Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About valadasr
valadasr
Explorer
Member since:
06-09-2017
09-01-2022
Community Statistics
| Posts | 11 |
| Solutions | 0 |
| Karma Given | 3 |
| Karma Received | 2 |
| Member Since | 06-09-2017 |
Activity Feed
- Karma Re: How to reduce rex usage in query results in exceeding the depth limit of REGEX? for richgalloway. 08-31-2022 11:35 PM
- Posted How to reduce rex usage in query results in exceeding the depth limit of REGEX? on All Apps and Add-ons. 08-31-2022 02:15 PM
- Tagged How to reduce rex usage in query results in exceeding the depth limit of REGEX? on All Apps and Add-ons. 08-31-2022 02:15 PM
- Karma Re: How do you apply CSS definitions to a row of charts in a single panel? for niketn. 06-05-2020 12:50 AM
- Got Karma for How do you apply CSS definitions to a row of charts in a single panel?. 06-05-2020 12:50 AM
- Got Karma for Re: How do you apply CSS definitions to a row of charts in a single panel?. 06-05-2020 12:50 AM
- Karma Re: How to pre-query data results to avoid constantly searching for BlueSocket. 06-05-2020 12:48 AM
- Posted Re: How to Make a panel disappear when "Search is awaiting input..." on Dashboards & Visualizations. 04-08-2020 01:09 AM
- Posted How to Make a panel disappear when "Search is awaiting input..." on Dashboards & Visualizations. 04-07-2020 03:48 AM
- Tagged How to Make a panel disappear when "Search is awaiting input..." on Dashboards & Visualizations. 04-07-2020 03:48 AM
- Tagged How to Make a panel disappear when "Search is awaiting input..." on Dashboards & Visualizations. 04-07-2020 03:48 AM
- Tagged How to Make a panel disappear when "Search is awaiting input..." on Dashboards & Visualizations. 04-07-2020 03:48 AM
- Tagged How to Make a panel disappear when "Search is awaiting input..." on Dashboards & Visualizations. 04-07-2020 03:48 AM
- Posted Re: charting.fieldColor is not applying the colors defined in token on Dashboards & Visualizations. 12-09-2019 11:43 PM
- Posted Re: charting.fieldColor is not applying the colors defined in token on Dashboards & Visualizations. 12-09-2019 11:42 PM
- Posted charting.fieldColor is not applying the colors defined in token on Dashboards & Visualizations. 12-09-2019 07:59 AM
- Tagged charting.fieldColor is not applying the colors defined in token on Dashboards & Visualizations. 12-09-2019 07:59 AM
- Tagged charting.fieldColor is not applying the colors defined in token on Dashboards & Visualizations. 12-09-2019 07:59 AM
- Tagged charting.fieldColor is not applying the colors defined in token on Dashboards & Visualizations. 12-09-2019 07:59 AM
- Tagged charting.fieldColor is not applying the colors defined in token on Dashboards & Visualizations. 12-09-2019 07:59 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 |
08-31-2022
02:15 PM
Hello,
I've been tasked to optimize a former colleague's saved searches and found that the query had a lot of rex command going at the same field and decided to compact into one REGEX
As such, i've applied the following REGEX:
From Regex101, i've had the query with a whopping 6.5k steps which is a bit too much, and i've been trying to reduce it as much as i can but i've lack knowledge in that department in order to optimize further the query.
One of the things that i want to keep only are the capture groups but the rest i want to ignore altogether. Is there a way of doing that and reducing the steps?
https://regex101.com/r/qDy1Lr/4
... View more
- Tags:
- regex
- splunk-search
Labels
- Labels:
-
development
-
other
-
search
04-08-2020
01:09 AM
Well, not right now. We have made some changes and that has prevented the panels from showing again. However i was curious if there was any mention of this event type in xml or not. Is there any event for checking if the panel is awaiting input?
... View more
04-07-2020
03:48 AM
Hello guys,
I've got a dashboard in which it has two hidden panels depending on a textbox.
When the textbox is empty, the panels won't show, as expected. When i add values into it, the panels appear, also as expected.
However, if i take those values out of that multiselect then the panels won't disappear and will display the "waiting for input".
This is what i've got primarily to hide / unhide the panels:
<progress>
<condition match="'job.resultCount' > 0">
<set token="show_summary">true</set>
</condition>
<condition>
<unset token="show_summary"/>
</condition>
</progress>
<set token="show_summary">true</set>
Is there any event handler to deal with this in a condition match or something?
e.g.
(...)
<progress>
<condition match="'job.Awaitinginput' == 1">
<set token="show_summary">true</set>
</condition>
(...)
... View more
12-09-2019
11:43 PM
I've put it there, but still didn't solve the issue. It was just a lack of } in the option element.
Thanks anyway for your suggestion!
... View more
12-09-2019
11:42 PM
Yeah, that's the problem, what a dunce didn't even notice this!
Thanks a lot!
... View more
12-09-2019
07:59 AM
Splunk Enterprise
Splunk Version: 7.2.7
Build: f817a93effc2
Hello everyone,
I've got a dashboard in which i've got colors defined as tokens and this solution has always worked up until now. The panel just refused the fieldColors definition of the chart panel.
<init>
<set token="Prio1Color">0xff0000</set>
<set token="Prio2Color">0xffc000</set>
<set token="Prio3Color">0x00b050</set>
<set token="Prio4Color">0x2e75b6</set>
<set token="Prio5Color">0x548235</set>
</init>
(...)
<panel>
<chart>
<title>Resolved in $Report_Type$</title>
<search base="BaseSearch">
<query>| search CreationDate = "*"
| search Priority IN($prio$)
| where Month>=strftime(relative_time(strptime("$startTime$","%Y-%m-%d %H:%M:%S" ),"-1mon"),"%Y-%m") AND Month<="$endTime$"
| append
[| gentimes $gentime$
| eval _time=strptime(strftime(endtime, "%Y-%m-%d %H").":00:00", "%Y-%m-%d %H:%M:%S")
| fields _time
| dedup _time]
| fillnull value=0 $Report_Type$
| timechart span=1month sum($Report_Type$) as "Resolved in Team" by Priority
| fields - NULL
| addtotals</query>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
<option name="charting.axisLabelsY.majorLabelVisibility">hide</option>
<option name="charting.axisTitleX.visibility">collapsed</option>
<option name="charting.axisTitleY.visibility">collapsed</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisY2.abbreviation">none</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.chart">column</option>
<option name="charting.chart.nullValueMode">gaps</option>
<option name="charting.chart.overlayFields">Total</option>
<option name="charting.chart.showDataLabels">all</option>
<option name="charting.chart.stackMode">stacked</option>
<option name="charting.fieldColors">{"Planned": $PlannedColor$,"Prio1":$Prio1Color$, "Prio2": $Prio2Color$,"Prio3":$Prio3Color$, "Prio4": $Prio4Color$,"Prio5":$Prio5Color$</option>
<option name="charting.legend.placement">bottom</option>
</chart>
</panel>
This just doesn't work at all... I've checked and re-checked and this doesn't seem to add up..
Can you help me out with this issue?
Best Regards,
Rui
... View more
01-28-2019
02:48 AM
1 Karma
Thanks a lot for your input! it worked like a charm
... View more
01-25-2019
05:39 AM
1 Karma
Hello guys,
I hope you can guide me with this since I've been going around this for some time and I am not seeing a solution in sight.
I have a panel with 3 charts in it, and I wanted to put them in a row. I've tried using CSS for .panel-element-row, but unfortunately, it affects all the charts in the dashboard, which is not the desired goal.
.panel-element-row{
display: inline-block !important;
width: 33% !important;
}
I've applied a class to see if it worked, but to no avail:
#panel1 .panel-element-row{
display: inline-block !important;
width: 33% !important;
}
Can you guys guide me the right way?
... View more
06-09-2017
08:48 AM
Ok i'll take a look into it! Thanks a lot for your input on this.
... View more
06-09-2017
06:17 AM
Well, it could but the problem is that the options can change anytime(such as days and months available on query).
That was the main reason why i turned it dynamic
... View more
06-09-2017
12:58 AM
I've got 4 dropdowns(Country,Year,Month,Day) getting information from my index and those will then populate some charts.
This not only takes some time as it is doing 4 queries simultaneously which can be degrading for the server's performance (if several people do this it is x4 queries per person)
One idea i've had was to pre-query the information, and that would run based of that. That would avoid not only the waiting time but also impact on server performance.
How would i go about this?
Create searches based on each of the dropdowns and put on each dropdown the "load search"?
Best Regards,
Rui
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-01-2022
01:55 AM
|
