About vinod743374

vinod743374

Hi @tjlavarias24 Did you find the Solution, I do Have the Same requirement, Can you Help me with your Solution. Thanks in Advance.

vinod743374

Hi @user1 I do have the same requirement, Did you find the Solution for it. Can you Please share the details about it. Thanks in Advance.

vinod743374 · ‎03-22-2024

HI, I have a single query to get all types of data in table. for one particular type I have an issue with the null values, i need to remove those null value results for the particular type only without effecting the other types of data. I need to remove those null values in that "error message" field for type 1 , for Type 2 it should be as it is. Thanks in advance.

vinod743374 · ‎03-18-2024

Hi, I need a Specific Requirement with the time chart in my Dashboard. I have a Single Value Viz. which has the values and trend Comparisions. If I set the time range to the 24 hrs., it should display the Last 24 hrs. count in the Value and Previous 24 hrs. Values (Differance)in the trend value. I can Achieve this by adding the span 1d, in the query. But whereas it comes to the Hrs., It won't be like that. Can anyone help me with this. Thanks in Advance.

vinod743374 · ‎02-22-2024

Hi everyone, i need an alternative for the transaction command, bcoz its taking to much time to load the dashboard, this is my actual data Botid count 1528 1 1228 1 1015 1 1558 1 12 1 1698 1 1589.15 1 1589 1 am looking for an output like below BotId count 1528,1228,1015,1558 1 12,1698,1589.2,1589 2 thanks in advance

vinod743374 · ‎12-21-2023

Hi @gcusello Yes, it looks same but the issue is, we cannot change the height of the graph for better visibility.

vinod743374 · ‎12-21-2023

HI @gcusello Thanks for the reply, I tried the horizon chart already, but its not meet my requirement (tooltips and the visibility of the graph and values on the axis are not looks good), Looking for a better one. Thanks.

vinod743374 · ‎12-21-2023

Hello, Can you one help me with the custom visualization like below image, any addon or something would be grateful. Thanks in Advance.

vinod743374 · ‎07-27-2023

Hi @venky1544 The only way is to do with CSS by assigning an id to the chart and apply some CSS. the examples code is given below, you can try if u have no issues with applying CSS. <dashboard version="1.1"> <label>TEST_DATSET</label> <row> <panel> <title>Trellis by Questions</title> <chart id="single1"> <search> <query>| makeresults | eval data=" Market=UK, Question=location, Answer=London; Market=USA, Question=location, Answer=New York; Market=UK, Question=PET, Answer=dog; Market=USA, Question=PET, Answer=cat" | makemv data delim=";" | mvexpand data | rename data as _raw | KV | stats count by Question, Answer | eval Answer=Answer."(".count.")"</query> <earliest>-24h@h</earliest> <latest>now</latest> <sampleRatio>1</sampleRatio> </search> <option name="charting.axisTitleX.visibility">collapsed</option> <option name="charting.axisTitleY.visibility">collapsed</option> <option name="charting.axisTitleY2.visibility">collapsed</option> <option name="charting.chart">pie</option> <option name="charting.chart.bubbleMaximumSize">50</option> <option name="charting.chart.bubbleMinimumSize">10</option> <option name="charting.chart.bubbleSizeBy">area</option> <option name="charting.chart.showLabels">0</option> <option name="charting.legend.placement">none</option> <option name="refresh.display">progressbar</option> <option name="trellis.enabled">1</option> <option name="trellis.scales.shared">1</option> <option name="trellis.size">medium</option> <option name="trellis.splitBy">Question</option> </chart> </panel> </row> <row depends="$dontmatch$"> <panel> <html> <style> div#single1 .facet-label { display: none !important; } </style> </html> </panel> </row> </dashboard> Thankyou.

vinod743374 · ‎07-27-2023

Does that name relate to the Field name of your query results? We didn't find any labels after that line is been added in our dashboard, I don't know why it is still showing in your case. May I know the version of your Splunk.

vinod743374 · ‎07-27-2023

You Can try by removing the labels in the pie chart. To achieve this by adding this below line in to the options of your pie chart in the source code. <option name="charting.chart.showLabels">false</option> Let me know if this works for you. Thankyou!!

vinod743374 · ‎07-27-2023

You Can Only Achieve like the attached image, I know it's Not Exactly like u have shown in the image, but this is the only way to do it. to achieve that I used the below code to do it. | inputlookup firewall_example.csv | eval _time=strftime(timestamp,"%d/%m/%y") | stats sum(bytes_in) sum(bytes_out) count by host,_time | eval Newfield='_time'+'host' | table Newfield * Thankyou.

vinod743374 · ‎07-27-2023

Try this Sample Dashboard Code and understand the code and then apply to u r scenario, it should work. { "visualizations": { "viz_RVm8V48A": { "type": "splunk.table", "options": { "columnFormat": { "sum(bytes_in)": { "data": "> table | seriesByName(\"sum(bytes_in)\") | formatByType(sum_bytes_in_ColumnFormatEditorConfig)" } }, "tableFormat": { "align": "> table |pick(alignment)" } }, "dataSources": { "primary": "ds_egVRJIic" }, "context": { "sum_bytes_in_ColumnFormatEditorConfig": { "number": { "thousandSeparated": false, "unitPosition": "after" } }, "alignment": [ "center" ] } } }, "dataSources": { "ds_egVRJIic": { "type": "ds.search", "options": { "query": "| inputlookup firewall_example.csv\r\n| stats sum(bytes_in) sum(bytes_out) count by host", "queryParameters": { "earliest": "-24h@h", "latest": "now" } }, "name": "Search_1" } }, "defaults": { "dataSources": { "ds.search": { "options": { "queryParameters": { "latest": "$global_time.latest$", "earliest": "$global_time.earliest$" } } } } }, "inputs": {}, "layout": { "type": "absolute", "options": { "width": 1440, "height": 960, "display": "auto" }, "structure": [ { "item": "viz_RVm8V48A", "type": "block", "position": { "x": 130, "y": 80, "w": 1240, "h": 260 } } ], "globalInputs": [] }, "description": "", "title": "Test" } If isn't work for u, can share u r sample data will help u accordingly. Thankyou!

vinod743374 · ‎04-02-2023

Do you have any Idea about, how to Select this Licensing, Currently we are using 35GB/Day Ingestion License, but we daily using 20Gb of Data only, Can we Downgrade to the lower ingestion Volume License or what's needs to be take care of selecting a license, in Splunk Cloud.

vinod743374 · ‎02-01-2023

Hi @richgalloway I have Tried the Solution that provided in the Link, But No use Still the Issue is Same. Can you suggest is there any Alternative to send Email Alerts using My Outlook Email ID. Thankyou.

vinod743374 · ‎12-20-2022

Even if I entered the correct password, I am getting the error like above image. I tried numerous times and got nothing. even I reset the mail password and then recreate the app password.

vinod743374 · ‎12-19-2022

Alerts suddenly stopped in my local instance, i am getting the error like in the above image, can anyone please suggest the solution for this, i didn't change my email password, its same when it is in working and now also. I configured my outlook mail with an app password. I recreate the app password and configure but i am still facing the issue. Thankyou.

vinod743374 · ‎12-12-2022

Thanks For the Solution, I just changed the Permissions for the Mongodb Folder and restarted the Splunk. It worked.

vinod743374 · ‎12-12-2022

2022-12-09T07:20:04.178Z I STORAGE [journal writer] In File::open(), CreateFileW for 'E:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\journal\lsn' failed with Access is denied. 2022-12-09T07:20:04.178Z I JOURNAL [journal writer] warning: open of lsn file failed this is the error i am getting

vinod743374 · ‎12-12-2022

These are the errors i am getting, Create ssl certificate is also tried, it works fine, its not an ssl issue. can any one help us

vinod743374 · ‎11-16-2022

I am Getting only a few days back Data, How Can i Get Last 60 Days of ingested Data I am Using Splunk Enterprise... Can anyone Help us!!!

vinod743374 · ‎11-01-2022

I Tried like https://<IP address of the system>:8000 By entering this URL on the other system which is connected to the same network.

vinod743374 · ‎11-01-2022

Hello, I have a Splunk Enterprise installed in my system, I want to use this splunk in other system which is connected in the same LAN network, Is it Possible ?? if it is can you help us how to achive this ?? i saw a random post related to this, in that i found like using IP address we can achieve it, But It didnt workout for me. Please helpus.

vinod743374 · ‎09-26-2022

@klischatb Please try like , What ever the time you wanna sort, just Convert that time into "epoch", then you Can Sort that new field Consists of epoch time. Thankyou.

vinod743374 · ‎09-14-2022

Hi, Can you please elaborate your question little more, Do you need the solution like in the image u shown ??

Posts	87
Solutions	1
Karma Given	19
Karma Received	12
Member Since	‎05-17-2021

Online Status	Offline
Date Last Visited	2 weeks ago

How to Remove the null values in a field for parti...

Needed a Comparision for the selected time range v...

how group a field values with the maxevents of 4, ...

Custom Visualization like in the below image

How to fix email authentication unsuccessful?

Suddenly Splunk Enterprise KV Store Initialization...

Is it Possible to Use my Splunk Localhost in local...

How to Move the table values to the top with query...

Can we build the line chart starts with a value?

Is there any possible way to _bump on Splunk cloud...

Re: Integration of SharePoint to Splunk

Re: How to get SharePoint excel files in to Splunk...

How to Remove the null values in a field for parti...

Needed a Comparision for the selected time range v...

how group a field values with the maxevents of 4, ...

Re: Custom Visualization like in the below image

Re: Custom Visualization like in the below image

Custom Visualization like in the below image

Re: remove the label in piechart

Re: remove the label in piechart

Re: remove the label in piechart

Re: How to add another value together with an exis...

Re: How to Splunk Dashboard Studio table column al...

Re: How do you determine the size of your license?

Re: How to fix Email Authentication Unsuccessful?

Re: How to fix Email Authentication Unsuccessful?

How to fix email authentication unsuccessful?

Re: Suddenly in my Splunk Enterprise KV Store Init...

Re: Suddenly in my Splunk Enterprise KV Store Init...

Suddenly Splunk Enterprise KV Store Initialization...

Re: splunk index daily data volume for specific in...

Re: Is it Possible to Use my Splunk Localhost in l...

Is it Possible to Use my Splunk Localhost in local...

Re: how to sort values(_time)

Re: Splunk dashboard (I wanted to update all 3 ale...