Why create splunk dashboards vs views? - splunk

I'm trying to figure out why anyone would want to create a dashboard in Splunk. Views allow you to add forms along with any charts and searches, while dashboards do not. So, why would I want to make a dashboard? Is there any advantage of one vs the other?

Hmmm... not sure I'd agree with the answer above... They are all "views", one way of looking at it, is that forms and dashboards are all stored under the same locations, whether it be accessed through the GUI (under 'Manager>>User Interface>> Views'), or it be accessed through the CLI (e.g. $SPLUNK_HOME/etc/apps/<yourApp>/default/data/ui/views/). Additionally in advanced XML they all start with the opening tag, "<view>".
To add a bit more...
A dashboard is a type of view (typically referring to a view with no user control), in advanced XML, you start it with the <view> tag.
A form is a type of view (typically referring to a view with user control), in advanced XML, you start it with the <view> tag. It's just a mix-up in terminology.
Perhaps the confusion lies with the differences between Simple XML and Advanced XML. Ultimately Splunk will convert Simple XML to Advanced anyway when it reads it.

A dashboard is a special case of view.
A normal view would allow you to change search conditions and hence view the changed results.
Dashboards are useful to as they consist of multiple panels and can accumulate data from multiple datasources into one quick view.
For example if you want to view the number of errors and map that against the CPU on the box at the same time, the dashboard comes in handy

Related

How to Create a Button in a PDF to Select and Copy all Text from a Single Field

I need a person to be able to input information into a field in a PDF then later be able to select and copy all information from that field with a single click so they may paste it into another field on a website.
Purpose. I am trying to create a master application which people with disabilities may complete and use as a simple way to fill out other applications. I don't believe I can create an autofill ability which will be useful for the thousands of different methods of job application but I want the human to be able to select the correct field then, in as few clicks as possible, copy information from a field in the PDF and paste it into one they deem as appropriate in another application.
I am an idiot, this is a passion project.
It may be simpler depending on user cases to work inside the browser framework. Here is totally non typical usage for copy data from local personal html into remote form. IT depends heavily on the remote site accepting it can be embedded as if a local frame thus not useful for generic use but may work for controlled caseload's

How can I make the styling I apply to nodes show for other users accessing the same data store in Graphileon?

We are experimenting with using Graphileon to create a database of related terms. To do this, we are accessing a data store located on a server. We are able to see nodes and relationships that are added by other users, but the styling applied to these nodes is not carrying over.
Is there a way to make the styling universal for the entire data store and anyone accessing it? Or is any styling of nodes and relationships specific to the user who configured it?
In principle styling is specific to the user. Since you are having multiple users, you are probably not using the personal edition. Can you confirm this?

How to merge two content source in Sharepoint 2010?

In my share point 2010 website, I added two content source
file system (shared folder)
BDC data (Line of Business Data)
I added the managed properties to map the metadata of the BDC data.
My search result coming link this
I would like to link the two content source, my second content source having the file related information like (tab, category, fileno, case name)
I added the column and also I altered the xslt in the search result web part. the results are coming link below.
From the result, the third one (120) is coming from the database so all the properties are mapped (caseid, casename,fileno, doctab, description)
But it's not mapping to the file system. The file system having relationship with the table with the file name and also the the path of the files having some information:
file://192.168.25.231/FolderName/CaseID/documenttab/filename
CaseId is the primary key for the table which I added as second content source.
How can I achieve this?
Hmm, it's difficult to add much more without seeing the environment. But here's plan B
Given you're using the BCS and want to display both unstructured content (the files) and application data that shares metadata with the files, you could try the following. It will require some coding knowledge. You can make connections between web parts in SharePoint Designer but this will need Visual Studio
create a custom search results web page, and use the standard core search results web part along with separate data web part for displaying the application data
create a custom query box for entering the search query, probably best done with separate fields for the metadata - case ID, case name etc. (You'd normally use a data filter web part, but that won't pass results through to the normal search results - you need to code to run two queries)
format and pass the query to both the core search results web part, and the BCS data web part, to display items that match the query
That's probably as much as I can help with. The SharePoint section on MSDN should be the next port of call. Good luck!
This may be an overly simplistic explanation to keep the response as short as possible.
For your search results page, the best approach when also retrieving application data is to not present that information in the core search results web part. Exclude it from the default scope. Instead, use a federated search results web part added to the results page. You'll also need to create the corresponding federation location for the scope (easy to do), and you can then use XSLT to style the display of the results - application data needs to be presented differently to links to files and web pages.
Then, a search for say the case ID, will display all files containing that information in the core search results web part, and will display any matching application data in the federated results web part, with the different formatting applied. Note - there will be no connection between the two. The only relationship is that they both match the search query. It is possible to connect web parts to filter one based on the selected value in another, but it's an entirely different approach and not easily done using search results.

A process monitor based on periodic sql selects - does this exist or do I need to build it?

I need a simple tool to visualize the status of a series of processes (ETL processes, but that shouldn't matter). This process monitor need to be customizable with color coding for different status codes. The plan is to place the monitor on a big screen in the office making any faults instantly visible to everyone.
Today I can check the status of these processes by running an sql statement against the underlying tables in our oracle database. The output of these queries are the abovementioned status codes for each process. I'm imagining using these sql statements, run periodically (say, every minute or so), as an input to this monitor.
I've considered writing a simple web interface for doing this, but I'm thinking something like this should exist out there already. Anyone have any suggestions?
If just displaying on one workstation another option is SQL Developer Custom Reports. You would still have to fire up SQL Developer and start the report, but the custom reports have a setting so they can be refreshed at a specified interval (5-120 seconds). Depending on the 'richness' of the output you want you can either:
Create a simple Table report (style = Table)
Paste in one of the queries you already use as a starting point.
Create a PL/SQL Block that outputs HTML via DBMS_OUTPUT.PUT_LINE statements (Style = plsql-dbms_output)
Get creative as you like with formatting, colors, etc using HTML tags in the output. I have used this to create bar graphs to show progress of v$Long_Operations. A full description and screen shots are available here Creating a User Defined HTML Report
in SQL Developer.
If you just want to get some output moving you can forego SQL Developer, schedule a process to use your PL/SQL block to write HTML output to a file, and use a browser to display your generated output on your big screen. Alternately make the file available via a web server so others in your office can bring it up. Periodically regnerate the file and make sure to add a refresh meta tag to the page so browsers will periodically reload.
Oracle Application Express is probably the best tool for this.
I would say roll your own dashboard. Depends on your skillset, but I'd do a basic web app in Java (spring or some mvc framework, I'm not a web developer but I know enough to create a basic functional dashboard). Since you already know the SQL needed, it shouldn't be difficult to put together and you can modify as needed in future. Just keep it simple I would say (don't need a middleware or single sign-on or fancy views/charts).

exceeds the list view threshold 5000 items in Sharepoint 2010

I'm upgrade my sp 2007 to sp 2010 and I have a form library has more then 5000 items.
Default view of form library filter items and show only 10-20 item to users.
After upgrade sp2010 All users get below error when going to form library expect site collection admins.
I think this is a permission issue but i did not find any source to solve this issue, have any idea ?
This view cannot
be displayed because it exceeds the
list view threshold (5000 items)
enforced by the administrator.
To view items, try selecting another view or creating a new view.
If you do not have sufficient
permissions to create views for this
list, ask your administrator to modify
the view so that it conforms to the
list view threshold.
You can increase the List View Threshold beyond the 5,000 default, but it is highly recommended that you don't, as it has performance implications. The recommended fix is to add an index to the field or fields used in the query (usually the ID field for a list or the Title field for a library).
When there is an index, that is used to retrieve the item(s); when there is no index the whole list is opened for a scan (and therefore hits the threshold). You create the index on the List (or Library) settings page.
This article is a good overview: http://office.microsoft.com/en-us/sharepoint-foundation-help/manage-lists-and-libraries-with-many-items-HA010377496.aspx
The setting for the list throttle
Open the SharePoint Central
Administration,
go to Application
Management --> Manage Web
Applications
Click to select the web application that hosts your list (eg. SharePoint - 80)
At the Ribbon, select the General Settings and select Resource Throttling
Then, you can see the 5000 List View Threshold limit and you can edit the value you want.
Click OK to save it.
For addtional reading:
http://blogs.msdn.com/b/dinaayoub/archive/2010/04/22/sharepoint-2010-how-to-change-the-list-view-threshold.aspx
I had the same problem.please do the following it may help you:
By Default List View Threshold set at only 5,000 items this is because of Sharepoint server performance.
To Change the LVT:
Click SharePoint Central Administration,
Go to Application Management
Manage Web Applications
Select your application
Click General Settings at the ribbon
Select Resource Throttling
List View Threshold limit --> change the value to your need.
Also change the List View Threshold for Auditors and Administrators.if you are a administrator.
Click OK to save it.
SharePoint lists V: Techniques for managing large lists :
Tutorial By Microsoft
Level: Advanced
Length: 40 - 50 minutes
When a SharePoint list gets large, you might see warnings such as, “This list exceeds the list view threshold,” or “Displaying the newest results below.” Find out why these warnings occur, and learn ways to configure your large list so that it still provides useful information.
After completing this course you will be able to:
Learn what the List View Threshold is, and understand its benefits.
Create an index so that you can see more information in a view.
Create folders to better organize your large list.
Use Datasheet view for fast filtering and sorting of a large list.
Learn what the Daily Time Window for Large Queries is.
Use Key Filters for fast filtering within Standard view.
Sync a large list to SharePoint Workspace.
Export a large list to Excel. Link a large list in Access.