Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About dbagdanoff
dbagdanoff
Explorer
Member since:
01-09-2020
08-21-2025
Community Statistics
| Posts | 15 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 2 |
| Member Since | 01-09-2020 |
Activity Feed
- Posted Dashboard input dropdown value contains quotes and cant figure out how to escape them on Dashboards & Visualizations. 08-21-2025 11:59 AM
- Posted Trouble with df.sh after upgrade to 9.2.1 on Getting Data In. 06-19-2024 09:35 AM
- Posted problem with systemd managed boot-start on Almalinux 9.3 when using deployment server? on Splunk Enterprise. 04-23-2024 09:48 AM
- Got Karma for Re: can a dashboard display .csv file with columns of data. 02-07-2023 06:25 PM
- Posted Re: can a dashboard display .csv file with columns of data on Dashboards & Visualizations. 02-07-2023 02:07 PM
- Karma Re: can a dashboard display .csv file with columns of data for richgalloway. 02-07-2023 02:07 PM
- Posted Can a dashboard display .csv file with columns of data? on Dashboards & Visualizations. 02-07-2023 11:07 AM
- Karma Re: rounding decmials for jpolvino. 06-05-2020 12:50 AM
- Got Karma for Re: rounding decmials. 06-05-2020 12:50 AM
- Posted Re: Is it possible to turn a dashboard input either on or off? on Dashboards & Visualizations. 02-19-2020 07:58 AM
- Posted Re: Is it possible to turn a dashboard input either on or off? on Dashboards & Visualizations. 02-18-2020 04:31 PM
- Posted Re: Script to copy all customization in splunk on All Apps and Add-ons. 02-18-2020 10:20 AM
- Posted Is it possible to turn a dashboard input either on or off? on Dashboards & Visualizations. 02-18-2020 10:09 AM
- Tagged Is it possible to turn a dashboard input either on or off? on Dashboards & Visualizations. 02-18-2020 10:09 AM
- Tagged Is it possible to turn a dashboard input either on or off? on Dashboards & Visualizations. 02-18-2020 10:09 AM
- Tagged Is it possible to turn a dashboard input either on or off? on Dashboards & Visualizations. 02-18-2020 10:09 AM
- Posted Re: Data not coming to ansible on All Apps and Add-ons. 02-03-2020 11:22 AM
- Posted Re: can i specify the type of authentication used in the website monitoring app? on All Apps and Add-ons. 01-14-2020 11:40 AM
- Posted can i specify the type of authentication used in the website monitoring app? on All Apps and Add-ons. 01-14-2020 09:13 AM
- Tagged can i specify the type of authentication used in the website monitoring app? on All Apps and Add-ons. 01-14-2020 09:13 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
08-21-2025
11:59 AM
hello the values in my dropdown all contain quotes like "Name of App". I can see Splunk needing to escape these quotes in a search with \" but can't figure out how to do this in my dashboard. hope that makes sense. <input type="dropdown" token="DisplayName" searchWhenChanged="true"> <label>App</label> <choice value="*">All</choice> <fieldForLabel>DisplayName</fieldForLabel> <fieldForValue>DisplayName</fieldForValue> <search> <query>index=windows sourcetype=Script:InstalledApps | table DisplayName | dedup DisplayName</query> <earliest>-24h@h</earliest> <latest>now</latest> </search> <default>*</default> </input> </fieldset> <row> <panel> <table> <search> <query>index=windows sourcetype=Script:InstalledApps host=$host$ DisplayName=$DisplayName$
... View more
Labels
- Labels:
-
Classic dashboard
06-19-2024
09:35 AM
since moving to 9.2.1, now my df.sh events are now a single event when searching. also notice the format is bad when running the script compared to the built in df. novice linux guy here looking to see if anyone else has come across this. thanks! splunk df linux df splunk event
... View more
Labels
- Labels:
-
Linux
-
sourcetype
-
universal forwarder
04-23-2024
09:48 AM
just moved to Almalinux 9.3 (from rhel 7 yikes!) systemd managed boot start works fine. my problem is when I tried to deploy an app with a restart, splunk was not able to start up complaining it was managed by systemd. has anyone else come across this? Splunk 9.0.5
... View more
Labels
- Labels:
-
administration
-
configuration
02-07-2023
02:07 PM
1 Karma
you nailed it. double checked and I had a typo in the stanza. the data I was seeing was from log files and not the final .csv. I appreciate your time
... View more
02-07-2023
11:07 AM
hello all. i have a .csv report that gets generated regularly and that I'm monitoring. working fine there. trying to figure out how to display it because the data(events?) are in columns. is this possible? example data here.
Hosts
server1
server2
IPLevel
median
median
Tip1662
N/A
N/A
Tip1663
PASSED
PASSED
Tip1664
FAILED
FAILED
Tip1666
PASSED
PASSED
Tip1667
PASSED
PASSED
Tip1668
PASSED
PASSED
Tip1669
N/A
N/A
Tip1671
PASSED
PASSED
Tip1674
SKIPPED
SKIPPED
Tip1675
FAILED
FAILED
Tip1676
PASSED
PASSED
Tip1677
PASSED
PASSED
Tip1680
PASSED
PASSED
Tip1685
PASSED
PASSED
Tip1687
PASSED
PASSED
Tip1688
SKIPPED
SKIPPED
Tip1689
SKIPPED
SKIPPED
Tip1690
FAILED
FAILED
... View more
Labels
- Labels:
-
dashboard
02-19-2020
07:58 AM
this is what I'm doing now. its giving me a list checkboxes with the values my search returns. while it works, it does not look good lol.
... View more
02-18-2020
04:31 PM
i need to run a search for my "aws" choice. i have no common value to use. hope that makes sense. thanks for the reply!
... View more
02-18-2020
10:20 AM
i think the diag dump on each search head, indexer and so on will tar it all up. "splunk diag" from the install/bin directory. you'll have all the conf files.
... View more
02-18-2020
10:09 AM
I have an inventory dashboard. I'd like to have a checkbox to "show these items only".
My thinking is, when checked, the search will be applied. when unchecked, the search will be ignored. hope that makes sense.
... View more
02-03-2020
11:22 AM
i had the same issue until i placed the callback_whitelist = splunk in the [defaults] section of anisible.cfg
... View more
01-14-2020
11:40 AM
wow, very impressed with your support!
of course I'm only assuming this is the issue based off what I've read. this message is all i could find
2020-01-14 09:23:10,366 WARNING Unknown type of authentication requested, auth_type=negotiate
... View more
01-14-2020
09:13 AM
i understand authentication will fail when it cant detect auth_type. im getting a 401 response code with credentials specified. can we specify the auth type in the inputs.conf?
url=https://mysite.com proxy_type=http proxy_server="" proxy_port="" title=mysite.com request_time=21.33 timeout=5 content_md5=3f4f6ab74ec71d7b7faca46564373e67 content_sha224=d593f1c63abe5f509e523117d71e4cf1ddb005db16a022354d6f4160 content_size=71 response_code=401 total_time=21.33 timed_out=False
... View more
01-09-2020
01:36 PM
1 Karma
@jpolvino Nice suggestion! worked like a charm. never even thought to rename first.
... View more
01-09-2020
10:58 AM
@arjunpkishore5 yes
Error on 'eval' command: The expression is malformed. An unexpected character is reached at '%_Committed_Bytes_In_Use,2)'
I've tried quotation marks, parenthesis in different places. seems the eval command dosent like something in that counter
... View more
01-09-2020
08:28 AM
I've tried everthing I've found but for some reason cant round the value for "%_Committed_Bytes_In_Use". different variations of things like | eval %_Committed_Bytes_In_Use=round(value,2) but no luck. someone help this newbie. thanks in advance!
index=perfmon eventtype="perfmon_windows" object="Memory" host=$host$| eval DATETIME=strftime(_time, "%D %H:%M") | sort-%_Committed_Bytes_In_Use | table host %_Committed_Bytes_In_Use DATETIME | dedup host
... View more
- Tags:
- splunk-enterprise
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-21-2025
11:53 AM
|
