Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Urias
Urias
Engager
Member since:
01-22-2014
06-05-2020
Community Statistics
| Posts | 7 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 01-22-2014 |
Activity Feed
- Karma Re: Why am I getting less fields returned from a search with the stats command compared to transaction? for craigv_splunk. 06-05-2020 12:48 AM
- Posted How to create a dynamic selection of sources in a dashboard? on Dashboards & Visualizations. 12-22-2016 12:12 AM
- Tagged How to create a dynamic selection of sources in a dashboard? on Dashboards & Visualizations. 12-22-2016 12:12 AM
- Tagged How to create a dynamic selection of sources in a dashboard? on Dashboards & Visualizations. 12-22-2016 12:12 AM
- Tagged How to create a dynamic selection of sources in a dashboard? on Dashboards & Visualizations. 12-22-2016 12:12 AM
- Tagged How to create a dynamic selection of sources in a dashboard? on Dashboards & Visualizations. 12-22-2016 12:12 AM
- Tagged How to create a dynamic selection of sources in a dashboard? on Dashboards & Visualizations. 12-22-2016 12:12 AM
- Posted Re: Is there a way to retrieve a saved search that was accidentally deleted? on Getting Data In. 12-22-2016 12:01 AM
- Posted Is there a way to retrieve a saved search that was accidentally deleted? on Getting Data In. 12-15-2016 01:13 AM
- Tagged Is there a way to retrieve a saved search that was accidentally deleted? on Getting Data In. 12-15-2016 01:13 AM
- Tagged Is there a way to retrieve a saved search that was accidentally deleted? on Getting Data In. 12-15-2016 01:13 AM
- Tagged Is there a way to retrieve a saved search that was accidentally deleted? on Getting Data In. 12-15-2016 01:13 AM
- Tagged Is there a way to retrieve a saved search that was accidentally deleted? on Getting Data In. 12-15-2016 01:13 AM
- Posted Re: Why am I getting less fields returned from a search with the stats command compared to transaction? on Splunk Search. 07-08-2016 04:41 AM
- Posted Re: Why am I getting less fields returned from a search with the stats command compared to transaction? on Splunk Search. 07-08-2016 04:40 AM
- Posted Re: Why am I getting less fields returned from a search with the stats command compared to transaction? on Splunk Search. 07-08-2016 04:35 AM
- Posted Why am I getting less fields returned from a search with the stats command compared to transaction? on Splunk Search. 07-07-2016 01:50 AM
- Tagged Why am I getting less fields returned from a search with the stats command compared to transaction? on Splunk Search. 07-07-2016 01:50 AM
- Tagged Why am I getting less fields returned from a search with the stats command compared to transaction? on Splunk Search. 07-07-2016 01:50 AM
- Tagged Why am I getting less fields returned from a search with the stats command compared to transaction? on Splunk Search. 07-07-2016 01:50 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
12-22-2016
12:12 AM
I have multiple sources with information for an event. I want to make a Dashboard with a total overview of all info available on a given event, but be able to select which sources are displayed. As there are many sources and not all of them always contain event data, I want a dynamic list of check boxes to get a best possible workflow.
I've attempted with a "Multiselect" field dynamically populated with ... | stats values(sourcetype) as types | mvexpand types , but the resulting UI is quite hard to use. I see the ideal solution as a dynamic list of sources with info on the event where the user can select or deselect sources individually.
Is this possible, and how can I achieve this?
... View more
12-22-2016
12:01 AM
Thanks. I will then just have to be very careful in deleting stuff...
... View more
12-15-2016
01:13 AM
Is there a way to get back a saved search which is accidentally deleted? I cannot seem to find any "recycle bin" for deleted knowledge objects within Splunk Web.
It is sometimes too easy to hit the Delete-link of the wrong saved search...
... View more
07-08-2016
04:41 AM
Great, thanks for the nice explanation! It does not always seem obvious which choice is best here...
... View more
07-08-2016
04:40 AM
Thanks. I probably want the "transaction" command, I assume. Although it is not always obvious to me what is the right choice. (See comment to the question for details)
... View more
07-08-2016
04:35 AM
I have multiple log files with multiple events (with multiple fields) for a session which I'd like to display for a given session. Put simply, I can then do either:
1. search sessionID=1234 | stats values(*) as * by sessionID | table * | transpose
2. search sessionID=1234 | transaction sessionID | table * | transpose
The goal is to list all fields and values for easy inspection. With the first search I hit some limitation in log lines with many fields. This does not occur in the second search.
... View more
07-07-2016
01:50 AM
Hello!
I've been told to use stats values() instead of transaction for performance issues. However, with long log files with many fields, there seems to be some limitations to the stats command as I get fewer fields returned compared to using transaction .
Should I still be using the stats command? How can I ensure all fields and values are included?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:03 AM
|
