Hello  "Good Day"  🙂  How to add the progress bar inside the cell in dashoard.i need the dashboard panel format in the below way I want to show the progress bar inside the table format panel.Could please help me out with this? ... View more

Hello splunk  I want to create a v  model structure  in dashboard I am not aware of it can you please help me with the it.I am posting a picture  below. How I want to create dashboard. Thanks in advance Renuka   ... View more

Hello  I have table  in my dashboard        ID Jan_Target Jan_Actual 1 50 60 2 0 N/A In similar way  for all months now i need a filter.If i select a january it should show both Jan_Target and Jan_actual  My query |inputlookup ABC |table Id" Jan - Target" "Jan - Actual" "Feb - Target" "Feb - Actual" "Mar - Target" "Mar - Actual" "Apr - Target" "Apr - Actual" "May - Target" "May - Actual" "Jun - Target" "Jun - Actual" "Jul - Target" "Jul - Actual"... I tried  using search Jan*  but no results found  can you please help me with this? ... View more

Hello All "Good Day" index="aedc" | rex field=source "-_(?<source>\S+)" | rex "(?<ModuleID>MY\d+)" | rex "(?<Path>/F.\s\S+\s\S+\s\S+\s\S+\s\S{5})" |search"source"="*" MY22 "CRS_ASIL"="*" * |rename "TC_D2_Test Result" as Result, TC_D2_Execution_date as verified_Date,"CRS__TestType" as TestType | rename CRS__implementation_phase as CRS_IP, "TC_Test Result" as result | eval verified_Date=if((verified_Date == "Attr not found : D2_Execution_date"),null(),verified_Date) |eval Date=strptime(verified_Date, "%a %d %B %Y %H:%M:%S")|eval date=if(Date>1604600000.000000 OR Date>1602000000.000000,Date,0) | eval First_Date=verified_Date, sortstring="~" |eval date=if(Date>1604600000.000000 OR Date>1602000000.000000 ,Date,0) | append [|inputlookup DoorsMappingwithDatenopartial.csv |append[| inputlookup DoorsMappingNoDate.csv |where bPartialResultsEnabled="FALSE"]] | stats count(eval(Path="/F. System Testing/System Functional Test Cases")) as "Functional Total",count(eval(Result=case(Path="/F. System Testing/System Functional Test Cases" AND date=Date ,Result))) as "Functional Test Conducted",count(eval(Result=case(Path="/F. System Testing/System Functional Test Cases" AND Result="Pass" OR Result="PASS" AND date=Date,Result))) as "Functional Pass",count(eval(Result=case(Path="/F. System Testing/System Functional Test Cases"AND Result="Fail" OR Result="FAIL" AND date=Date,Result))) as "Functional Fail" by "CRS_Customer Requirement Identifier" |eventstats sum("Functional Total") as Functional_Total,sum("Functional Test Conducted") as "Functional Test Conducted",sum("Functional Pass") as "Functional Pass",sum("Functional Fail") as "Functional Fail"|table Functional_Total,"Functional Test Conducted","Functional Pass","Functional Fail" Above is my query in the query i am trying to add condition using lookup files  Condition is if bPartialResultsEnabled is False we should consider date in functional count if it is true we should not consider date I tried all possible ways ,I know Please help me out.. Thank you in advance ... View more

Hello All "Good Day" index="aedc" | rex field=source "-_(?<source>\S+)" | rex "(?<ModuleID>MY\d+)" | rex "(?<Path>/F.\s\S+\s\S+\s\S+\s\S+\s\S{5})" |search"source"="*" MY22 "CRS_ASIL"="*" * |rename "TC_D2_Test Result" as Result, TC_D2_Execution_date as verified_Date,"CRS__TestType" as TestType | rename CRS__implementation_phase as CRS_IP, "TC_Test Result" as result | eval verified_Date=if((verified_Date == "Attr not found : D2_Execution_date"),null(),verified_Date) |eval Date=strptime(verified_Date, "%a %d %B %Y %H:%M:%S")|eval date=if(Date>1604600000.000000 OR Date>1602000000.000000,Date,0) | eval First_Date=verified_Date, sortstring="~" |eval date=if(Date>1604600000.000000 OR Date>1602000000.000000 ,Date,0) | append [|inputlookup DoorsMappingwithDatenopartial.csv |append[| inputlookup DoorsMappingNoDate.csv |where bPartialResultsEnabled="FALSE"]] | stats count(eval(Path="/F. System Testing/System Functional Test Cases")) as "Functional Total",count(eval(Result=case(Path="/F. System Testing/System Functional Test Cases" AND date=Date ,Result))) as "Functional Test Conducted",count(eval(Result=case(Path="/F. System Testing/System Functional Test Cases" AND Result="Pass" OR Result="PASS" AND date=Date,Result))) as "Functional Pass",count(eval(Result=case(Path="/F. System Testing/System Functional Test Cases"AND Result="Fail" OR Result="FAIL" AND date=Date,Result))) as "Functional Fail" by "CRS_Customer Requirement Identifier" |eventstats sum("Functional Total") as Functional_Total,sum("Functional Test Conducted") as "Functional Test Conducted",sum("Functional Pass") as "Functional Pass",sum("Functional Fail") as "Functional Fail"|table Functional_Total,"Functional Test Conducted","Functional Pass","Functional Fail" Above is my query in the query i am trying to add condition using lookup files  Condition is if bPartialResultsEnabled is False we should consider date in functional count if it is true we should not consider date I tried all possible ways ,I know Please help me out.. Thank you in advance ... View more

Hello  Suppose  I have a dashboard with some filters and drilldowns as shown in below figure The drilldown is attached with another dashboard.Once i click on the drilldown in directs to another dashboard..if i select any dropdown filter suppose if i select  filter Grouping category(ModuleName) as  in fig 1..same select option should reflect  in the  filter Grouping category filter of drilldown dashboard in fig 2.                                                                      Fig-1:Main dashboard                                                                                           Fig-2 Drilldown dashboard Thank you in advance ... View more

Hello ALL I want the alternative search  for the following search command |bin span=1W _time aligntime=latest  which gives same  output ... View more