Splunk Summary Indexes - why does sistats not work like stats? - splunk

I have created a summary index. I am making use of "sistats count by <fields>" to populate all the fields required. And I see those fields as well.
The issue is - On this index I am trying to use chart command and also stats count(<field>) as test (chart command in one query and stats count in another query) but it's not working. There are no results returned. Instead, if I use the stats command and populate data to a summary index, both commands work.
Please let me know why chart and stats do not work on the summary index that I have created using sistats. [sichart is also not working]. Am I missing some technical information here?

When the sistats or sichart command is used to write to a summary index, the exact same options must be used in the corresponding stats or chart command to read from the summary index. This somewhat limits what you can do with your summary data. Because of that and the issues you've experienced, most users avoid the si commands.

Related

PowerApps filter returning incomplete data record...?

I have an Azure SQL database, and my records inside table Spiderfood_RITMData in that database includes 13 different fields. Lots of stuff. I have confirmed in SQL-SMS that the records have data in each field.
There are way more items in the database than PowerApps can see using LOOKUP (1600-9000 records or more). However, I know FOR A FACT that there is only ONE record that has any given value in the NUMBER column. It's not a primary key, but it is unique in the table.
In PowerApps, I am trying to pull that field so that I can eventually parse out the individual items.
So, the commands I'm trying are:
ClearCollect(MLE_test1, Filter('Spiderfood_RITMData', "RITM2170467" in Number));
ClearCollect(MLE_test2, Search('Spiderfood_RITMData',"RITM2170467", "Number"));
However, the Collection results for MLE_test1 and MLE_test2 both are empty EXCEPT for the value of NUMBER. Say what?!
I'm trying to use the examples posted on https://learn.microsoft.com/en-us/powerapps/maker/canvas-apps/functions/function-filter-lookup but I am honestly getting baffled by this.
How should I be formatting this call such that I can pull the whole record?
Big picture explanation: I need to do a lot of data LOOKUPS into my table Spiderfood_RITMData table, but it has way more than 2000 rows, and PowerApps will not perform the Lookup correctly. So my presumably smart idea is to create a MUCH SMALLER "version" of Spiderfood_RITMData as a local collection, using a more delegateable function (such as FILTER or IN). If I filter by all records containing the values of NUMBER, then I go from, say a 10,000-record SQL table to a 10-record Collection. And I can do LOOKUPS against that collection for the rest of the function (uh, I think -- I'm still trying to experiment accordingly). Please let me know if this is crazy or not.
LookUp is just used to get one record, instead try this:
ClearCollect(MLE_test1, Filter('Spiderfood_RITMData', "RITM2170467" = Number));
This gets a collection with all the items where Number is = to "RITM2170467"
Collections are limited to only 2000 records in each collections.
I had same issue. Go to App settings. Under Upcoming Features make sure Explicit column selection is turned off. Hope this does it for you.

Pixel tracking to BQ: how to save querystring parameter values directly to BQ table fields

I was setting up a serverless tracking pixel using this article: https://cloud.google.com/solutions/serverless-pixel-tracking-tutorial
This works but saves the entire pixel GET URL into one single field in BQ - as the pixel URL will carry multiple querystring paramter values with it and best is that these go into individual fields in BQ: I want to tweak it to save each querystring parameter value of the GET tracking pixel into its own BQ table field.
Assuming the names and number of the querystring parameters are known and they match 1-to-1 to the BQ table columns - what would be the recommended way to achieve this?
I was looking in the article if the logs query can be tuned to do this.
Also I saw that Dataflow may be the way to go but thinking if it is possible in a more direct & simple way.
The simple direct way is to create a query in BigQuery that will expose them into columns.
You can have this query first as a VIEW and you can query the view instead of the full query.
Then you can setup a scheduled query in BigQuery to run this query regularly and save into a new table. This way you have the old table getting the links as it is. The scheduler that will create a new table.
You can tune to remove existing rows from the incoming table, and append new rows to the materialized table.

(Excel-VBA) Specific data import (on the background) in the active sheet

Would you please help me (total beginner) to prepare a VBA macro that would open a sheet on the background and import specific selection as shown below:
Let's say we have downloaded wordcount analysis (xlsx) like this downloaded from a CAT tool for testing.
Now I would need to add a macro to my main sheet that would read lines starting (Column A) with "All". If "All" then I'd need to record columns of that line (specficilly Columns A - O) in array / hashtable?.
Please take a look at this image that summs it all (better than explaining it for me :-)
Let me know in case you need to know more details.
All tips / suggestions are greatly appreciated.
Many thanks!
My suggestion (I'm a beginner too) would be to use the Macro Recorder. Great tool to learn (example).
start recording
filter for 'ALL'
copy/past the Cells
stop Recording
Then have a look at the recorded code and adjust it :)
Looking at your data and the final layout you are looking for, using a Pivot Table would provide you with all of the flexibility you need.
You can:
filter which data to display
generate calculated values based on data in other columns
choose what order your columns are displayed
dynamically change the layout if you decide you want a different view
From your data, I was able to generate the following Pivot Table in about 15 minutes.
There are several good, simple tutorials on building Pivot Tables. A Google search will turn up plenty.
Things you will need to learn about for your particular problem:
Classic display (I used the classic display to get this particular layout)
Calculated Fields (many of the columns in the pivot table are calculated based on your spec). There is a maximum string length of 255 characters for a field calculation, so you may need to rename some of the columns in the original data set.
Of course, basics of Pivot Tables
Loading new data and updating your pivot table
Good Luck!

Searching in PL/SQL /Oracle Forms

This is with respect to search of a text in a table
Table_Name:
Details
Columns:
Fname,Mname,Lname,NName
This table contains nearly one lakh records
We are using Oracle forms for some querying option
The user input one name the form searches the table for the name and based on the name either(Fname/Mname/Lname/NName) in which column its is present further actions are proceeeded.
The search is taking a long time since we have huge amount of data present in the table.
I tried with Functional indexes for the table but t did not work its also taking more time
Later i tried with something like this
concatenated all the names into one name and put it into a cursor.
Using the cursor output i tried with Instring but it is hanging
I also tried with searching for building a dynamic cursor but it did not work.
My database is Oracle
Can u help me to out to find an effective solution or please help me if i have missed something.
Thanks
First of all, 1 lakh (100,000) records is not in itself a large table.
The problem I can see is the query appears to be doing an OR against the Fname/Mname/Lname/NName columns.
This means the query will be doing at least one full-table scan to obtain the results.
You may wish to use debug to obtain the query it is firing against the database and attempt to tune this at the SQL prompt using auto trace.
You may need to clarify if the search is also doing something like a LIKE against these columns rather than an EQUALS. As a LIKE will impact the query further and affect indexes.
Certainly the use of INSTR will disable indexes on your searched column.
It is not clear if what your block is based on ie. table, view, query, procedure
You may want to try using the hint on the block properties of the form FIRST_ROWS.

Change the page filter on pivot tables

I may resort to using multiple pivot tables if I cannot do this but I want to give it a try anyway.
Basically, I have a sheet with a pretty good amount of rows (45k+) and I want to use a pivot table to group items together so that I can get uniques only to then match them in an Access database and add new items only. I have to do that for a few columns and so I thought that filtering the table using VBA could be a good solution though I have not been able to achieve it. From MSDN I understand that it is possible to add filters using PivotFields.Add though I get an error "Argument or incorrect procedure call" (or something like that). Here's what I have tried:
Me.PivotTables("tcd_transits").PivotFields("NOTE").ClearAllFilters
Me.PivotTables("tcd_transits").PivotFields("NOTE").PivotFilters.Add _
xlValueEquals, "NOTE", "RUBRIQUES"
The first line effectively clears the filters but the second doesn't add a filter on "NOTE" for "RUBRIQUES" and throws the error I mentionned above. Am I completely off the path here or is there a detail I missed ?
Found it here:
http://excel.bigresource.com/Track/excel-0anuDfeJ/
The solution is to use PivotFields.CurrentPage
Me.PivotTables("tcd_transits").PivotFields("NOTE").CurrentPage = "TRANSITS"