Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About alanxu
alanxu
Communicator
Member since:
06-29-2015
06-05-2020
Community Statistics
| Posts | 105 |
| Solutions | 0 |
| Karma Given | 49 |
| Karma Received | 0 |
| Member Since | 06-29-2015 |
Activity Feed
- Karma Re: How do I make a line graph with my timechart search? for sideview. 06-05-2020 12:47 AM
- Karma Re: Switching my code from Shell to Python and still use Splunk for richgalloway. 06-05-2020 12:47 AM
- Karma Re: Getting odd data uploaded to my Splunk for martin_mueller. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for tskinnerivsec. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for sideview. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for sideview. 06-05-2020 12:47 AM
- Karma Re: How do I make a line graph with my timechart search? for sideview. 06-05-2020 12:47 AM
- Karma Re: My alerts are not sending even though they are being listed under trigger history any ideas why? for alacercogitatus. 06-05-2020 12:47 AM
- Karma Re: Using a timechart, why are all the results not being shown on the dashboard? for acharlieh. 06-05-2020 12:47 AM
- Karma Re: Using a timechart, why are all the results not being shown on the dashboard? for alacercogitatus. 06-05-2020 12:47 AM
- Karma Re: Why does using time range "today" for timechart make it separate into 30 minute intervals? for martin_mueller. 06-05-2020 12:47 AM
- Karma Re: Why does using time range "today" for timechart make it separate into 30 minute intervals? for Richfez. 06-05-2020 12:47 AM
- Karma Re: Why are lines not showing up for line graph? for sideview. 06-05-2020 12:47 AM
- Karma Re: Why are lines not showing up for line graph? for woodcock. 06-05-2020 12:47 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-03-2015
09:51 AM
It is an output text file that is automatically indexed in Splunk.
And the alerts and dashboards are in the app now.
Thank you for your answer
... View more
09-03-2015
09:33 AM
Hello Everyone,
I presented my project to my team and one coworker had a few concerns about my dashboard.
1) If they rerun a script to get an output that replaces the old file, will my dashboard only include the new information? Or does the old information stay indexed even though the file was deleted?
And thank you Splunk Community with helping me these past weeks!
... View more
09-01-2015
12:09 PM
Thanks woodcock will try out now!
... View more
09-01-2015
10:33 AM
That is true. I think a work around I saw was changing it to a decimal. HH.MM
... View more
09-01-2015
10:20 AM
Hmm should I change TIME into a number? By removing the colons
... View more
09-01-2015
10:19 AM
Instead of making it a string should I be trying to make it a number so I can graph it? And the TIME is the TIME of the indexed information. I am in mountain time but Splunk is in GMT so I used TIME to get the mountain time.
... View more
09-01-2015
10:08 AM
And what I did was have it as a stats table first then I tried to convert it to a graph.. And you are correct TIME has colons.
... View more
09-01-2015
10:01 AM
Why will it be a strange graph?
... View more
09-01-2015
09:59 AM
Doing latest(Completion_Time) gives back no results
... View more
09-01-2015
09:58 AM
Yes I do have a field called TIME
... View more
09-01-2015
09:57 AM
I tried connect and zero, however nothing shows up still.
... View more
09-01-2015
08:32 AM
I would like to have completion time on the y axis.
... View more
09-01-2015
08:31 AM
Hello,
I am trying to put multiple lines on a line graph. However, the lines are not showing up. Here is a picture of the panel.
The XML for my dashboard is:
<row>
<panel>
<chart>
<title>Completion Times of Each "Thing"</title>
<searchString>host=... source = "..." SP Position="Finished" | eval Completion_Time=tonumber(replace(Completion_Time,"(\d+):(\d+):(\d+)","\1.\2")) | timechart limit=100 latest(TIME) as Completion_Time by FinishedName</searchString>
<earliestTime>$timetoken.earliest$</earliestTime>
<latestTime>$timetoken.latest$</latestTime>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.enabled">false</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.chart">line</option>
<option name="charting.chart.nullValueMode">gaps</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">all</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.placement">right</option>
<option name="wrap">true</option>
<option name="rowNumbers">false</option>
<option name="dataOverlayMode">none</option>
<option name="list.drilldown">full</option>
<option name="list.wrap">1</option>
<option name="maxLines">5</option>
<option name="raw.drilldown">full</option>
<option name="table.drilldown">all</option>
<option name="table.wrap">1</option>
<option name="type">list</option>
</chart>
</panel>
</row>
Can anyone give insight on this problem?
... View more
08-29-2015
05:49 PM
Ah I cant touch the .config file.
... View more
08-29-2015
05:06 PM
for 'span=1d' it works for 24 hours but not today... Is there a certain span that would work?
... View more
08-29-2015
04:50 PM
Oh so my span should be span=d
... View more
08-28-2015
03:31 PM
Hm I moved eval lines are still not coming up
... View more
08-28-2015
03:24 PM
Okay I will try now thanks sideview
... View more
08-28-2015
11:36 AM
So I am trying to create the graph now... my search is...
host=... source = "..." SP Position="Finished" | timechart limit=0 latest(TIME) as Completion_Time by FinishedName | eval Completion_Time=tonumber(replace(Completion_Time,"(\d+):(\d+):(\d+)","\1.\2"))
So I get the x axis having dates, y axis with numbers, and a legend including all the FinishedNames. However, there are no lines on graph. Is it because something is not a number, but a string?
... View more
08-28-2015
10:37 AM
How about if I want to put multiple lines... Like 25?
... View more
08-28-2015
10:37 AM
How about if I want hours and minutes?
... View more
08-28-2015
09:59 AM
Thank you for your help
... View more
08-28-2015
09:59 AM
Your answer was great I just chose the earlier one because it was similar
... View more
08-28-2015
08:49 AM
The search I am using is
host=... source = ... SP | timechart latest(TIME) as Completion_Time by BeginName | eval Completion_Time=tonumber(replace(Completion_Time,"(\d+):(\d+):(\d+)","\1.\2"))
So for BeginName there should have 26 different names, but on my dashboard, I only have 10 names. I was wondering if it's because all the names wouldn't fit?
... View more
