We have a dashboard and it has 3 inputs Date, Transaction dropdown, Submit Button. I’m looking to add a dropdown (Manager) between date and transaction dropdown so that I can only see the transactions based on the Manager. ... View more

We have a dashbaord with with 2 text fields which we used to enter start date and end date. We added submit button so that the dashboard will only run when we click the submit button but it's not working. We set submitButton="true" and searchWhenChanged="false" it doesn't help. Please help. ... View more

We have a dashboard, which is pulling the data for Current and last 7 days. In the screenshot below the data has split between the two colomns, but we are trying to display the colomns side by side and the _time colomn should only display the selected time period say 10/13/2019 12:00 - 10/13/2019 13:00 where here it shows both times 10-06-2019 and 10-13-2019. Here is the query | multisearch [ search index=foo id=ABCDE env=PROD sourcetype="bar" earliest=$new_earliest$ latest=$new_latest$ | eval label="Customer_Count_Today" | fields -_raw _time dcn label ] [ search index=foo id=ABCDE env=PROD sourcetype="bar" earliest=$new_earliest1$ latest=$new_latest1$ | eval label="Customer_Count_LastWeek" | fields -_raw _time dcn label ] | bin _time span=30m | chart dc(dcn) over _time by label | fields _time Customer_Count_Today Customer_Count_LastWeek Here is the dashboard/table it looks like Test Start Date (mm/dd/yyyy hh:mm AM/PM) 10/13/2019 12:00 End Date Start Date (mm/dd/yyyy hh:mm AM/PM) 10/13/2019 01:00 First Panel _time Customer_Count_Today Customer_Count_LastWeek 2019-10-06 00:00:00 0 5906 2019-10-06 00:30:00 0 4978 2019-10-13 00:00:00 5529 0 2019-10-13 00:30:00 4689 0 I'm not able to upload the screenshot, I copied/pasted the sample results Count_today VS Count Last week results are 0 5906 0 4978 5529 0 4689 0 Thanks! ... View more

We have a dashboard . When we select time period say 11/13/19 (9 am to 11 am ). The results are displying from 11/13/19 (8 am to 10 am) and the results consist of all zeros in between 8 to 9 am where there are values from 9 to 10 am . I think the zeros are diplaying because it's not the correct time. I don't think it's a timezone issue. How can we fix time picker for the dashboard so that it will only displays the results for selected time period(8 am 10 am) with no zeros? Here are the tokens used for the source code <eval token="earliestTime">if(isstr(earliest), relative_time(now(),earliest), earliest)</eval> <eval token="latestTime">if(isstr(latest), relative_time(now(),latest), latest)</eval> <eval token="earliestTime1">relative_time(earliestTime,"-7d")</eval> <eval token="latestTime1">relative_time(latestTime,"-7d")</eval> <eval token="earliestTime2">relative_time(earliestTime,"-14d")</eval> <eval token="latestTime2">relative_time(latestTime,"-14d")</eval> <eval token="earliestTime3">relative_time(earliestTime,"-21d")</eval> <eval token="latestTime3">relative_time(latestTime,"-21d")</eval> <eval token="earliestTime4">relative_time(earliestTime,"-28d")</eval> <eval token="latestTime4">relative_time(latestTime,"-28d")</eval> ... View more

Hello All, I have an existing lookup file newlookupfile.csv. I'm trying to update the lookupfile with new row. I didn't see any errors in search but I do not see the lookupfile updated. Can anyone please help. Here is the query I'm using | inputlookup newlookupfile.csv | append [|stats count |eval Active=1 | eval Order=2 |eval GroupName="Homepage" |eval LastUpdated=1572541638|eval Name="James" |eval ReportName="Temp" |eval Order=2 |eval tranID=1001 |eval tranName="NewTransaction"] | stats count by Active Order GroupName LastUpdated Name ReportName Order tranID tranName |outputlookup newlookupfile.csv ... View more