About dhivyamu

dhivyamu · ‎02-04-2020

I'm trying to embed a webpage within splunk dashboard, this is the sourcecode - <panel> <html> <h3>Embedded Web Page! $url$</h3> <iframe src="$url$" width="100%" height="300"/> </html> </panel> This works perfectly in splunk enterprise but iframe is not at all recognized in splunk cloud. Is that a restriction in cloud or I'm missing something?!

dhivyamu · ‎12-10-2019

Execute SQL is not working, getting com.splunk.dbx.exception.ConfReadException : Error(s) occur when reading "MyConName" in the search window. This was working earlier, in between we changed the login id to the instance and after that we see this error. But already saved query is working seamlessly, data is pulled to the Splunk index from DB. I tried creating a new connection with the newly logged-in user. I gave read write permission to everyone for the config settings still getting same error. I'm using DBConnect 3 in heavy forwarder setup of Splunk 7 in linux server.

dhivyamu · ‎11-27-2019

More details, It may help someone - port 8089 to be opened for the IP address of the ServiceNow which has to be integrated with Splunk Base AP URL is :8089. If you use Splunk cloud, it will be your idm URL:8089 XX.splunkcloud.com:8089 or idm-XX.splunkcloud.com:8089

dhivyamu · ‎11-27-2019

My alert search query is like this which runs every 5mins index="iway_idoc" TMSG_TYPE="SAP_PLANARRIV" | table STATUS the resultant records can have 2 different status - Delivered and Error Now, I want to trigger an email if at-least one record with Error is found. I tried giving custom search like search STATUS=Error search count(eval(STATUS="Error")) > 1 It didn't work 😞 Can someone help in this please ??

dhivyamu · ‎11-21-2019

I have the entitlement. Which API should I ask them to open?

dhivyamu · ‎11-20-2019

I'm trying to create incidents from Splunk cloud Alerts. what I read from the docs is we need install an add-on in ServiceNow as well. I did that and tried to configure it. The configuration page asks for Splunk API base URL. What should be provided for that ? I tried giving my cloud address which is something like "XX-qa.splunkcloud.com", it is not working.

dhivyamu · ‎11-12-2019

I'm trying to upload an app in Splunk cloud. Initially it showed some failures, after correcting all the failures it says "unknown error" and no detailed report is generated. I then created a test app with just one css uploaded and no objects at all. Still I get the same error when I try to install. Any idea on what could be the problem. The app is built in Splunk 7.1.4 and uploaded in Splunk version 8.0.0

dhivyamu · ‎11-08-2019

Does Splunk cloud has upload asset option? And in general, is it enabled only for admin roles?

dhivyamu · ‎11-08-2019

where you able to solve this issue?

dhivyamu · ‎11-07-2019

Thank you, this is so neat. But I still get the same error. The search works fine outside but doesn't fits in eval though it returns a single value 😞

dhivyamu · ‎11-07-2019

I'm trying you create a variable out of a search result using eval. This works fine, I get a single row, and a column with error lines: search index=sap_log_index message_type="E" | eventstats list(message_text) as errorLines | nomv errorLines | dedup errorLines | table errorLines But the below search fails with malformed exception: index="sap_idoc_index" | eval errorLines=[search index=sap_log_index message_type="E" | eventstats list(message_text) as errorLines | nomv errorLines | dedup errorLines | return $errorLines] | eval error_msg = if(Status=="41", errorLines, ""), status = if(Status=="41", "Failed", "Success") | table idoc_number, status, error_msg

Posts	11
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎10-10-2019

Online Status	Offline
Date Last Visited	‎07-25-2020 12:53 AM

How to embed an external webpage within Splunk clo...

Splunk DB connect - com.splunk.dbx.exception.ConfR...

Alert custom condition

Splunk Cloud Integration with Snow for raising tic...

Private app installation failing with unknown erro...

Upload asset in splunk cloud

Help with passing search result to eval failing