Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About a1bg503461
a1bg503461
Explorer
Member since:
01-23-2023
4 weeks ago
Community Statistics
| Posts | 24 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 01-23-2023 |
Activity Feed
- Posted Re: Change Font Color in Dashboard Table on Splunk ITSI. 11-26-2024 05:18 AM
- Posted Re: CSS Coloring a Stats Classic Dashboard on Dashboards & Visualizations. 11-25-2024 11:42 PM
- Posted CSS Coloring a Stats Classic Dashboard on Dashboards & Visualizations. 11-25-2024 07:37 AM
- Posted Re: In a Splunk dashboard, how do you make the cell coloring range different for each row? on Dashboards & Visualizations. 11-25-2024 02:41 AM
- Posted Is it possible to color the FONT text of the row based on condition not the background COLOR please ?? on Dashboards & Visualizations. 11-19-2024 07:43 AM
- Posted Re: Color-Code Stats table by row on Dashboards & Visualizations. 11-19-2024 07:27 AM
- Posted Re: Use Timepicker Token With Field on Dashboards & Visualizations. 11-14-2024 05:19 AM
- Posted Re: How to color a cell on dashboard based on condition when column names are dynamic? on Dashboards & Visualizations. 11-11-2024 07:44 AM
- Posted Re: How to color a cell on dashboard based on condition when column names are dynamic? on Dashboards & Visualizations. 11-11-2024 07:08 AM
- Posted Re: Change Font Color in Dashboard Table on Splunk ITSI. 11-11-2024 06:41 AM
- Posted deployer not pushing local folder to SHC on Splunk Enterprise. 10-10-2023 06:08 AM
- Tagged deployer not pushing local folder to SHC on Splunk Enterprise. 10-10-2023 06:08 AM
- Posted Re: universal forwarder monitor input on Splunk Enterprise. 09-19-2023 12:08 AM
- Posted universal forwarder monitor input on Splunk Enterprise. 09-14-2023 01:02 AM
- Tagged universal forwarder monitor input on Splunk Enterprise. 09-14-2023 01:02 AM
- Karma Re: Windows Server Event Logs: How to collect windows logs other than the usual Application,System,Security? for Simple_Search. 08-02-2023 03:34 AM
- Posted Windows Server Event Logs: How to collect windows logs other than the usual Application,System,Security? on Splunk Enterprise. 08-01-2023 06:23 AM
- Tagged Windows Server Event Logs: How to collect windows logs other than the usual Application,System,Security? on Splunk Enterprise. 08-01-2023 06:23 AM
- Posted Re: Disable the ability to process ANSI escape codes in terminal applications on Deployment Architecture. 07-31-2023 12:01 AM
- Posted Re: Update authentication.conf by Pushing an app From Deployer to SHC? on Splunk Enterprise. 07-07-2023 07:51 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
11-26-2024
05:18 AM
We are using Splunk Enterprise Version: 9.3.1 and we need it for Classic Dashboard What I managed to put together is this : <html>
<style type="text/css">
table tr:nth-child(odd) td{color: red;
}
table tr:nth-child(even) td{color: green;
}
</style>
</html>
It looks like this : What I actually need is to Select rows Containing INFO / ERROR / WARNING and color them RED , BLUE , YELLOW
... View more
11-25-2024
11:42 PM
thanks but this colors the background of the cell i need to color the font only
... View more
11-25-2024
07:37 AM
I need to color a Dashboard with 3 types of logs in Red, Blue, Yellow as per ERROR , INFO, WARNING So far I managed to integrate below CSS code in the panel (it colors all rows Blue): <html>
<style type="text/css">
.table-colored .table-row, td{
color:blue;
}
</style>
</html>
Does anyone know how to add conditions based on CELL Values e.g. if Cell = INFO -> Blue ,if Cell = ERROR -> Red , if Cell = WARNING -> Yellow
... View more
Labels
- Labels:
-
Classic dashboard
-
panel
11-25-2024
02:41 AM
I need help coloring rows FONT text based on a cell value Logic is like below
case(match(value,"logLevel=INFO"),"#4f34eb",match(value,"logLevel=WARNING"),"#ffff00",match(value,"logLevel=ERROR"),"#53A051",true(),"#ffffff")
... View more
11-19-2024
07:43 AM
Here is what is needed : logLevel : INFO -> Blue logLevel : WARRNING -> Yellow logLevel : ERROR -> Red Below code is not working for me <format type="color">
<colorPalette type="expression">
if(match(value,"logLevel=INFO"),"#4f34eb",null),
if(match(value,"logLevel=WARNING"),"#ffff00",null),
if(match(value,"logLevel=ERROR"),"#53A051",null)
</colorPalette> </format> is there an options for colors similar to charting? <option name="charting.chart">line</option>
<!--[Total,Critical,Major,Minor,Notice,Healthy]-->
<option name="charting.seriesColors">[17202A,C0392B,F5B041,F7DC6F,D5DBDB,3DB42A]</option>
<!--[black, red, orange, yellow, grey, green]-->
... View more
11-19-2024
07:27 AM
Is it possible to color the FONT text of the row not the background please ?? I need it done soon as such. logLevel : INFO -> Blue logLevel : WARRNING -> Yellow logLevel : ERROR -> Red <format type="color">
<colorPalette type="expression">
if(match(value,"logLevel=INFO"),"#4f34eb",null),
if(match(value,"logLevel=WARNING"),"#ffff00",null),
if(match(value,"logLevel=ERROR"),"#53A051",null)
</colorPalette>
</format>
... View more
11-14-2024
05:19 AM
Hello all, This thread was very helpful to me and i described my picked time period in the dashboard panel description . I used the progress tag : <eval token="a1_jobEarliest">strptime($job.earliestTime$,"%Y-%m-%d_%H:%M:%S")</eval>
<eval token="a1_jobLatest">strptime($job.latestTime$,"%Y-%m-%d_%H:%M:%S")</eval>
<set token="a1_jobEarliest">$job.earliestTime$</set>
<set token="a1_jobLatest">$job.latestTime$</set>
However I still get formatting details that I dont need ( underlined in blue are miliseconds) :
... View more
11-11-2024
07:44 AM
Sadly its still not working all is colored red as the last defined one: <format type="color">
<colorPalette type="expression">
case(match(value,"logLevel=INFO"),"#4f34eb",match(value,"logLevel=WARNING"),"#ffff00",match(value,"logLevel=ERROR"),"#53A051")
</colorPalette>
</format>
... View more
11-11-2024
07:08 AM
Veryy helpful! Thx! My case is with three conditions , can you help me color different cases as such please? LogLevel : INFO -> Blue LogLevel : WARRNING -> Yellow LogLevel : Error -> Red What I come up with is below but not working 😞 <format type="color">
<colorPalette type="expression">
if(match(value,"logLevel=INFO"),"#4f34eb",null),
if(match(value,"logLevel=WARNING"),"#ffff00",null),
if(match(value,"logLevel=ERROR"),"#53A051",null)
</colorPalette>
</format>
... View more
11-11-2024
06:41 AM
So far pretty useful to my dashboard but do you know how to add conditions as such : LogLevel : INFO -> Blue LogLevel : WARRNING -> Yellow LogLevel : Error -> Red
... View more
10-10-2023
06:08 AM
eploy command is pushing an app without the local folder from deployer -> shc Our deployer settings are set to full [shclustering] deployer_push_mode = full
... View more
- Tags:
- deployer
Labels
- Labels:
-
configuration
09-14-2023
01:02 AM
Hello I have this simple imput that stopped working after renaming the sourcetype from linux server -> indexers [monitor:///opt/splunk_connect_for_kafka/kafka_2.13-3.5.1/logs/connect.log] disabled = false index = _internal sourcetype = kafka_connect_log I restarted the universal forwarder many times, but it is not helping. Any other troubleshooting steps?
... View more
- Tags:
- forwarder
Labels
- Labels:
-
using Splunk Enterprise
08-01-2023
06:23 AM
Hello,
Have anyone managed to collect windows logs other than the usual Application,System,Security,Setup ?
I am being asked if we can collect Microsoft-Windows-FailoverClustering event ID 1641
If anyone has the inputs.conf file for something like that I would appreciate it.
... View more
- Tags:
- deployment
- event logs
Labels
- Labels:
-
configuration
-
using Splunk Enterprise
07-31-2023
12:01 AM
I would like to have an update about it too
... View more
07-07-2023
07:51 AM
Sorry but we decided to take another approach using REST Api calls
... View more
06-26-2023
12:56 AM
Hello,
I have a task with two steps
Create an app taht will increase local account password complexity from 8 chars to 18chars , push it from deployer to SHC
Using REST API Calls Update local admin account password with long 18chars random generated string
I found the file I need to update it is under : /opt/splunk/etc/system/local/authentication.conf, I can create an APP folder on deployer such as /opt/splunk/etc/shcluster/apps/EXAMPLE_PASSWORD_COMPLEXITY_APP How do I rout that the file inside updates the file in /opt/splunk/etc/system/local/authentication.conf And on point 2. if anyone has the API Call to update SH password for local account I woul appreciate it .
... View more
Labels
- Labels:
-
administration
-
configuration
02-22-2023
07:51 AM
We are using splunk in Enterprise environemnt with Very large scale operation. Management decided to address the question why is the above mentioned app included in the package? We are not using it and would like not to have it in the future.
... View more
Labels
- Labels:
-
upgrade
-
using ITSI
02-22-2023
07:44 AM
Before upgrading in production can I ask for update notes , changelogs of Splunk Add-on for ServiceNow 7.4.1 >7.5.0 Thanks
... View more
- Tags:
- apps
Labels
- Labels:
-
upgrade
02-15-2023
07:13 AM
I want to download the service_kpi_sbs_lookup.csv file and import it in another test splunk whit Lookup Editor. Does anyone know where is service_kpi_sbs_lookup.csv under linux ? Thanks
... View more
02-15-2023
03:11 AM
Hello.
I am trying to test app version before updating it in test environemnt but I receive an error after running command : ./splunk apply shcluster-bundle -target https://vxxxxxxx:8089 Error :
WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName for details.
Error while creating deployable apps: Error copying src="/opt/splunk/etc/shcluster/apps/Splunk_TA_snow" to staging area="/opt/splunk/var/run/splunk/deploy.618738529d3d8db4.tmp/apps/Splunk_TA_snow". 9 errors occurred. Description for first 9: [{operation:"copying source to destination", error:"Permission denied", src:"/opt/splunk/etc/shcluster/apps/Splunk_TA_snow/metadata/local.meta", dest:"/opt/splunk/var/run/splunk/deploy.618738529d3d8db4.tmp/apps/Splunk_TA_snow/metadata/local.meta"}, {operation:"transfering contents from source to destination", error:"Permission denied", src:"/opt/splunk/etc/shcluster/apps/Splunk_TA_snow/metadata", dest:"/opt/splunk/var/run/splunk/deploy.618738529d3d8db4.tmp/apps/Splunk_TA_snow/metadata"}, {operation:"copying source to destination", error:"Permission denied", src:"/opt/splunk/etc/shcluster/apps/Splunk_TA_snow/local/passwords.conf", dest:"/opt/splunk/var/run/splunk/deploy.618738529d3d8db4.tmp/apps/Splunk_TA_snow/local/passwords.conf"}, {operation:"copying source to destination", error:"Permission denied", src:"/opt/splunk/etc/shcluster/apps/Splunk_TA_snow/local/splunk_ta_snow_settings.conf", dest:"/opt/splunk/var/run/splunk/deploy.618738529d3d8db4.tmp/apps/Splunk_TA_snow/local/splunk_ta_snow_settings.conf"}, {operation:"copying source to destination", error:"Permission denied", src:"/opt/splunk/etc/shcluster/apps/Splunk_TA_snow/local/splunk_ta_snow_account.conf", dest:"/opt/splunk/var/run/splunk/deploy.618738529d3d8db4.tmp/apps/Splunk_TA_snow/local/splunk_ta_snow_account.conf"}, {operation:"transfering contents from source to destination", error:"Permission denied", src:"/opt/splunk/etc/shcluster/apps/Splunk_TA_snow/local", dest:"/opt/splunk/var/run/splunk/deploy.618738529d3d8db4.tmp/apps/Splunk_TA_snow/local"}, {operation:"copying source to destination", error:"Permission denied", src:"/opt/splunk/etc/shcluster/apps/Splunk_TA_snow/lookups/snow_cmdb_ci_list.csv", dest:"/opt/splunk/var/run/splunk/deploy.618738529d3d8db4.tmp/apps/Splunk_TA_snow/lookups/snow_cmdb_ci_list.csv"}, {operation:"transfering contents from source to destination", error:"No such file or directory", src:"/opt/splunk/etc/shcluster/apps/Splunk_TA_snow/lookups", dest:"/opt/splunk/var/run/splunk/deploy.618738529d3d8db4.tmp/apps/Splunk_TA_snow/lookups"}, {operation:"transfering contents from source to destination", error:"No such file or directory", src:"/opt/splunk/etc/shcluster/apps/Splunk_TA_snow", dest:"/opt/splunk/var/run/splunk/deploy.618738529d3d8db4.tmp/apps/Splunk_TA_snow"}]
Looks like permissions denied. I tried with both root user and splunk user error stays the same.
... View more
Labels
- Labels:
-
deployer
02-12-2023
11:24 PM
mvindex works, THANKS! my bash script collects the log, I am still investigating why field gets doubled.
... View more
02-08-2023
03:32 AM
I am working on a KPI script and I need to deduplicate lines in the field Looks like this : is there an | eval field= substr for first line of field or some regex that can deduplicate my values. Thanks
... View more
Labels
- Labels:
-
other
01-23-2023
01:46 AM
We set up a service measuring datastore free space usage, overprovisioning , read and write activity.
Large amount of entities are shown and per entity thresholds are working fine.
However the aggregated threshold for the KPIs show only the values of the top entity. According to manual the aggregated threshold should present an average of all entities result. Is there a setting I am not using correct?
... View more
Labels
- Labels:
-
using ITSI
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
4 weeks ago
|
