Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About EmEdwards
EmEdwards
Path Finder
Member since:
05-02-2017
09-20-2022
Community Statistics
| Posts | 13 |
| Solutions | 1 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 05-02-2017 |
Activity Feed
- Got Karma for How do you create a new empty app in a clustered environment?. 05-07-2024 09:13 AM
- Posted Re: smart pdf explorer for splunk not printing in landscape truncating the reports on Dashboards & Visualizations. 03-03-2020 04:27 AM
- Posted Re: smart pdf explorer for splunk not printing in landscape truncating the reports on Dashboards & Visualizations. 02-26-2020 09:25 AM
- Posted Re: Hiding the ellipse menu and Clone option in an embedded dashboard. on Dashboards & Visualizations. 02-05-2019 06:07 AM
- Posted How do you format a table row as currency but not the column field only a specific row? on Splunk Search. 01-23-2019 05:53 AM
- Tagged How do you format a table row as currency but not the column field only a specific row? on Splunk Search. 01-23-2019 05:53 AM
- Tagged How do you format a table row as currency but not the column field only a specific row? on Splunk Search. 01-23-2019 05:53 AM
- Tagged How do you format a table row as currency but not the column field only a specific row? on Splunk Search. 01-23-2019 05:53 AM
- Posted How do you create a new empty app in a clustered environment? on Deployment Architecture. 10-31-2018 06:15 AM
- Tagged How do you create a new empty app in a clustered environment? on Deployment Architecture. 10-31-2018 06:15 AM
- Tagged How do you create a new empty app in a clustered environment? on Deployment Architecture. 10-31-2018 06:15 AM
- Tagged How do you create a new empty app in a clustered environment? on Deployment Architecture. 10-31-2018 06:15 AM
- Tagged How do you create a new empty app in a clustered environment? on Deployment Architecture. 10-31-2018 06:15 AM
- Posted Re: DB Connect MySQL can't parse timestamp on All Apps and Add-ons. 03-28-2018 01:14 PM
- Posted Re: Splunk DB Connect: How do I use epoch time when extracting the data time information? on All Apps and Add-ons. 03-28-2018 08:22 AM
- Posted Re: DB Connect - Data Input Query and Error Received of - DB Input definition cannot continue with an empty table in Rising Column mode on All Apps and Add-ons. 03-06-2018 10:44 PM
- Posted Re: DB Connect - Data Input Query and Error Received of - DB Input definition cannot continue with an empty table in Rising Column mode on All Apps and Add-ons. 07-10-2017 01:42 AM
- Posted DB Connect - Data Input Query and Error Received of - DB Input definition cannot continue with an empty table in Rising Column mode on All Apps and Add-ons. 07-10-2017 01:38 AM
- Tagged DB Connect - Data Input Query and Error Received of - DB Input definition cannot continue with an empty table in Rising Column mode on All Apps and Add-ons. 07-10-2017 01:38 AM
- Tagged DB Connect - Data Input Query and Error Received of - DB Input definition cannot continue with an empty table in Rising Column mode on All Apps and Add-ons. 07-10-2017 01:38 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 0 | |||
| 0 |
03-03-2020
04:27 AM
Hi Robert, Please let me know if you happen to find a solution please as I have the same issue and haven't been able to resolve.
... View more
02-26-2020
09:25 AM
Did you happen to resolve this issue at all ?
... View more
02-05-2019
06:07 AM
This is old but thought I'd post a response.
Add this to the end of your dashboard.
<row>
<panel depends="$hidden$">
<html>
<style>
.edit-other {
visibility: hidden !important;
}
</style>
</panel>
... View more
01-23-2019
05:53 AM
I have a table that has various columns of Totals. However, the CurrentYear can represent different information.
I only want to Format the row Category = Money as a currency value = £100000
EG
Category CurrentYear
Money 100000
Cases 10
Visits 20
I'm unsure how to format a row without formatting the entire column of CurrentYear.
thanks
... View more
10-31-2018
06:15 AM
1 Karma
I know how to create an app from the GUI of Splunk. But, on a clustered environment, I believe this needs to be created on the deployer. I cannot find any documentation that gives step by step help to create a new empty app on a clustered Linux environment.
I do not know linux much at all, and am only needing to deploy a new empty base app.
Any pointers to documentation or help would be great ! Thanks.
... View more
03-28-2018
01:14 PM
Did you resolve this ? I have the exact same problem at the moment. My same query worked in version 2.4 we upgraded to 3.1.1 and now same query same data input doesn't work due to time format with the same error you had.
... View more
03-28-2018
08:22 AM
I am using a new version of DB connect 3.1.1 and seems even though I have a datetime datatype from SQL it still wont accept the column and requests a format.
I can't seem to get it to work.
... View more
03-06-2018
10:44 PM
Hi, this post was some time back. To be honest I ended up going back to an older version of DBX and this resolved the problem I had.
In the older version I use at the moment I only have a select on the table as the query with no where clause or order by needed, then in the UI you specify the rising column from a drop down field and DBX does the rest.
In the newer versions I think I tested removing the order by clause and this too made a difference. Good luck.
... View more
07-10-2017
01:42 AM
Oh and sorry the query I'm using for DB connect and the rising column looks a bit like this example ;
SELECT *
FROM "Utilities"."dbo"."People"
Where PeopleID >?
ORDER BY PeopleID asc
... View more
07-10-2017
01:38 AM
I'm new to using Splunk so please could someone clarify this issue for me.
I added data using DB connect to a SQL Server view.
The first time I added a Data Input I used Batch Input as my selection of Data which is a list of people lets say....
On later querying this data is Search and Reporting I had numerous duplicates for Individuals which messed up my result set.
So I tried a new Data Input using a Rising column of a unique primary key of PeopleID for example.
Today on checking the Data Input has not added any NEW records and is displaying an error of
DB Input definition cannot continue with an empty table in Rising Column mode
The Rising Column is a Primary Key and does not contain any empty values in source.
On running the view it's connecting to there are new records which have not been added.
Please can someone explain how I use a Data Input that will add new records or updated records ?
Thanks
... View more
06-20-2017
08:12 AM
I think I discovered the problem. Seems that the volume of data was the problem. By reducing the data volume as a test and amending the settings of storage for the Index made this work. The Index didn't seem to have enough space to store any events so wasn't out putting any results.
... View more
06-20-2017
06:31 AM
I'm using the latest version which is version 3. It was downloaded and installed within the last 30 days.
I'm not following your questions but here's the section that I'm referring to;
http://docs.splunk.com/Documentation/DBX/3.0.0/DeployDBX/Createandmanagedatabaseinputs
I'm creating a NEW database input and it's connected to a SQL server which it can preview the data absolutely fine within the 2-section Choose and Preview Data Window and can successfully view the SQL table selected.
The next two sections are 3- Set Parameters then 4 of 4 is Metadata.
I click Save and it saves my data input.
According to the document link above I should then be able to go to that new data input select "Find Events" to view the data. All time is selected and it shows me a message of NO RESULTS.....
But on using the Preview it shows all the Data.
This seems very odd it's not returning any data after the input is saved.
... View more
06-13-2017
06:47 AM
I have a SQL View as my Source, The Preview displays the records correctly.
However when saving the New Input there are no results.
Are their specific settings in the "Set Parameters" or "Metadata" that can cause t his ?
I have tried both options of timestamp being a column or Index time.
I have created a new Index and this still makes no difference.
What am I doing wrong ?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-20-2022
06:58 AM
|
