Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About priyanka0309
priyanka0309
New Member
Member since:
01-19-2018
06-05-2020
Community Statistics
| Posts | 7 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 01-19-2018 |
Activity Feed
- Posted dbx date parameters for apache drill in splunk on Splunk Search. 04-04-2019 03:04 PM
- Tagged dbx date parameters for apache drill in splunk on Splunk Search. 04-04-2019 03:04 PM
- Posted How to get the on click marker gauge redirect to a dashboard? on Dashboards & Visualizations. 04-06-2018 01:46 PM
- Tagged How to get the on click marker gauge redirect to a dashboard? on Dashboards & Visualizations. 04-06-2018 01:46 PM
- Tagged How to get the on click marker gauge redirect to a dashboard? on Dashboards & Visualizations. 04-06-2018 01:46 PM
- Tagged How to get the on click marker gauge redirect to a dashboard? on Dashboards & Visualizations. 04-06-2018 01:46 PM
- Posted How to convert feb 1 01:03:20 2018 to epoch time? on Splunk Search. 02-02-2018 01:38 PM
- Tagged How to convert feb 1 01:03:20 2018 to epoch time? on Splunk Search. 02-02-2018 01:38 PM
- Tagged How to convert feb 1 01:03:20 2018 to epoch time? on Splunk Search. 02-02-2018 01:38 PM
- Posted Re: I am looking for a functionality we can create csv look ups based on Month in splunk. Is this possible. Is it possible to delete data based on a certain conditions in lookup ? on Splunk Search. 01-21-2018 12:16 AM
- Posted Re: I am looking for a functionality we can create csv look ups based on Month in splunk. Is this possible. Is it possible to delete data based on a certain conditions in lookup ? on Splunk Search. 01-20-2018 11:31 PM
- Posted Re: I am looking for a functionality we can create csv look ups based on Month in splunk. Is this possible. Is it possible to delete data based on a certain conditions in lookup ? on Splunk Search. 01-20-2018 07:58 PM
- Posted I am looking for a functionality we can create csv look ups based on Month in splunk. Is this possible. Is it possible to delete data based on a certain conditions in lookup ? on Splunk Search. 01-19-2018 03:50 PM
- Tagged I am looking for a functionality we can create csv look ups based on Month in splunk. Is this possible. Is it possible to delete data based on a certain conditions in lookup ? on Splunk Search. 01-19-2018 03:50 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
04-04-2019
03:04 PM
I am trying to use apache drill to query mapr data via splunk.
Using a dbx to use the name
|dbxquery connection="Drill_" query="select count(a) as a, cast(TIME as date) as day
from table where time >= ? AND time <= ?
group by cast(TIME as date) " [|makeresults | addinfo | eval et=round(info_min_time, 0) | eval lt=if(info_max_time='+Infinity', 'now', round(info_max_time, 0)) | eval et=strftime(et,"%F")|eval lt=strftime(lt,"%F %T.%1N") | eval params=et.",".lt | fields params | format "" "" "" "" "" ""]
I get the error java.sql.SQLException: [MapR]JDBC Invalid parameter index: 1.
Looking for help
... View more
- Tags:
- splunk-enterprise
04-09-2018
04:33 AM
@priyanka0309, I dont think drilldown is enabled for Filler or Marker gauge. Since Filler Gauge actually displays the statistical data on the svg chart, you can use Simple XML JavaScript extension with SplunkJS stack to get the clicked value from chart and assign to token.
Following is a run anywhere dashboard example with JavaScript Code.
PS: CSS Style override is applied in the Simple XML code to make the cursor as pointer.
<dashboard script="fillergauge_drilldown.js">
<label>Drilldown for Filler Gauge</label>
<row>
<panel>
<html depends="$alwaysHideCSSPanel$">
<style>
#fillerGauge svg rect{
cursor:pointer !important;
}
</style>
</html>
</panel>
<panel>
<title>Filler Gauge</title>
<chart id="fillerGauge">
<title>Clicked Value : $tokValue$</title>
<search>
<query>index=_internal sourcetype=splunk_web_access status=*
| stats count as Total count(eval(status!=200)) as Fail
| eval Perc=round((Fail/Total)*100,1)
| fields Perc</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.abbreviation">none</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.abbreviation">none</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.abbreviation">none</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.chart">fillerGauge</option>
<option name="charting.chart.bubbleMaximumSize">50</option>
<option name="charting.chart.bubbleMinimumSize">10</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">gaps</option>
<option name="charting.chart.rangeValues">[0,10,20,100]</option>
<option name="charting.chart.showDataLabels">none</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">all</option>
<option name="charting.gaugeColors">["0x84E900","0xFFE800","0xBF3030"]</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.mode">standard</option>
<option name="charting.legend.placement">right</option>
<option name="charting.lineWidth">2</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
</chart>
</panel>
</row>
</dashboard>
Following is the corresponding JavaScript fillergauge_drilldown.js required. The same needs to be placed under your Splunk App's appserver/static folder i.e. $SPLUNK_HOME/etc/apps/<yourAppName>/appserver/static . You might need to refresh/bump/restart Splunk and also clear internet browser history.
require([
'jquery',
'splunkjs/mvc',
'splunkjs/mvc/simplexml/ready!'
], function($,mvc){
var defaultTokenModel=mvc.Components.get("default");
var submittedTokenModel=mvc.Components.get("submitted");
$(document).on("click", "#fillerGauge svg rect", function() {
var strValue=$("#fillerGauge svg text:last-child").text();
if (strValue!==undefined){
defaultTokenModel.set("tokValue",strValue);
submittedTokenModel.set("tokValue",strValue);
console.log("strValue:",strValue);
}
});
});
... View more
03-05-2018
07:21 AM
I am up voting the post because it works as expected for the provided sample date feb 1 01:03:20 2018
Following is the run anywhere search to test the same:
| makeresults
| eval LAST_UPDATE="feb 1 01:03:20 2018"
| eval reporteddate = strptime(LAST_UPDATE, "%b %d %H:%M:%S %Y")
@abhishekroy168, For us to assist you better, can you please provide sample Date format of what you have. If it differs from this question you can post your own question.
Downvoting should only be reserved for suggestions/solutions that could be potentially harmful for a Splunk environment or goes completely against known best practices. Simply commenting with constructive feedback on the post you are concerned with will be more beneficial for the community to learn from.
Some of the most active members in Answers have helped set the standard of how voting etiquette should work in the Splunk community which distinguishes our culture apart from other Q&A forums. Upvote early and often to give credit where it’s due for high quality posts, comment where you think feedback needs to be given, and only downvote if something potentially dangerous is suggested or people are just being inappropriate.
If you’re interested in seeing how this voting etiquette was developed, check out this Splunk Answers post: https://answers.splunk.com/answers/244111/proper-etiquette-and-timing-for-voting-here-on-ans.htmlon-ans.html
... View more
01-21-2018
12:26 AM
You can overwrite existing csv lookup using |outputlookup command or you can append lookup using append=t stanza but you can not update part of the data in csv lookup .for updating part of data you need to use KVStore lookup
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:03 AM
|
