Hi, Have anyone found a way to change default language (english) when using splunk js in your own web( outside of splunk web)? By using spkunk view components, it is only in english ? I have been searching through official document but could not find any useful information. Thanks ! It s an example of TimeRangeView in english. I want to change it to french.   // Create a custom time range picker // Show the Presets panel, hide the Real-time and Advanced panels var mypresetsettings = { showCustomDateTime: false, showPresets: false, showCustomRealTime: false, showCustomAdvanced: false, showCustomRelative: false, showCustomDate: true }; // Instantiate a view using the custom time range picker var mytimerange_custom = new TimeRangeView({ id: "example-timerange_custom", managerid: "search3", earliest_time: "-7d", latest_time:"now", dialogOptions: mypresetsettings, el: $("#mytimerangeview_custom") }).render(); console.log(mytimerange_custom.val()); // Update the search manager when the time range changes mytimerange_custom.on("change", function () { mysearch3.settings.set(mytimerange_custom.val()); //mysearch4.setting.set(mytimerange_custom.val()); });   ... View more

Hi, I try to test a simple chart option "charting.legend.mode": "seriesCompare" via ChartView components of the Splunk Web Framework . I want the legend display/compare all  differences point values of 4 lines as we move alongs the line.  Is this a limite of ChartView or i am missing something here? thanks for your time!!! able to do in Splunk Entreprise only: g.highcharts legend not able to display difference point values. Seem like, option standard is the only avaiable option.   ... View more

Hi all, It would be great if anyone have a solution for my timechart xaxis issue.  Thanks in advance for you time and effort. Here is the problem: A timechart (5 line charts) with span=30min earliest=-180d@d. _time transforms to | eval Date=strftime(Date, "%d/%m/%y %H:%M") . Since i dont use the _time var, so timechart does not display the Xaxis time interval ( 1st pic). If i zoom in, the Xaxis tecxt will be visible( 2nd pic). Is this possible to have xaxis time interval text ( by month 12 01 02 03 04 05 06). Because without it, user have to move the mouse to read lien chart by the tooltip box.  restriction: I need to respect the format "%d/%m/%y %H:%M" so i could not use default _time ( which is available in SPLUNK) 1st : without zoom, need to depend on tooltip to know the Date 1st 2nd: zoom, xaxis lable become visible What i looking to acheive by either ccs or SPL( dont think it is possible) xaxis time interval text ( by month %m or %d/%m/%y %H:%M could be great) thanks ... View more

Hi all, Is this possible to have an custom url with hyperlink in inline table option? Q: I would like to send an email notification action for an alert. In the inline table, content a hyperlink. In dashboard, we can do it with drilldown link to custom URL. Is this a possible way  to have this behaviour in email alert ? thanks in advance ... View more

Hi , Is this possible to hide a line (ex splunkd) in this linechart by clicking on it? Thanks in advance Huong ... View more

Hi, have you tried to do something like this ? I need to calculate the duration and then calculate a % availability line chart(timechart). I could do it with 2 months consecutive but it is not a good solution. Input: begin end 2020-03-06 2020-07-06   Expected output: begin end 2020-03-06 2020-03-31 2020-04-01 2020-04-30 2020-05-01 2020-05-31  2020-06-01 2020-06-30  2020-07-01 2020-07-06 Thanks in advance.     | makeresults | eval begin = "2020-01-15" , end ="2020-01-30", id="111" | makemv delim="," id | makemv delim="," begin | makemv delim="," end | append [| makeresults | eval begin = "2020-02-15" , end ="2020-02-28", id="111" | makemv delim="," id | makemv delim="," begin | makemv delim="," end] | append [| makeresults | eval begin = "2020-03-06" , end ="2020-07-06", id="111" | makemv delim="," id | makemv delim="," begin | makemv delim="," end] | append [| makeresults | eval begin = "2020-10-15" , end ="2020-10-30", id="111" | makemv delim="," id | makemv delim="," begin | makemv delim="," end] | append [| makeresults | eval begin = "2020-12-15" , end ="2020-12-30", id="111" | makemv delim="," id | makemv delim="," begin | makemv delim="," end] | eval begin_m = substr(begin,6,2), end_m = substr(end,6,2) | eval x= if('begin_m' != 'end_m' ,1,0) | where x ==1 | fields- begin_m end_m x | eval end_unix=strptime(end,"%Y-%m-%d") | eval begin_unix=strptime(begin,"%Y-%m-%d") | eval begin_new=strftime(relative_time(begin_unix,"+1mon@mon"), "%Y-%m-%d %H:%M:%S+%2Q") | eval end_new=strftime(relative_time(begin_unix,"+1mon@mon-1second@second"), "%Y-%m-%d %H:%M:%S+%2Q") | eval end = mvappend(end,end_new), begin = mvappend(begin,begin_new) | mvexpand end | mvexpand begin | eval begin_m = substr(begin,6,2), end_m = substr(end,6,2) | eval x= if('begin_m' != 'end_m' ,1,0) | where x !=1 | fields - begin_m begin_new begin_unix end_m end_new end_unix | eval end_unix=strptime(end,"%Y-%m-%d") | eval begin_unix=strptime(begin,"%Y-%m-%d") | eval duration_d = round((end_unix-begin_unix)/(3600*24),2) | fields - end_unix begin_unix     ... View more

Hi Splunkers, I would like to ask your options on my dashboard. I have just started with Splunk for almost 2 months so why not asking experts on Splunk Community.  Problem:  By clicking on the line chart 1(imagine: % sales by months). The line chat will transform to multi series line chart 2(imagine: % sales by categories by months). To go back to : Click on any of the multi series line chart 2. However, 1. The multi series line chart  2 contains basedsearch + join on (_time and categories) + [subsearch]. It is quite complicated query to build. 2. the goal is delivering Splunk views on our own website through Splunk JS Stack. I have done some charts/ tables views but have never sending drilldown option, so I am kind of worry about the limit of drilldown actions on SplunkJS. I hope that I will not facing any problem with JS. My solution for the moment is : a hidden multi series line chart 2 popup when clicking on the chart 1(token $click.value2$). To go back, i am going to create a check box with token to go back. I totally not happy with my solution but I dont have any other ideals. My solution is creating 2 line charts in stead of updating the original chart and I need a check box or some thing to go back.  looking forward to hearing your discussion  ... View more

  Hi all, Anyone know how to turn the green column chart to a linechart. I have used the properties "charting.chart.overlayFields":"% dispo" but no success. It seems like this properties is not working with SplunkJS Stack. Any thought? Thanks for your time. Looking forward to hearing your discussion.   ... View more