Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About lucasfbeinjamin
lucasfbeinjamin
Path Finder
Member since:
07-23-2018
09-15-2021
Community Statistics
| Posts | 19 |
| Solutions | 0 |
| Karma Given | 6 |
| Karma Received | 2 |
| Member Since | 07-23-2018 |
Activity Feed
- Posted Is there any way to get data from searchs to DBConnect and send it to AWS Redshift ? on Splunk Cloud Platform. 09-14-2021 10:41 AM
- Karma Re: Get all of our code in to source control to clone from Git? for laurie_gellatly. 06-05-2020 12:50 AM
- Karma Re: How do you make a division with 2 numbers from the same field filtered by a condition from another field? for Vijeta. 06-05-2020 12:50 AM
- Karma Re: How do you make a division with 2 numbers from the same field filtered by a condition from another field? for 493669. 06-05-2020 12:50 AM
- Got Karma for How do I create a form with a customized Popup modal?. 06-05-2020 12:50 AM
- Karma Re: How to index data into splunk from RabbitMQ? for MuS. 06-05-2020 12:49 AM
- Got Karma for Re: How do I place a Panel / Row at the top of My Splunk Dashboard? Need XML/HTML Help. 06-05-2020 12:49 AM
- Karma Re: How to reset a child multiselect input when the value for the parent input is changed? for MaryvonneMB. 06-05-2020 12:48 AM
- Karma Field extractions using regex not working for ramighebral. 06-05-2020 12:47 AM
- Posted How do I create a form with a customized Popup modal? on Dashboards & Visualizations. 11-30-2018 11:11 AM
- Tagged How do I create a form with a customized Popup modal? on Dashboards & Visualizations. 11-30-2018 11:11 AM
- Tagged How do I create a form with a customized Popup modal? on Dashboards & Visualizations. 11-30-2018 11:11 AM
- Tagged How do I create a form with a customized Popup modal? on Dashboards & Visualizations. 11-30-2018 11:11 AM
- Posted How do we include our "app" assets on every page within an application? on Splunk Search. 11-22-2018 08:26 AM
- Tagged How do we include our "app" assets on every page within an application? on Splunk Search. 11-22-2018 08:26 AM
- Tagged How do we include our "app" assets on every page within an application? on Splunk Search. 11-22-2018 08:26 AM
- Tagged How do we include our "app" assets on every page within an application? on Splunk Search. 11-22-2018 08:26 AM
- Tagged How do we include our "app" assets on every page within an application? on Splunk Search. 11-22-2018 08:26 AM
- Posted Get all of our code in to source control to clone from Git? on Getting Data In. 11-21-2018 01:57 PM
- Tagged Get all of our code in to source control to clone from Git? on Getting Data In. 11-21-2018 01:57 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-14-2021
10:41 AM
Guys, how are you doing ? I have a challenge to get some data coming from some searchs on a dashboard in splunk, put it into a table i think in dbconnect and share thsi data to AWS Redshift cluster. Do you know how i can do that ? I am trying to found something in internet, but any path, solution, idea, or documentation is gone be usefull ! Thanks in advance.
... View more
Labels
11-30-2018
11:11 AM
1 Karma
Hello everyone,
I have a question and I'm reading about creating forms in Splunk ... but it's complicated!
My idea was to click on a button that I already know how to do via html / CSS, which would link to a new form within a modal popup(i don't know how to do that), and I wanted to customize within that popup with some tabs and some other buttons.
Does anyone have something similar for me to customize, or some documentation that has to do directly with this?
... View more
11-22-2018
08:26 AM
How do we include our "app" assets on every page within an application, we can pre-compile the components to use in all apps ?
... View more
11-21-2018
01:57 PM
If someone can help me with something practical or something to read and learn, it would be super cool! Thanks in advance.
... View more
11-21-2018
01:52 PM
What are the differences between a local dev Splunk Enterprise instance and a Dev/QA/Production instance, if someone can help me i 'll be a lot of glad !
... View more
11-13-2018
03:15 AM
Guys i have a table with 3 columns, events name, events count, and the last column is a comments column, that i need to that be populated with "No comments" by default, and when i click on it i can set a comment in a popup window, updating my table with the new comment when i click submit.
I know maybe i'll need a js file, but i don't know how i do that.
Can someone help me, please !
... View more
10-19-2018
12:31 PM
Thank you for wasting your time trying to help me! I'm very grateful for that!
... View more
10-19-2018
12:30 PM
Thankyou, you helped me a lot!!!!
GoSplunk
... View more
10-19-2018
11:23 AM
Hi @Vijeta
I think you misunderstood how the events listed, the fields are already regex of an event, I put them that way, but actually they are in columns in my Statistics tab, you see?
... View more
10-19-2018
10:18 AM
Hi everyone,
I need to make a division with 2 numbers from the same field, but they are filtered from another field.
Example:
field1 i have : "Accepted", "Not Accepted", "TOTAL"
field2 i have in the same order: 100, 200, 500
The sum (Accepted + Not Accepted) is not necessarily the TOTAL. There may be reprocessed records that enter the total.
The records/events are so confused because they are coming from a database query.
I need to get the percentage of the Number of "Not Accepted" over the grand total(TOTAL), and the same to "Accepted".
Anyone have a good idea?
Ty.
... View more
09-18-2018
01:38 PM
Hey buddy @tycarterbk1
I do not know if it's exactly what you wanted but I tried to answer you through an example code, hope you can approve and learn something from it.
<form>
<row>
<panel>
<input type="dropdown" token="YOUR_TOKEN" searchWhenChanged="true">
<fieldForLabel>your_field</fieldForLabel>
<fieldForValue>your_field</fieldForValue>
<search>
<query>index=YOUR_INDEX sourcetype=YOUR_SOURCETYPE
| dedup field1
| table field1</query> <!--(I'm doing that to populate the dropdown)-->
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<default>7FB3A2D9</default> <!-- Here i set a default value to the dropdown-->
</input>
<!-- SEARCH 1 -->
<row>
<panel>
<chart>
<search>
<query>index=YOUR_INDEX sourcetype=YOUR_SOURCETYPE $YOUR_TOKEN$
| stats count() by id <!--(Here you can count your events by anything you need "id, code, etc...")-->
</query>
</search>
</chart>
</panel>
</row>
<!-- SEARCH 2 -->
<row>
<panel>
<chart>
<search>
<query>index=YOUR_INDEX sourcetype=YOUR_SOURCETYPE $YOUR_TOKEN$
| table Field1, Field2, Field3 .... <!--(Here you put your fields that you need)-->
</query>
</search>
</chart>
</panel>
</row>
</form>
... View more
09-18-2018
01:19 PM
Hey @tycarterbk1
Please i need more information about your query to be able to respond in the best possible way.
... View more
08-29-2018
07:58 AM
1 Karma
Hi @jithinmathew,
I made some changes to your xml, I believe that's what you wanted.
I have already seen that someone answered above but information is never too much right.
If possible test the code and give me a feedback.
If there is any question about the code please send me a message, I am at your disposal.
GoSplunkers
<form>
<search id="base_name">
<query>
<![CDATA[
| rest /services/authentication/current-context splunk_server=local | eval firstname="" | eval lastname="" | rex field=realname "^(?<lastname>[^,]+),(?<firstname>.+)?$" | eval firstname=if(firstname=="",realname,firstname) | eval name= firstname . " " . lastname | fields name
]]>
</query>
<done>
<set token="username">$result.name$</set>
</done>
</search>
<label></label>
<fieldset autoRun="true"></fieldset>
<row>
<panel>
<title>Welcome, $username$!</title>
<input type="time" token="field1">
<label>TimePicker</label>
<default>
<earliest>-60m@m</earliest>
<latest>now</latest>
</default>
</input>
<input type="dropdown" token="multisearch" searchWhenChanged="false">
<label>Number of Searches</label>
<choice value="1">1</choice>
<choice value="2">2</choice>
<change>
<condition value="1">
<set token="hideSearch2">2</set>
</condition>
<condition value="2">
<unset token="hideSearch2"></unset>
</condition>
</change>
<default>1</default>
<initialValue>1</initialValue>
</input>
<input type="text" token="searchString1" searchWhenChanged="false">
<label>Search 1</label>
<default>*</default>
<prefix>$radioSearchFilter1$"*</prefix>
<suffix>*"</suffix>
</input>
<input type="radio" token="radioSearchFilter1" searchWhenChanged="false">
<label>Search Method 1</label>
<choice value="">Simple Search</choice>
<choice value="foo=">foo</choice>
<choice value="bar=">bar</choice>
<default></default>
</input>
<html>
</html>
</panel>
</row>
<row>
<panel>
<input type="radio" token="radioSearchFilter2" searchWhenChanged="false" rejects="$hideSearch2$">
<label>Search Method 2</label>
<choice value="">Simple Search</choice>
<choice value="Foo=">Foo</choice>
<choice value="Bar=">Bar</choice>
<default></default>
</input>
<input type="text" token="searchString2" searchWhenChanged="true" rejects="$hideSearch2$">
<label>Search 2</label>
<default>*</default>
<prefix>$radioSearchFilter2$"*</prefix>
<suffix>*"</suffix>
</input>
</panel>
</row>
<row>
<panel>
<event>
<title>Raw Events</title>
<search>
<query>index="foo"
| convert ctime(_time) AS TimeStamp
| search $searchString1$ $searchString2$
| table TimeStamp
| sort _time desc
</query>
</search>
</event>
</panel>
</row>
<row>
<panel>
<html>
<div>
<a class="submit_btn">Submit</a>
<a href="YourLink.com" class="reset_btn">Reset Dashboard</a>
<style>
.submit_btn{
border-radius: 6px;
font-size: 12px;
font-family:"Roboto","Droid","Helvetica Neue",Helvetica,Arial,sans-serif;
text-decoration: none;
background-color: #5D9933;
color: #FFFFFF;
padding: 6px 8px 6px 8px;
border-top: 1px solid #CCCCCC;
border-right: 1px solid #333333;
border-bottom: 1px solid #333333;
border-left: 1px solid #CCCCCC;
}
.reset_btn{
border-radius: 6px;
font-size: 12px;
font-family:"Roboto","Droid","Helvetica Neue",Helvetica,Arial,sans-serif;
text-decoration: none;
background-color: #5D9933;
color: #FFFFFF;
padding: 6px 8px 6px 8px;
border-top: 1px solid #CCCCCC;
border-right: 1px solid #333333;
border-bottom: 1px solid #333333;
border-left: 1px solid #CCCCCC;
}
</style>
</div>
</html>
</panel>
</row>
</form>
... View more
08-28-2018
10:47 AM
Hi @jithinmathew can you share your xml ? I think i can help you.
The 2 things are possible to achieve, but i need to check your xml structure to try to help you.
Cya.
... View more
08-10-2018
02:31 PM
Resolved my problem, thanks !!!
... View more
07-25-2018
01:49 PM
@Damien Dallimore what folder i put this config file and what is the name of this config file that i'll create?
... View more
07-25-2018
01:19 PM
My current status is: I got the log data successfully being written to my RabbitMQ queues, but I do not know how to configure the pull settings in the "splunk", I do not know if this is right to say so, to receive this in AMQP Modular Input.
I read about a configuration file for the connection, what folder do I put this configuration file and what is the name of this configuration file that I should create?
Current environment: My current environment is splunk on one machine, and my forwarder installed on another machine, do I need to install something from AMQP on the machine that is my forwarder? Or only on the machine that splunk is installed? both have a connection, I've done all the tests.
Forgive me, but I'm still a beginner, but I'm reading a lot.
Thanks for any help guys.
... View more
07-23-2018
04:12 PM
Thank you very much my friend ! @MuS ♦
... View more
07-23-2018
12:42 PM
Can someone pass me a setup tutorial? I need to use a plugin too, or only the AMQP app?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-15-2021
03:45 AM
|
