Splunk/Splunk Dashboard and Visualization

[ Splunk Dashboard : 튜닝 ] Dashboard Description 패널 만들기

안세현 2024. 4. 1. 17:29
728x90
반응형

 

 

 

 

  <search id="timesearch">
    <query>| makeresults 
| eval time=relative_time(now(),"-1mon@mon"), ltime=relative_time(now(),"-0mon@mon-1d" )
| eval time=strftime(time,"%Y년%m월%d일") + " - " +strftime(ltime,"%Y년%m월%d일") 
| fields - _time ltime</query>
    <done>
      <set token="reporttime">$result.time$</set>
    </done>
    <earliest>-24h</earliest>
    <latest>now</latest>
  </search>
  <row>
    <panel>
      <html>
        <div>
          <p class="dashboard-header-description">$reporttime$</p>
        </div>
      </html>
    </panel>
  </row>

 



728x90
반응형