Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About snorri
snorri
Path Finder
Member since:
10-10-2017
06-05-2020
Community Statistics
| Posts | 17 |
| Solutions | 0 |
| Karma Given | 7 |
| Karma Received | 3 |
| Member Since | 10-10-2017 |
Activity Feed
- Got Karma for Re: How do you add a field/column to an existing kvstore?. 02-08-2024 02:08 AM
- Karma Re: What is the best practice when creating a custom index in a indexer? for tiagofbmm. 06-05-2020 12:49 AM
- Karma Re: What is the best practice when creating a custom index in a indexer? for sloshburch. 06-05-2020 12:49 AM
- Karma Re: How do you add a field/column to an existing kvstore? for 493669. 06-05-2020 12:49 AM
- Karma Re: Creating an "About this dashboard" popup modal view when opening a dashboard for niketn. 06-05-2020 12:49 AM
- Got Karma for What is the best practice when creating a custom index in a indexer?. 06-05-2020 12:49 AM
- Got Karma for Creating an "About this dashboard" popup modal view when opening a dashboard. 06-05-2020 12:49 AM
- Karma Re: How to know the user role in splunk for somesoni2. 06-05-2020 12:48 AM
- Karma Re: Does anyone have splunk file structure diagram for mroman_splunk. 06-05-2020 12:48 AM
- Karma Re: How to troubleshoot why my universal forwarder is not phoning home? for aljohnson_splun. 06-05-2020 12:47 AM
- Posted Re: Display all values at time when hoovering over timechart on Splunk Search. 10-11-2018 03:32 AM
- Posted Re: Display all values at time when hoovering over timechart on Splunk Search. 10-11-2018 03:21 AM
- Posted Display all values at time when hoovering over timechart on Splunk Search. 10-11-2018 03:01 AM
- Tagged Display all values at time when hoovering over timechart on Splunk Search. 10-11-2018 03:01 AM
- Tagged Display all values at time when hoovering over timechart on Splunk Search. 10-11-2018 03:01 AM
- Tagged Display all values at time when hoovering over timechart on Splunk Search. 10-11-2018 03:01 AM
- Posted Re: Creating an "About this dashboard" popup modal view when opening a dashboard on Dashboards & Visualizations. 09-28-2018 05:27 AM
- Posted Re: How do you add a field/column to an existing kvstore? on Knowledge Management. 09-25-2018 02:25 AM
- Posted Re: How do you add a field/column to an existing kvstore? on Knowledge Management. 09-25-2018 02:24 AM
- Posted Re: How do you add a field/column to an existing kvstore? on Knowledge Management. 09-24-2018 05:08 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 1 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
10-11-2018
03:32 AM
I have looked in to that, but it can be as much as 15 different values and that wont look good. Also this is a request from an client so this is not the way I want to solve it. Do you know if my initial question is even possible?
... View more
10-11-2018
03:21 AM
unfortunately the answer in that link does not solve the issue I am asking, it does provide an optional solution, but that doesent show multiple data datapoints at the same time.
... View more
10-11-2018
03:01 AM
I have a timechart with multiple values/graphs.
When hoovering my mouse over the timechart I can only see one value at the time in the tooltip. (see pictures)
Is it possible to display all values at a certain time when hoovering over?
eks: at 6.10 AM I have two datapoints (8,592 and 0), so when the mouse is positioned at 6.10 AM I want both those values displayed.
... View more
09-28-2018
05:27 AM
Hi @ppablo_splunk
I came to the conlusion that using bootstrap to solve my initial problem was hopeless so I ended opp writing my own modal. Saying that, @niketnilay suggestion did indeed solve this question so I will upvote and accept. thanks for the reminder.
... View more
09-25-2018
02:25 AM
1 Karma
I added the field in: lookup defenition, collections.conf and transforms.conf.
After restarting the new field appeard. Thanks alot!
... View more
09-25-2018
02:24 AM
I added the field in: lookup defenition, collections.conf and transforms.conf.
After restarting the new field appeard. Thanks alot!
... View more
09-24-2018
05:08 AM
hm. I have already done this, also in the lookup definitions. Is it enough to _bump the splunk version or do I have to restart splunk for the changes to take effect?
... View more
09-24-2018
04:43 AM
We have a kvstore that has been used for about a year.
Now we need to add a new field/column to the kvstore, but we can't find any info on how to do this or if it's even possible.
So my question is: is this possible? if so, how?
Or is the only option to create a completely new kvstore?
... View more
08-26-2018
10:57 PM
1 Karma
Hi all!
I am developing an app which contains a lot of dashboards and I want the users be prompted with information about each dashboard when opening it. I'm also planning on letting the user choose to check for "Do not show this message again", but first things first.
How can I create a simple popup like this: https://www.splunk.com/blog/2014/02/24/using-bootstrap-modal-with-splunk-simple-xml.html except that I want it to pop up when opening the dashboard without having to click an "info" button.
Unfortunately I have very little experience with javascript, but not afraid to use it.
Really hope somone will be able to help me out, I'm running out of keywords to google
... View more
03-15-2018
05:52 AM
It does, thank you!
... View more
03-13-2018
05:43 AM
Using Splunk Web is not an option and I have no problem using cli or editing the config file with vim. I am just wondering why Splunk docs says to edit /system/local/indexers.conf, but using the cli command does this in /app/search/local/indexers.conf
... View more
03-13-2018
04:52 AM
Nice! Thank you.
Can you think of why when using option 3, Splunk docs tells you to place it in /system/local rather than /apps/search/local
... View more
03-13-2018
03:37 AM
1 Karma
I have an indexer where I want to add index 'web'
Looking at this page: http://docs.splunk.com/Documentation/Splunk/7.0.2/Indexer/Setupmultipleindexes
It seems you can do this in a couple of ways:
1. Splunk Web
2. CLI
3. Edit indexes.conf
When using CLI (2), indexers.conf is created in $SPLUNK_HOME/etc/apps/search/local
When editing indexes.conf (3) it says to put it in $SPLUNK_HOME/etc/system/local
Why is this and which is the best practie?
... View more
03-08-2018
03:23 AM
I'm trying to set up a simple Splunk environment, but when running:
$SPLUNK_HOME/bin/splunk add search-server http://192.168.4.210:8089 -auth admin:password -remoteUsername admin -remotePassword password
I get this message:
An authentication error occurred: Client is not authenticated
I'm kind of new to this and have been googling for a couple of Hours now with no luck.
Why am I getting this error, and how can I make this work?
... View more
11-12-2017
12:51 PM
Im trying to represent som values with geostats, when I do this:
| geostats values(OK) by name
geostats present the results in a acceptable way:
But when I put in two values:
| geostats values(OK) values(NOK) by name
geostats presents the results like this:
Why is this? And how can I rename it?
... View more
10-23-2017
04:47 AM
I have data coming in from two different sources wich both contains the same fieldname.
how can I tell them apart in a search.
For example:
source1 have a field named ID and so does source2.
How can I rename the ID from source1 to ID1 and the ID from source2 to ID2?
... View more
10-10-2017
02:13 AM
I have a file that contains one really long line, see below
Example:
["2017-10-09 13:05",976.0,"OK"],["2017-10-09 13:06",908.0,"OK"],["2017-10-09 13:07",1001.0,"OK"] ...... And so on..
How can I break up each ["2017-10-09 13:05",976.0,"OK"] into events?
I first tried to accomplish this in props.conf with no luck.
So now Im adding the file using "upload file" just to see if I can breake the line, still with no luck..
Any pointers would be much appriciated
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:03 AM
|
