I have to delete app.conf sometimes in deployment-apps then reload deploy-server to reset the state.   ... View more

@Priya312  rangemap to color single value is not recommended way. Refer to documentation: https://docs.splunk.com/Documentation/Splunk/latest/Viz/SingleValueFormatting#Migration_for_rangemap_settings_in_existing_single_value_visualizations   Following are some of your alternatives. Please try out and confirm. Do up vote the comment and answers if they assist you! https://community.splunk.com/t5/Dashboards-Visualizations/Single-Value-Visualization-Set-value-to-always-have-that-color/td-p/449751 ... View more

Thanks. I am able to get that in milliseconds but I want to convert the response time to Percent as well for reporting and compare it with earlier week, How to achieve that? ... View more

Tq so much Niketnilay.It worked. ... View more

For benefit of everyone, please share the details of your solution. I am curious whether you got it in 1 combined search or 2. ... View more

you can add a element to your element, in this element you unset the token on which your drilled down panel is depending, so whenever you change the input, the token gets unset and the subpanel disappears <form> <fieldset> ... <input type="dropdown" token="xx" searchWhenChanged="true"> <choice value="*">Any</choice> <default>*</default> <populatingSearch fieldForLabel="xx" fieldForValue="xx">.....</populatingSearch> <change> <unset token="yy"></unset> </change> ... <row> <panel> <!-- main panel wit drilldown--> ... <drilldown> <set token="yy">$click.value$</set> </drilldown> ... </panel> </row> <row> <panel> <!-- drilled down panel --> <table depends="$yy$""> ... see http://docs.splunk.com/Documentation/Splunk/6.2.4/Viz/tokens ... View more

You can put your custom field filter into "search time restrictions" on the Roles. Go to Settings-> Access controls » Roles -> YOur Role for each user -> Search Restrictions -> Restrict search terms" Or create some lookup with following details user roles and required fields. Use the lookup in youe search. you can retrieve the logged in user details by using this query, | rest /services/authentication/current-context splunk_server=local | table username,realname,roles Check this post http://answers.splunk.com/answers/28633/current-user-in-search.html ... View more

Why don't you use a "hidden" drop down to set a token which will reflect in title . The search in the dropdown should be exactly same as that in the panel . ... View more

Thanks rsebbett_splunk. Used date_month fields in the drilldown and got required result ... View more