Try  https://community.splunk.com/t5/Knowledge-Management/Solutions-quot-Splunk-could-not-get-the-description-for-this/td-p/694752 ... View more

Hi @yeahnah, That did the trick. It's working now...  hosts are renamed and data is rerouted into the correct index. Thanks a lot, cheers ... View more

Hi, I just upgrade the app to a recent version and the issue is gone. Try that! Regards, Vinícius Leite ... View more

Sorry for the late answer. Here is the solution for version 6.2.4: |autoregress Event | eval sameAsNext=if(Event=Event_p1,1,0) | streamstats current=t count(eval(sameAsNext=0)) AS sessionID | eventstats count AS inArowCount BY sessionID | search sameAsNext=0 | fields Event inArowCount ... View more

You can but you would need Latitude/Longitude of the location. Splunk Software ships with geo_attr_countries.csv and geo_attr_us_states.csv which give Latitude Longitude based on US States and all the countries of the world. There is also similar kmz file which comes with Splunk geo_countries.lmz and geo_us_states.kmz which are used for Choropleth Maps You can also search online for Latitude/Longitude based on City/State/Country etc. As far as you are able to link location in your data with Longitude and Latitude you should be able to plot Map using geostats command ( geom command for choropleth which requires region ). Hope this helps. If not, get the Splunk Dashboard Examples App as stated in previous comment to get Examples and understand how these work. ... View more

changed the typo ... View more

any other suggestion? could it be a bug? ... View more