Hello, i lost all colors of my nav bar in my apps since i update to 6.1 Can you help me ? Thanks ... View more

Hello, i have an alert because of the limitation of 500 mb per day, i want to know which host is spamming me to shut it but the licence previous 30 days doesn't work, but licence usage today is working fine.. The graph is blank... Can you help me ? ... View more

Hello Splunk users, I have got a dashboard with this : <module name="HiddenSearch" layoutPanel="panel_row1_col1_grp1" autoRun="True"> <param name="search">| rest splunk_server=local /services/licenser/pools | rename title AS Pool | search [rest splunk_server=local /services/licenser/groups | search is_active=1 | eval stack_id=stack_ids | fields stack_id] | join type=outer stack_id [rest splunk_server=local /services/licenser/stacks | eval stack_id=title | eval stack_quota=quota | fields stack_id stack_quota] | stats sum(used_bytes) as used max(stack_quota) as total | eval usedGB=round(used/1024/1024,3) | eval totalGB=round(total/1024/1024,3) | eval gauge_base=0 | eval gauge_danger=totalGB*0.8 | eval gauge_top=totalGB+0.001 | gauge usedGB gauge_base gauge_danger totalGB gauge_top</param> <module name="ViewstateAdapter"> <param name="suppressionList"> <item>charting.chart</item> <item>charting.chart.stackMode</item> <item>charting.axisTitleX.visibility</item> <item>charting.drilldown</item> <item>charting.chart.sliceCollapsingThreshold</item> <item>charting.axisY.scale</item> <item>charting.axisX.scale</item> <item>charting.chart.style</item> <item>charting.legend.labelStyle.overflowMode</item> <item>charting.legend.placement</item> <item>charting.layout.splitSeries</item> <item>charting.chart.nullValueMode</item> <item>charting.axisTitleY.visibility</item> </param> <module name="HiddenFieldPicker"> <param name="strictMode">True</param> <module name="JobProgressIndicator"> <module name="EnablePreview"> <param name="display">False</param> <param name="enable">True</param> <module name="HiddenChartFormatter"> <param name="charting.chart">fillerGauge</param> <param name="charting.axisTitleX.visibility">visible</param> <param name="charting.drilldown">all</param> <param name="charting.chart.sliceCollapsingThreshold">0.01</param> <param name="charting.axisY.scale">linear</param> <param name="charting.axisX.scale">linear</param> <param name="charting.chart.style">shiny</param> <param name="charting.axisTitleY.visibility">visible</param> <param name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</param> <param name="charting.legend.placement">right</param> <param name="charting.layout.splitSeries">0</param> <param name="charting.chart.nullValueMode">gaps</param> <param name="charting.chart.stackMode">default</param> <module name="JSChart"> <param name="width">100%</param> </module> </module> </module> </module> </module> </module> </module> But it doesn't work if i am logged with an user account and i allowed users role to search into internal_index, what should i add for make this working ? Thanks, Damien ... View more

Hello, i have three index : A, B, C on my heavy forwarder and i want to forward to different receiver, example : A to X, B to Y and C to Y too How can i do that ? Thanks, ... View more

Hello everyone, I want to override the sourcetype of my logs with a regex (i know how to do this part) but i have some issue to know how to override the sourcetype from logs received from a forwarder. I don't know if i have to modify the props.conf and transforms.conf on the forwarder or on the receiver or if i can do both and specify a thing like [source::tcp:9997] Can you help me please ? ... View more

There is no results found when i use this dashboard in splunk 6.0 but the first one (today) is working. How can i fix that ? Thanks you. ... View more