Can you help me set a filter between min and max value?
Hi , I need your help to set a filter between min and max value. example : want to print value between range ( value >-2 and value < 5 ) I have created two dropdown box create two filter FILTER...
View Articlesplunkjs/mvc/dropdownview - show and hide inputs based on user selection
Hi, I have a inputs.js that has multiple inputs (timerange, multiselect, dropdown etc ). I would like to show / hide an input on a form based on the user selection of a previous input. I have seen...
View ArticleWIth a drop down, how do I show/hide inputs on a form based on the user...
Hi, I have an inputs.js that has multiple inputs (timerange, multiselect, dropdown etc ). I would like to show / hide an input on a form based on the user selection of a previous input. I have seen one...
View ArticleHelp with Regex (multiple in one query)
Trying to capture multiple groups, basically after the colon MacAddress : 7A:AA:82:31:24:B1 Manufacturer : VENDOR Username : SC32131BN_user IPNET : 11.412.111. PasswordExpires : 11/24/2018 3:44:48 PM...
View ArticleCan you help me with a regex expression(multiple in one query)?
Trying to capture multiple groups, basically after the colon MacAddress : 7A:AA:82:31:24:B1 Manufacturer : VENDOR Username : SC32131BN_user IPNET : 11.412.111. PasswordExpires : 11/24/2018 3:44:48 PM...
View ArticleHow do you join 2 tables while showing what's not in table 1?
This successfully shows a combined table with users that are in Table1 and Table2. However, I want to show all users in table1 that are NOT in table 2? How can i do that? | inputlookup table1.csv |...
View ArticleHow do I format a Dashboard to show results of separate Searches "Rolled Up"...
How can I format a dashboard to show results of separate Searches "Rolled Up" (for ease of use)? That is, instead of a list or a table, which takes up A LOT of vertical space, how can I show, for each...
View ArticleIs it possible to do an inputlookup with an OR statement
Hi, I have a query that uses this search to look for hosts that we need to validate: |tstats count WHERE index=* AND [ |inputlookup testSVB2.csv |fields + host] groupby host, index, sourcetype I'd like...
View ArticleIn a search, How do I get the next to the last value(or field)?
I have data that looks like this; When I perform my search the data returned by Splunk looks like this on the dashboard: date="date" username="username filename="filename" 1000 bytes You can see the...
View ArticleIs it possible to do an inputlookup with an OR statement?
Hi, I have a query that uses this search to look for hosts that we need to validate: |tstats count WHERE index=* AND [ |inputlookup testSVB2.csv |fields + host] groupby host, index, sourcetype I'd like...
View ArticleHow do you search the value in one query in another second query?
We have two different search queries with no unique fields and we would like to get the below info: 1. we would like to search the value which we get in first query in the second query. 3. if the value...
View ArticleHow to find the User/ServiceAccount/LocalAccount that is used by Splunk...
Is there a way to find out whether my Splunk Instances are running using a Domain Account or a Local Account. I can find out for windows navigating to services but how can I figure it out for Linux...
View ArticleHow to set Time zones at app level?
How to set time zones per app level? I want different time zones to be set for different apps. Meaning same data should show in different time zones in different apps. I tried setting user-prefs at app...
View Articledropdown option with asterix
i have a drop down enabled on a panel, however since its a dropdown i can choose only one of the entries at a time. the multi-select does not look that good such that when i do multi-select , the panel...
View Articleradial meter using from custom viz
Hi I try to use the radial meter included in the custom viz app but the installation manual is not very clear does anybody is able to give me a more simple documentation please? thanks
View ArticleSplunk 7.1.1 checkbox checks on click of text
I have a show/hide checkbox in my dashboard on check of which the few filters are shown/hidden. After splunk upgrade,on click of text "show/hide",the checkbox is checked but functionality doesn't...
View Articlequery incompatibility from Splunk upgrade to 7.1.1: set intersect...
I have a below query which is working perfectly fine in splunk 6.6.4 after upgrading to new Splunk version 7.1.1 , the query is showing now result found. This is a multi select drop down. | set...
View ArticleHow to calculate the "number of files" field in the table colunm of "Files &...
Hi, I would like to know how to calculate the "number of files" field in the table colunm of "Files & directories",which is the last path of [setting]>>[Data inputs] >> [Files &...
View ArticleMeaning of warning "Bucket is not on any other peer! Removing it."
Hello there, We faced an issue with our Indexer Cluster and I am trying to understand what happened. I see these messages : 07-25-2018 11:51:02.387 +0200 WARN CMMaster - event=removePeerBuckets peer=...
View Articlehow to extract latest occurrence of a field from multiple lines
Want to capture the latest occurrence of "working_condition_check - status -" which is "Stopped". Please help me in getting the regex. Below is the log message. 10/01/2018 15:01:04 Server_Name...
View Article