Thanks a lot. Seems to have done the trick.   Hope you have a wonderful weekend ahead of you. ... View more

Thanks for the quick reply.   I'm planning to combine it with the code, for adding a clock panel, written by chef in this topic: Re: Clock panels (Dashboard Studio) - Splunk Community and so far my clock only shows time in UTC+0, however i'm in Japan (UTC+9). Maybe this is due to the hack that you described? Still a complete beginner in SPLUNK, so I'm gonna crack my head tonight about how to code your solution in an SPL query 😄 ... View more

sorry for resurrecting an old topic, but could you explain, how I adjust the timezones in your solution? I'd like to display the local times of different branches around the world. ... View more

Sorry for the absolutely overwhelmingly late response.   So the logs are just the standard "sar" command logs from solaris, displaying "usr", "sys", "wio", "idle", "cpu". in events they show up like this "Average      15      24      0      45      55" And for the love of all that is good, I can't figure out how to structure my search query, to only display one of these values... currently my search query which i was able to display all five values with is this: Average index="name_of_index" sourcetype="name_of_source" | timechart avg(usr) avg(sys) avg(wio) avg(idle) avg(cpu) span=id   Any help is much appreciated. ... View more