Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About sumandebnath23
sumandebnath23
Explorer
Member since:
07-04-2017
03-06-2025
Community Statistics
| Posts | 6 |
| Solutions | 0 |
| Karma Given | 11 |
| Karma Received | 1 |
| Member Since | 07-04-2017 |
Activity Feed
- Karma Re: Why does creating a new field sometimes require restarting Splunk services? for iamarkaprabha. 06-05-2020 12:50 AM
- Karma Re: File Deletion search query for iamarkaprabha. 06-05-2020 12:50 AM
- Karma Re: What is the difference between index time extractions and search time extractions? for iamarkaprabha. 06-05-2020 12:50 AM
- Karma Re: Splunk App for Salesforce for iamarkaprabha. 06-05-2020 12:50 AM
- Karma Re: ITSI alerts show as incident service now for iamarkaprabha. 06-05-2020 12:50 AM
- Karma Re: Can you help me configure the Universal Forwarder with the Splunk Add-on for Microsoft IIS? for iamarkaprabha. 06-05-2020 12:50 AM
- Karma Re: Installation & setup guide is not available for Service Manager Integration Add-on for iamarkaprabha. 06-05-2020 12:50 AM
- Karma Re: help on loadjob command for iamarkaprabha. 06-05-2020 12:50 AM
- Karma Re: How to setup splunk disk space alert(s) for multiple conditions in a single query ? for iamarkaprabha. 06-05-2020 12:50 AM
- Karma Re: Is there any option to return to the main pie chart after performing drill down by clicking a slice of the pie chart for rajim. 06-05-2020 12:48 AM
- Karma Multiple filter option in dashboard tables for rajim. 06-05-2020 12:48 AM
- Got Karma for Is there any option to return to the main pie chart after performing drill down by clicking a slice of the pie chart. 06-05-2020 12:48 AM
- Posted Is there a field in Workday logs that store username information in Workday Add-on for Splunk? on All Apps and Add-ons. 04-01-2018 10:19 PM
- Tagged Is there a field in Workday logs that store username information in Workday Add-on for Splunk? on All Apps and Add-ons. 04-01-2018 10:19 PM
- Tagged Is there a field in Workday logs that store username information in Workday Add-on for Splunk? on All Apps and Add-ons. 04-01-2018 10:19 PM
- Tagged Is there a field in Workday logs that store username information in Workday Add-on for Splunk? on All Apps and Add-ons. 04-01-2018 10:19 PM
- Tagged Is there a field in Workday logs that store username information in Workday Add-on for Splunk? on All Apps and Add-ons. 04-01-2018 10:19 PM
- Posted How can I include the sequence sunburst chart in visualization picker of search app? on All Apps and Add-ons. 10-04-2017 11:33 AM
- Tagged How can I include the sequence sunburst chart in visualization picker of search app? on All Apps and Add-ons. 10-04-2017 11:33 AM
- Tagged How can I include the sequence sunburst chart in visualization picker of search app? on All Apps and Add-ons. 10-04-2017 11:33 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 1 |
04-01-2018
10:19 PM
Hello,
We have onboarded Workday logs and in the user activity input section, checked "Include target details". Now the question is would it be possible to view username who has performed some action on Windows systems? Is there a field for that?
Please suggest.
... View more
10-04-2017
11:33 AM
Hello , I am trying to add sequence sunburst chart in visualization picker of search app. Could anybody please help me with that?
... View more
07-06-2017
08:51 AM
Below is the button configuration:
<title>Workstations per Policy Type</title>
<html depends="$policy_type$">
<button class="btn" data-unset-token="policy_type">Reset Drilldown</button>
</html>
<chart depends="$policy_type$">
<search>
<query>index="<index_name>" source=”<Source Name>" earliest=-90d
... View more
07-05-2017
11:40 PM
Hi @cmerriman,
I have tried this option. Button is appearing in panel but not resetting the chart.
Below is the code. Please help me to resolve this issue.
Compliance Dashboard
Compliance Dashboard.
<input type="dropdown" token="policy_type">
<label>Policy Type</label>
<choice value="%">All</choice>
<choice value="Unprotected">Unprotected</choice>
<choice value="Monitoring">Monitoring</choice>
<choice value="Blocking">Blocking</choice>
<default>%</default>
<initialValue>%</initialValue>
</input>
<panel>
<title>Workstations per Policy</title>
<table>
<search>
<query>index="<Index Name>" source=”<Source Name> " earliest=-90d
| eval Unq_Policy = mvdedup(Policy)
| eval First_Byte = substr(Unq_Policy,1,1)
| eval Policy_Type = case(First_Byte="0","Unprotected" , First_Byte="1","Monitoring", 1=1,"Blocking")
| rename "Device Name" as DeviceName
| eval Workstation = mvdedup(DeviceName)
| eval drpDownVal = "$policy_type$"
| where like (Policy_Type,drpDownVal)
| dedup Workstation Unq_Policy
| stats count("Workstation") as "Workstation Count" by Unq_Policy, Policy_Type
| rename Unq_Policy as Policies
| table Policies Policy_Type "Workstation Count"
-90d@d
now
1
1d
delay
20
heatmap
none
false
false
true
true
Workstations per Policy Type
Reset Drilldown
index=" " source=” " earliest=-90d
| eval Unq_Policy = mvdedup(Policy)
| eval First_Byte = substr(Unq_Policy,1,1)
| eval Policy_Type = case(First_Byte="0","Unprotected" , First_Byte="1","Monitoring", 1=1,"Blocking")
| rename "Device Name" as DeviceName
| eval Workstation = mvdedup(DeviceName)
| eval drpDownVal = "$policy_type$"
| where like (Policy_Type,drpDownVal)
| dedup Workstation Policy_Type
| stats count("Workstation") as "Workstation Count" by Policy_Type
-90d@d
now
1
1d
delay
ellipsisNone
0
visible
visible
visible
linear
linear
0
inherit
pie
50
10
area
gaps
none
0.01
default
shiny
{"Unprotected": 0x900C3F, "Monitoring": 0xC70039, "Blocking":0xFF5733}
all
0
0
ellipsisMiddle
right
0
1
large
_aggregation
$click.value$
... View more
07-05-2017
04:32 AM
Hi ,
Thanks for reply.
I am able to drill down but not finding any option to navigate back to original chart after drill down.
could you please help in that case.
... View more
07-05-2017
12:35 AM
1 Karma
Hello,
I have created a pie chart in a simple dashboard. The pie chart has several slices for different values of a field.
For example, the pie chart consists of three slices referring to data of three countries (India , USA , UK). When i am clicking on one slice(e.g. India), it is showing the data for India. But from here on, i am not able to return to the main pie chart that was created to show data for all three countries (i.e. the main pie chart)
We are using Splunk 6.6 version
Can anyone help me in this case?
... View more
- Tags:
- splunk-enterprise
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-06-2025
02:21 PM
|
