I've been looking in the splunk dashboard examples and I'm trying to find the example that mimics the main launcher page but I haven't yet found it. Currently, I have a nav UI setup with keyword sorting of saved searches and I'd like to convert those into panels on the page but have them movable like the main search page but I haven't been able to find that example. Has anyone been successful in finding this? the home.xml file seems to just point to a template in html but I'm assuming theres a way to do this in xml? ... View more

I've written a little python one-liner that basically calls showmount -a with an argv array at the end and my goal is to be able to feed it a list of hosts and get the showmount output for each host. if I do: | showmount this works if I do host=pattern* | showmount host nothing happens. this is the extent of my oneliner: subprocess.call(['showmount', '-a', sys.argv[1]]) What can I do to make this actually show me a list per host with each host being an event? ... View more

I've created some new thresholds in the vmware app settings, but they only show up for me, other people hit the proactive monitoring page and get errors saying that a threshold is not set for the given value. I've been trying to find where that might be defined so I can fix it, but should this be the desired behavior of the thresholds? ... View more

I have tried all sorts of ways to do this and none have worked. All I really want to accomplish is have a file hyperlink pointing to a template email I've created for a specific dashboard panel I use.. this is the latest attempt, where the link to google is, I would simply replace with Click to send email index=main password expired | convert ctime(_time) as time| stats values(host) earliest(time) by user | rename user as "Account Name" | rename values(host) as "Servers Involved" | rename earliest(time) as "Time of first occurance:" | chart values("Account Name") values("Time of first occurance:") by "Servers Involved" | rename values("Account Name") as "Account Name:" | rename values("Time of first occurance:") to "Time Of First Occurance:" Hosts reporting Expired Accounts in the last 7 days -7d@d now Servers connect default false right "" "" "" all <a href="http://www.google.com">test</a> ... View more

Has anyone looked into integrating other visualization tools like weave into splunk dashboards? It would be really cool to be able to visualize splunk results in such a way. I'm a very big fan of particle, but there isn't much else in that space of visualization out there. Here are a few I've looked at but haven't made much progress to date. http://oicweave.org/ http://www.gibson3d.org/ ... View more