The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.
Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.
Forums: Posted by emma
| Topic | Author | Replies | Latest Post |
|---|---|---|---|
|
Redirected
In: SplunkGeneral
(Not tagged)
Hi BrusE,
This should be fixed now.
Thanks for letting us know!
Cheers,
Emma
Is this a free or enterprise licensed Splunk? |
3
|
25 months ago... | |
|
Custom Event Rendering
In: SplunkDev
(Not tagged)
Fixed! Thanks for the feedback.
--Emma
You're right, that part is missing. It should go into: $SPLUNK_HOME/etc/apps/<app_name>/appserver/static. I'll ... |
3
|
26 months ago... | |
|
Merging 2 search result into single chart
In: SplunkReporting
(Not tagged)
How exactly do you want to combine these searches? Can you be more specific?
Thanks,
Emma
|
4
|
26 months ago... | |
|
Override flashtimeline
In: SplunkReporting
(Not tagged)
This is fixed as of 4.1.
Cheers,
Emma
|
4
|
26 months ago... | |
|
Splunk 4.1 Error - Encountered the following error while trying to update: In handler 'savedsearch':
In: SplunkAdministration
(Not tagged)
Hi Marcelo,
I don't think summary indexing is support in Splunk Free. It could probably give you ...
|
5
|
26 months ago... | |
|
Seach app 'Searches & Reports' drop down too long
In: SplunkGeneral
(Not tagged)
Just a note in case anyone checks in on this topic:
There IS a way to grab saved searches and other ...
|
8
|
26 months ago... | |
|
How can we add a list of saved searches to a dashboard?
In: SplunkGeneral
(Not tagged)
Hi Nick,
What you're looking for is the entityLinkLister or saved searches links using HTML, as ...
|
2
|
26 months ago... | |
|
Cannot retrieve all savedsearches via saved searches endpoint
In: SplunkDev
(Not tagged)
Hi Nick,
Thanks for digging and finding this. Setting to -1 -- that's interesting because I found ...
Hi Nick, I believe you're hitting this because saved searches are objects and belong to applications ... |
5
|
26 months ago... | |
|
4.1 LDAP Issues
In: SplunkAdministration
(Not tagged)
This is scheduled to be fixed in the next maintenance release -- 4.1.1 -- which will be available very ...
|
2
|
26 months ago... | |
|
Using extracted fields in REST api
In: SplunkDev
(Not tagged)
Hi Aagmon,
Can you copy and paste the REST calls you're using to POST your search and GET your results, ...
|
2
|
26 months ago... | |
|
remove highlight in xml
In: SplunkGeneral
(Not tagged)
Hi Dianbo,
Looks like you can get unmarked results by using outputmode=csv or outputmode=raw in your ...
|
1
|
26 months ago... | |
|
Struggling to get iGlobe (3.0 app) to install and work on latest Splunk 4.0.10
In: SplunkApplications
(Not tagged)
Hi James,
First off, please check out the documentation for the map here:
http://www.splunk.com/base/Documentation/4.1/Developer/CreateMap
There ...
Oh another thing to note is that I loaded this app into ../etc/apps and did not get a 500 error. How ... In Splunk 4.x, you need an app.conf (which the globe app doesn't have) and you will install apps into ... |
22
|
26 months ago... | |
|
Chart legend values being truncated
In: SplunkReporting
(Not tagged)
Ah, yeah it's still available in the advanced XML. Instead of option name (in the example) use param ...
Yes you can change the size of the legend in the view XML for the dashboard you've created. Please ... |
4
|
26 months ago... | |
|
Problem setting the default app
In: SplunkAdministration
(Not tagged)
if it worked before but doesn't work now, please file a bug with splunk support.
so this configuration broke upon upgrade? |
4
|
26 months ago... | |
|
Dashboard Drill Down?
In: SplunkReporting
(Not tagged)
Hi Dianbo,
This feature will return in our upcoming 4.1 release, with even more options for configuration ...
|
4
|
26 months ago... | |
|
can only parse strings error
In: SplunkGeneral
(Not tagged)
Hi Dianbo,
Capabilities can be set per role, in the roles screen in Manager.
What have you modified ...
Hi DIanbo, Are you logged in as Admin? Have you made any configuration changes to capabilities? ... |
4
|
26 months ago... | |
|
Get the time defined by the user
In: SplunkReporting
(Not tagged)
Hi Guillermo,
Is it possible to paste the XML you're working with here?
Thanks,
Emma
|
4
|
27 months ago... | |
|
drill down in SimpleResultsTable
In: SplunkApplications
(Not tagged)
Hi Dianbo,
Have you tried ViewRedirector and ViewRedirectorLink? If you add these as children, you ...
|
1
|
27 months ago... | |
|
Restricting Menu options
In: SplunkAdministration
(Not tagged)
Hi Ken,
You'll have to do this with the advanced XML -- it's not possible in the simplified.
In ...
|
1
|
27 months ago... | |
|
Setting an Index as default for an app
In: SplunkGeneral
(Not tagged)
There isn't an easy way to do this right now on the app level, although we definitely have plans to ...
|
2
|
27 months ago... |