the URL you couldn't reach was a url you posted.   its broken. is what he was saying. your message: Hi Arun_N_007, this is possible if Splunk is configured for integration with Active Directory: it's possible to configure browser to execute automatic login using users account for authentication. In othe words: user does logon to AD domain when open his own computer ( “joined” to the domain). When user will connect to Splunk using own browser (configured as described in the following URL), he will not have to type his credentials again. https://prdsoftware.com/helpmasterlive/KnowledgeBase/kbarticle.aspx?view=107 Obviously this functionality runs only with a Splunk Enterprise License, it doesn't run with a free license ... View more

Yes i did the same but no luck 🙂 ... View more

|stats count|eval _raw="Application photobuf message : dhfksdhkfhksdhfk hdfkshfskhfk dfhkshdfkshfhs"|append [|stats count|eval _raw="Application Data loaded successfully for Photo No - 123456789 ; OrderIPlaceno - 987654321"]| eval delim = if(like(_raw,"%:%"),":","for")|eval _raw=split(_raw,delim)|eval split1=mvindex(_raw,0)|eval split2=mvindex(_raw,1) ... View more

Thanks, I think the root cause should be 'loadAvg1mi' is a string field not a number one. ... View more

Hi @jacobwilkins , Still the order is not maintained.Any other solution to maintain the order for the above query. The reason behind is,after assigning the coursescore to course_{coursename} in eval course_{coursename}=coursescore,Its displaying in ascending order,so the order gets changes. Help me out,if there is any possibility ... View more

Thank you Aweitzman. Could you please have a look into my below posts :). Its been 2 weeks i didnt got any answers yet :(... http://answers.splunk.com/answers/239222/when-to-use-django-approach-in-splunk-apps.html http://answers.splunk.com/answers/237073/is-dynamic-query-construction-possble-in-splunk-wi-1.html ... View more

Read more here: http://docs.splunk.com/Documentation/Splunk/6.2.3/DistSearch/Whatsearchheadssend ... View more

Hi Woodcock, Any other way to achieve this use case other than using map.. Any equivalent to map without 10K limit??? ... View more

Option 2 worked for me, thanks! ... View more

Please accept the Answer 🙂 ... View more

Thank you, both MuS and Arun_N_007. inputlookup just works! It just took too long since csv has almost 100K lines, so I thought it wasn't working. Thanks again. ... View more

sourcetype="Customer_Churn" | eventstats count(eval(CHURN="1")) as churned_count by PLACEMENT | eventstats count(eval(CHURN="1")) as tot_churn_count | eval churned_percentage=churned_count*100/tot_churn_count | eventstats values(churned_percentage) by PLACEMENT hope this will work ... View more

Hi Santhosh, did you got any solution to this. am also facing the same issue here. can you please help me. ... View more

https://answers.splunk.com/answers/223843/rest-endpoint-for-modifying-applocalmacrosconf.html i got it 🙂 ... View more

Can you please share me, How to add CSS files and HTML files, I am reading many post. lot many people are doing lot many things from HTML and CSS. I didn't get anywhere ; how to add such things.? here is my post link link for the post ... View more

Use, |eval lic_hit = if(isnum(predict1),if(predict1<LicLimit,0,500),0) Above command will make sure that if predicted value is not number it will assign 0 to lic_hit. ... View more

Give Meta Woot! a try: https://splunkbase.splunk.com/app/2949/ We talk about this kind of thing in our talk from .conf18: https://conf.splunk.com/files/2018/recordings/10-must-have-apps-fn1072.mp4 ... View more

Strange below is my response from Splunk regarding versions that this is not working in I can definitively say that the code you have here works fine in Splunk 6.0.4 (build 207768). And fails in Splunk 6.1.1 (build 207789). So I'm guessing this problem just comes around here and there. As I've tested in 6.0 (don't remember change version) and 6.1.1 ... View more

http://dev.splunk.com/view/web-framework/SP-CAAAER6 ... View more