasoncode&gt;[^\t]*)" | rex max_match=0 "&lt;messageString&gt;(?&lt;reasoncode&gt;[^\\&lt;\"]*)"|eval reason_sub_code=substr(reasoncode,1,7) | stats count</query> <sampleRatio>1</sampleRatio> </search> <option name="drilldown">all</option> ["0x65a637","0xf58f39","0xd93f3c"] [1,2] ... View more

I've added into dashboard like below but no use <single> <title>Authentication</title> <search> <query>index="index"| rex "(?:[^\t\n]*\t){16}(?P&lt;runcode&gt;[^\t]*)"|rex "(?:[^\t\n]*\t){17}(?P&lt;reasoncode&gt;[^\t]*)" | rex max_match=0 "&lt;messageString&gt;(?&lt;reasoncode&gt;[^\\&lt;\"]*)"|eval reason_sub_code=substr(reasoncode,1,7) | stats count</query> <sampleRatio>1</sampleRatio> </search> <option name="drilldown">all</option> <option name="rangeColors">["0x65a637","0xf58f39","0xd93f3c"]</option> <option name="rangeValues">[1,2]</option> </single> <single> ... View more

sorry Unable to do , can u pls provide full code : my splunk code is : index="index" | rex "(?:[^\t\n]\t){16}(?P[^\t])"|rex "(?:[^\t\n]\t){17}(?P[^\t])" | rex max_match=0 "(?[^\<\"]*)"|eval reason_sub_code=substr(reasoncode,1,7) | search runcode=Failure AND reason_sub_code="CAM-AAA" | stats count ... View more

sorry Unable to do , can u pls provide full code : my splunk code is : index="index" | rex "(?:[^\t\n]\t){16}(?P[^\t])"|rex "(?:[^\t\n]\t){17}(?P[^\t])" | rex max_match=0 "(?[^\<\"]*)"|eval reason_sub_code=substr(reasoncode,1,7) | search runcode=Failure | stats count ... View more

index="index" | rex "(?:[^\t\n]\t){16}(?P[^\t])"|rex "(?:[^\t\n]\t){17}(?P[^\t])" | rex max_match=0 "(?[^\<\"]*)"|eval reason_sub_code=substr(reasoncode,1,7) | search runcode=Failure AND reason_sub_code="CAM-AAA" | stats count ... View more

is there any way i can still use free version to do my search & dashboard operations ... View more

Thanks for your response, to meet my requirement column 1 with wrap =false ; column 2 wrap = true ; column 3 wrap = true.; else to see count i need to move my courser to right most. example: three fields like below errorCode error Desc count GEN-ERR-0023 GEN-ERR-0023 Initially, in data source type(s) '', the function 'providerQuery' is not supported in 'ReporterModeProvider'. After decomposition, the function 'ces_currentmeasure' is not supported in 'RelationalQueryProvider'.GEN-ERR-0009 Data source type(s) '' - Function 'rxxxxx is not supported in 'NoDataModeProvider'.GEN-ERR-0009 Data source type(s) 'bb' - Function 'xxxxxis not supported in 'OlapQueryProvider'.GEN-ERR-0019 Data source type(s) 'PC' - Function in 'NoDataModeProvider'.GEN-ERR-0009 Data source type(s) 'bb' - Function 'xxxxxis not Function 'realDataMode' is not supported in 'NoDataModeProvider'.GEN-ERR-0009 Data source type(s) '' - in 'NoDataModeProvider'.GEN-ERR-0009 Data source type(s) 'bb' - Function 'xxxxxis not type(s) '' - Function 'oneDimension' is not supported in 'CubeBuildProvider'.GEN-ERR-0009 Data source in 'NoDataModeProvider'.GEN-ERR-0009 Data source type(s) 'bb' - Function 'xxxxx'. 8 ... View more

need help on this, provided info is not helping. Thanks ... View more

Can some one pls advice how i can do alignment on my table display, in the snap shot column "1" has error code is not displaying in single line -Actual results. I'm expecting display in single line - Green color ... View more

Thanks Thanks ... View more