Hello, I have this dashboard with a graph that shows values per week day, the goal is, with the vertical line as circled in green at the photo, change a value inside assigned to it, dynamically when selecting the filter. Is it possible to do that? If so, how?   ... View more

Hello, I'm kinda new om splunk. I have this code that the goal is to show the details from a bar graph when clicking in a specific stacked value. Using drilldowns, got the tokens date4=$click.value$ and yaxis4=$click.name2$.   For some reason I can't get the details from the graph, showing only "No Results" message. Tried to modify my search but without success. What am I doing wrong here in the search? Do I have to change what to get the result that I need? index="" host= sourcetype=csv source=C:\\.....\\* | dedup ID Freeze source | table ID Title | search SWVersion=$sw_version_filter1$ | eval YYYY_CW_DD=split(source,"\\") | eval YYYY_CW_DD=substr(mvindex(YYYY_CW_DD, mvcount(YYYY_CW_DD)-1),1,11) | where Freeze>="2023-01-01" | eval Freeze=substr(mvindex(Freeze, mvcount(pFreeze)-1),1,10) | eval test=if(LCS="New" or LCS="Evaluated",1,0) | eval test1=if((LCS="x" or LCS="Implemented" or LCS="y") and (ifdLCS="m" or ifdLCS="n"), 1,0) | eval test2=if((LCS="x" or LCS="Implemented" or LCS="y") and (iswCC="p") and (iswCQR!="q" or iswCQR!="r"), 1,0) | where Freeze="$date4$"     ... View more

Hello, I have this bar graph with a static bar to show a deadline. Needed to change the little bar position dynamically when the dates changes. Is that possible?   ... View more

Hello, I have a bar chart that has some dates in the legends. I need to add another value together at this name. How can I do that?     ... View more

Hello,   I have the following code for a bar chart that I need to show stacked the results from the 3 ifs that I have. The code retrieves data by week number and divides then by each day of the week. Is it possible to group the data by week number showing each result for the day of the week stacked by the results of the 3 if's that I have? index="" host= sourcetype=csv [search index="" host= sourcetype=csv source=C:\\2023-CW28_2.csv | dedup source | table source | sort - source | head 1 ] | table iswID, iswTitle, iswSD, pverID, pverSF | where iswSD >= strftime(relative_time(now(), "-3w@w"),"%Y-%m-%d") | eval Week=strftime(strptime(iswSD,"%Y-%m-%d"),"%V") | eval Day=strftime(strptime(iswSD,"%Y-%m-%d"),"%A") | eval ISWGT=if(iswSD>pverSF,1,0) | eval ISWLE=if(iswSD<=pverSF,1,0) | eval non_mapped= if(match(pverID,""), 1,0) | chart sum(ISWGT) as "iswSD gt pverSF", sum(ISWLE) as "iswSD LE pverSF", sum(non_mapped) as "Non Mapped" by Week,Day   ... View more

Hello, I have this search for a chart that counts values weekly and divides then by day of the week. Is there any option that I can do to show this graph a little more compact grouping the results daily in showing just the week like the screenshots examples?                 ... View more

Hello,   I have this table with a null space, want to rename it for "No releases" but the rename and fillnull functions did not worked. Is there any way to do that?   ... View more

Hello, I have this strings, each of one different one of another. How can I split this lines just to get the values with "FEA_" and remove everything else after the "-"?   ... View more

Hello, I have this dashboard with this 3 fields (ID, A1_Links, A2_Links). The goal is to have the count of the total of ID's containing links, based on the A1 and A2 Links columns. (How many ID's containing A1 links and how many ID's containing A2 links) How can I do that?   index="" host= sourcetype=csv source=CW27.csv | dedup ID | table ID A1_Links A2_Links ... View more

Hello, how can I split strings that are in the same line without delimiters into a new line? Have this lines that contains strings in the same line, would be possible to split them for a new line? ... View more

Hello,   I have this code for now: index=host= sourcetype=csv source=C:\\2023-CW25_5.csv | join type=left AssigneeID [inputlookup key_user.csv | table NT_Name | where AssigneeID = NT_Name ] Have two csv files that I need to compare the columns AssigneeID from the 2023-CW25_5.csv file to the column NT_Name in the key-user.csv file and return the values from the Cluster column. How can I do that? ... View more

Hello,   I have a search that I n     index="" host= sourcetype=csv source=C:\\.......\.csv | dedup CR_ID | table CR_SubmitDate CR_LMC PVER_SpecificationFreeze | eval LMC_Requested = case(match(CR_LMC, "Yes"),"yes") | search LMC_Requested="yes" | eval LMC_Planned = case(CR_SubmitDate > PVER_SpecificationFreeze, "True") | search LMC_Planned="True" | chart count by LMC_Requested, LMC_PLanned     eed to count the values that matches "Yes". But the way I did is making conflict somewhere. How do I make a clean match that does not male problems with the chart? ... View more

Hello. i have a search with different files. In my table I have a field EDZ_000. In another csv file, I have a list with this field EDZ_000 to EDZ_XXX. Need to match this fields to get another column. How do I do that? Unfortunately, i can't show the source code. ... View more

Hello,   I have a search for a dropdown filter. My goal is to select one of the Tags and show in which ID's this tag matches. I'm a bit confused on how can I do that without the duplicates, and how to match this values. Is there a way?   index= host= sourcetype=csv source=.........\\resul_test.csv | table PR_Tags, PR_ID | eval PR_Tags=split(PR_Tags,",") | mvexpand PR_Tags   ... View more

Hello, I'm kinda blocked on how to retrieve data from a csv file. Need to get each value from a line to be shown in a dropdown filter. But don't know how Exactly to retrieve the strings. For example: Each line has a different set of tags that I have to show in the filter. How can I retrieve each of these values individually to show in the filter? ... View more