Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About 812456
812456
New Member
Member since:
03-30-2020
06-05-2020
Community Statistics
| Posts | 3 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 03-30-2020 |
Activity Feed
- Posted Why export option is not downloading the search result when i use basesearch? on Dashboards & Visualizations. 05-16-2020 10:51 AM
- Tagged Why export option is not downloading the search result when i use basesearch? on Dashboards & Visualizations. 05-16-2020 10:51 AM
- Tagged Why export option is not downloading the search result when i use basesearch? on Dashboards & Visualizations. 05-16-2020 10:51 AM
- Tagged Why export option is not downloading the search result when i use basesearch? on Dashboards & Visualizations. 05-16-2020 10:51 AM
- Tagged Why export option is not downloading the search result when i use basesearch? on Dashboards & Visualizations. 05-16-2020 10:51 AM
- Posted How to set class for different fields using JavaScript for changing font color and background color in Splunk table? on Splunk Search. 05-04-2020 08:55 AM
- Tagged How to set class for different fields using JavaScript for changing font color and background color in Splunk table? on Splunk Search. 05-04-2020 08:55 AM
- Tagged How to set class for different fields using JavaScript for changing font color and background color in Splunk table? on Splunk Search. 05-04-2020 08:55 AM
- Tagged How to set class for different fields using JavaScript for changing font color and background color in Splunk table? on Splunk Search. 05-04-2020 08:55 AM
- Posted Dynamic dashboard event handling on Splunk Search. 03-31-2020 08:44 PM
- Tagged Dynamic dashboard event handling on Splunk Search. 03-31-2020 08:44 PM
- Tagged Dynamic dashboard event handling on Splunk Search. 03-31-2020 08:44 PM
- Tagged Dynamic dashboard event handling on Splunk Search. 03-31-2020 08:44 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
05-16-2020
10:51 AM
Hi i am new to Splunk,
Export option is used using below code <a class="btn btn-primary" role="button" href="/api/search/jobs/$export_sid$/results?isDownload=true&timeFormat=%25FT%25T.%25Q%25%3Az&maxLines=0&count=0&filename=Input&outputMode=csv">Export</a>
Issue:
Search results are not exporting as CSV file, default value (i.e. ) is downloading for search results too.
this issue occurs when i use base search option in code. what will be solution if i use export option with base search. kindly help to resolve this issue.
**Note:* Here base search is mandatory for us.because export option is working properly without base search.
<form>
<label>Product</label>
<init>
<set token="ProductNo">*</set>
<set token="TproductNo">*</set>
</init>
<search>
<query>| makeresults | eval x=if($ProductNo$==1,"1","2")</query>
<done>
<condition match="$result.x$=="1"">
<set token="ProductNo">*</set>
<set token="TproductNo">*</set>
</condition>
<condition>
<unset token="TproductNo"></unset>
<eval token="TproductNo">substr($ProductNo$,1,len($ProductNo$)-2)</eval>
</condition>
</done>
</search>
<search id="baseSearch">
<query> source="log.2020-04-22" host="LTPCHE10CTA0405" | xmlkv maxinputs=10000 | rex field=_raw "((?<Type>(\w*))\s(?<Code>(\d+))\s((([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\-]*[a-zA-Z0-9])\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\-]*[A-Za-z0-9]))\s(?<TimeStamp>(\d{8}\s\d{6}))\s(?<TextMsg>([\w\s]+).*))" | rex field=TextMsg "([\w\s]*\W\s*(?<TrkNo>\d+)\s*(,)*(?<Msg2>[\w\s]*.*))" | rex field=TextMsg "((?<Msg1>([\w\s]*))\W\s*)" | rex field=TextMsg "(Before NO = Trk No = (?<TPTrkNo>\d+))" | rename "ts:productname" as productname "ts:productNo" as productNo | eval TLogTimeStamp=strftime(strptime(LogTimeStamp,"%Y%m%d%H%M%S"),"%m/%d/%Y %H:%M:%S %p") </query>
</search>
<fieldset submitButton="true">
<input type="text" token="ProductNo">
<label>Tracking No</label>
<default></default>
<change>
<condition value="">
<set token="ProductNo">1</set>
<unset token="TproductNo"></unset>
</condition>
</change>
</input>
<input type="checkbox" searchWhenChanged="true" token="xmlCheckBox">
<label>Raw Data</label>
<choice value="1">On</choice>
<change>
<condition match="$xmlCheckBox$=="1"">
<set token="xmlToken">1</set>
<unset token="tkninputPanel">0</unset>
</condition>
<condition>
<set token="tkninputPanel">1</set>
<unset token="xmlToken">0</unset>
</condition>
</change>
<delimiter> </delimiter>
</input>
</fieldset>
<row>
<panel depends="$tkninputPanel$">
<html depends="$export_button$">
<a class="btn btn-primary" role="button" href="/api/search/jobs/$export_sid$/results?isDownload=true&timeFormat=%25FT%25T.%25Q%25%3Az&maxLines=0&count=0&filename=Input&outputMode=csv">Export</a>
</html>
<table id="table1">
<search base="baseSearch">
<query> search TrkNo=$ProductNo$ OR TPTrkNo=$TproductNo$
| table Type TLogTimeStamp MsgCode TrkNo Msg1 Msg2 productname productNo
BWTextMsg | sort -TLogTimeStamp
</query>
<done>
<set token="export_sid">$job.sid$</set>
<set token="export_button">1</set>
</done>
</search>
<option name="count">100</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
<panel depends="$xmlToken$">
<title>XML Results</title>
<html depends="$exportXML_button$">
<a class="btn btn-primary" role="button" href="/api/search/jobs/$exportXML_sid$/results?isDownload=true&timeFormat=%25FT%25T.%25Q%25%3Az&maxLines=0&count=0&filename=InputXML.txt&outputMode=csv">Export</a>
</html>
<table id="table2">
<search base="baseSearch">
<query>
search TrkNo=$ProductNo$ OR TPTrkNo=$TproductNo$
| table TrkNo TLogTimeStamp Msg1 _raw | sort -TLogTimeStamp
</query>
<done>
<set token="exportXML_sid">$job.sid$</set>
<set token="exportXML_button">1</set>
</done>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
<option name="refresh.display">progressbar</option>
</table>
</panel>
</row>
</form>
... View more
Labels
- Labels:
-
other
05-04-2020
08:55 AM
Hi i am new to Splunk/JavaScript, Need your help for reducing my code, i have created two class for 2 fields, likewise we have 50 fields in splunk table. class is created for changing font and background color based on condition.
With this current approach i need to add/repeat 50 times (i.e.) for all the fields. Each time i need to add/call setTimeout(function() how can i customize the redundancy of the code for creating class and calling the setTimeout function for single time in javascript.
kindly find my code
enter code here
table.js
require([
'underscore',
'jquery',
'splunkjs/mvc',
'splunkjs/mvc/tableview',
'splunkjs/mvc/simplexml/ready!'
],
function(_, $, mvc, TableView) {
// Row Coloring Example with custom, client-side range interpretation
var CustomRangeRenderer = TableView.BaseCellRenderer.extend({
canRender: function(cell) {
// Enable this custom cell renderer for both the active_hist_searches and the active_realtime_searches field
//return _(["LOgType"]).contains(cell.field);
return true;
},
render: function($td, cell) {
// Add a class to the cell based on the returned value
var value = cell.value;
// Apply interpretation for string of autorización
if (cell.field === "LOgType") {
if (value == "error") {
$td.addClass('range-cell').addClass('range-severe');
}
}
if (cell.field === "ID") {
if(value!==null) {
$td.addClass('range-con').addClass('range-low');
}
if (cell.field === "Desc") {
if(value!==null) {
$td.addClass('range-cos').addClass('range-high');
}
}
// Update the cell content
$td.text(value).addClass("string");
}
});
mvc.Components.get('Table1').getVisualization(function(tableView) {
tableView.on('rendered', function() {
setTimeout(function(){
// Apply class of the cells to the parent row in order to color the whole row
tableView.$el.find('td.range-cell').each(function() {
$(this).parents('tr').addClass(this.className);
});
},100);
setTimeout(function(){
tableView.$el.find('td.range-con').each(function() {
$(this).parents('tr').addClass(this.className);
});
},100);
});
setTimeout(function(){
tableView.$el.find('td.range-cos').each(function() {
$(this).parents('tr').addClass(this.className);
});
},100);
});
`tableView.addCellRenderer(new CustomRangeRenderer()); // Add custom cell renderer, the table will re-render automatically.
});
});
table.css
#Table1 tr.range-severe td{
color: red;
}
#Table1 tr td.range-low{
background-color: #FFC597 !important;
}
#Table1 tr td.range-high{
background-color: #FFC597 !important;
}
... View more
03-31-2020
08:44 PM
Hello
I am new to Splunk. Would be great if you can help me with this.
Once I open the dash board , it has couple of radio buttons (Input and Output) with submit button. Screen Shot1. Please refer the attached screen shots.
*Input Radio Button/Input Panel*
Once I click input radio button, Input Panel displayed with 6 text fields & submit button. Screen Shot2
1. All the text fields are optional. When I click submit button without any value, it’s not responding. It should be submitted and run the input search query.
2. Surprisingly, this submit button manual click is sent to output panel (displayed once I click radio button Output) and executes the output search query. It’s linked with 3rd point..
Output Radio Button/Output Panel
3. Input Panel / Submit button – In case, I had clicked the submit button during Input Panel activity, it’s getting submitted to output panel and search query is getting executed. Refer 2nd point
4. In case, I had NOT clicked the submit button during Input Panel activity; Once I click the output radio button, Output panel is getting loaded which is expected (before doing any other activity in the dashboard)
Also, I want to hide the submit button from screen shot1. i.e.) as soon as, I open the dashboard, want to hide the submit button. On click of radio button, I want to display.
enter code here Test Dashboard
SearchBy Input Output true true EventType * TORID * SEC010Id * BUL010OrigId * BUL010DestinationId * SequencingNr * businessEventTrigger * rocsTourId * rocsMovementId * rocsOriginId * rocsDestinationId * tripLegSeqNbr *
<label>Test Dashboard</label>
<fieldset submitButton="true" autoRun="false">
<input type="radio" token="searchBy">
<label>SearchBy</label>
<choice value="1">Input</choice>
<choice value="2">Output</choice>
<change>
<condition value="1">
<set token="tkninput">true</set>
<unset token="tknoutput"></unset>
</condition>
<condition value="2">
<set token="tknoutput">true</set>
<unset token="tkninput"></unset>
</condition>
</change>
</input>
<input type="text" token="EventType" depends="$tkninput$">
<label>EventType</label>
<default></default>
<change>
<condition value="">
<set token="EventType">*</set>
</condition>
</change>
</input>
<input type="text" token="TORID" depends="$tkninput$">
<label>TORID</label>
<default></default>
<change>
<condition value="">
<set token="TORID">*</set>
</condition>
</change>
</input>
<input type="text" token="SEC010Id" depends="$tkninput$">
<label>SEC010Id</label>
<default></default>
<change>
<condition value="">
<set token="SEC010Id">*</set>
</condition>
</change>
</input>
<input type="text" token="businessEventTrigger" depends="$tknoutput$">
<label>businessEventTrigger</label>
<default></default>
<change>
<condition value="">
<set token="businessEventTrigger">*</set>
</condition>
</change>
</input>
<input type="text" token="rocsTourId" depends="$tknoutput$">
<label>rocsTourId</label>
<default></default>
<change>
<condition value="">
<set token="rocsTourId">*</set>
</condition>
</change>
</input>
</fieldset>
<row>
<panel depends="$tkninput$">
<title>Input Panel</title>
<table>
<title></title>
<search>
<query>
index="demodashboard1" sourcetype="DemoDashBoard1" | xmlkv maxinputs=10000 | rename "nspJ:TOR010Id" as TORID "nspMMM:EventType" as EventType | search ns0:ProcessId (EventType=$EventType$ OR businesseventtrigger) AND (TORID=$TORID$ OR rocsTourId=$TORID$) AND (nspM:SEC010Id=$SEC010Id$ OR rocsMovementId=$SEC010Id$) AND (nsSec:BUL010OrigId = $BUL010OrigId$ OR rocsOriginId=$BUL010OrigId$) AND (nsSec:BUL010DestinationId=$BUL010DestinationId$ OR rocsDestinationId=$BUL010DestinationId$) AND (nspM:SequencingNr=$SequencingNr$ OR tripLegSeqNbr) OR ((TORID=$TORID$ AND rocsTourId=$TORID$) AND (nspM:SEC010Id=$SEC010Id$ AND rocsMovementId=$SEC010Id$) AND (nsSec:BUL010OrigId=$BUL010OrigId$ AND rocsOriginId=$BUL010OrigId$) AND (nsSec:BUL010DestinationId=$BUL010DestinationId$ AND rocsDestinationId=$BUL010DestinationId$)) | table ns0:ProcessId EventType TORID nspM:SEC010Id nsSec:BUL010OrigId nsSec:BUL010DestinationId nspM:SequencingNr businessEventTrigger rocsTourId rocsMovementId rocsOriginId rocsDestinationId tripLegSeqNbr publishCd routeNm firstLegSchedDprtTmstp firstLegOrigin tripLegSeqNbr origin | dedup ns0:ProcessId
</query>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
<panel depends="$tknoutput$">
<title>Output Panel</title>
<table>
<title></title>
<search>
<query>
host="WTC-981558-L1" sourcetype=Mar16 source="TNTTRUCK_R2T - Copy.2020-03-05" | xmlkv maxinputs=10000 | rename "nspJ:TOR010Id" as TORID "nspMMM:EventType" as EventType | search ns0:ProcessId (EventType OR businessEventTrigger=$businessEventTrigger$) AND (TORID=$rocsTourId$ OR rocsTourId=$rocsTourId$) AND (nspM:SEC010Id=$rocsMovementId$ OR rocsMovementId = $rocsMovementId$) AND (nsSec:BUL010OrigId=$rocsOriginId$ OR rocsOriginId=$rocsOriginId$) AND (nsSec:BUL010DestinationId=$rocsDestinationId$ OR rocsDestinationId=$rocsDestinationId$) AND (nspM:SequencingNr OR tripLegSeqNbr=$tripLegSeqNbr$) OR ((TORID=$rocsTourId$ AND rocsTourId=$rocsTourId$) AND (nspM:SEC010Id=$rocsMovementId$ AND rocsMovementId = $rocsMovementId$) AND (nsSec:BUL010OrigId=$rocsOriginId$ AND rocsOriginId=$rocsOriginId$) AND (nsSec:BUL010DestinationId=$rocsDestinationId$ AND rocsDestinationId=$rocsDestinationId$))| table ns0:ProcessId EventType TORID nspM:SEC010Id nsSec:BUL010OrigId nsSec:BUL010DestinationId nspM:SequencingNr businessEventTrigger rocsTourId rocsMovementId rocsOriginId rocsDestinationId tripLegSeqNbr publishCd routeNm firstLegSchedDprtTmstp firstLegOrigin tripLegSeqNbr origin destination schedDprtTmstp
| selfjoin ns0:ProcessId
| dedup ns0:ProcessId
</query>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
</row>
</form>][1]
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:03 AM
|
