From e442fe8be51cb49e030626a3efbbb703ce0a8943 Mon Sep 17 00:00:00 2001 From: tmartin-s1 <121066578+tmartin-s1@users.noreply.github.com> Date: Thu, 5 Oct 2023 18:20:29 -0400 Subject: [PATCH] Added 'title' panel type --- Splunk Dashboards/splunk_app_usage.xml | 2 +- TA_dataset/default/data/ui/views/splunk_app_usage.xml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Splunk Dashboards/splunk_app_usage.xml b/Splunk Dashboards/splunk_app_usage.xml index 026e8566..a0aecaa7 100644 --- a/Splunk Dashboards/splunk_app_usage.xml +++ b/Splunk Dashboards/splunk_app_usage.xml @@ -40,7 +40,7 @@ index=_internal sourcetype=splunk_web_access host=* user=* | rex field=panel "\s+\<(?<panel_type>[^\<]+)\>" ``` filter for the types of panels that typically have searches ``` -| search panel_type IN ("chart","single","table","event","search","viz","map") +| search panel_type IN ("chart","single","table","event","search","viz","map","title") | search NOT app_name IN($myExcludedApps$) ``` total, sort and print the results ``` diff --git a/TA_dataset/default/data/ui/views/splunk_app_usage.xml b/TA_dataset/default/data/ui/views/splunk_app_usage.xml index 026e8566..a0aecaa7 100644 --- a/TA_dataset/default/data/ui/views/splunk_app_usage.xml +++ b/TA_dataset/default/data/ui/views/splunk_app_usage.xml @@ -40,7 +40,7 @@ index=_internal sourcetype=splunk_web_access host=* user=* | rex field=panel "\s+\<(?<panel_type>[^\<]+)\>" ``` filter for the types of panels that typically have searches ``` -| search panel_type IN ("chart","single","table","event","search","viz","map") +| search panel_type IN ("chart","single","table","event","search","viz","map","title") | search NOT app_name IN($myExcludedApps$) ``` total, sort and print the results ```