All Apps and Add-ons

Single panel with multiple values

bohrasaurabh
Communicator

I am interested in creating a dashboard which has a row with one panel with multiple single values similar to the first row in the documentation -> http://docs.splunk.com/Documentation/Splunk/6.6.2/Viz/Aboutthismanual

Can someone please let me know how to do it....

1 Solution

cmerriman
Super Champion

If I understand what you're looking for, all you need to do is all the single values into the same panel in the source code. Try something similar to this:

<panel>
  <single>
     <search>
         <query>....</query>
     </search>
   </single>
   <single>
     <search>
         <query>....</query>
     </search>
   </single>.....
</panel>

If you want to break a new row into the panel, add

   <html tokens="true" encoded="true">
       <![CDATA[
           <br/>
           ]]>
    </html>

View solution in original post

bwlm
Path Finder

To convert my original dashboard with a "row of panels" into a "single panel" with a row of visualizations, all I had to do was Edit > Source and move the "title" tags of these panels to be inside the "single" tags, then remove the "panel" (close and open) tags in between each visualization.

I found this reference in the "Splunk Dashboard Examples" app: https://splunkbase.splunk.com/app/1603/

Open the "Splunk Dashboard Examples" app and scroll down to "Layout Elements" > "Panel Grouping with Single Values". This is available in Splunk 6.4+.

<dashboard>
    <label>Panel Grouping with Single Values</label>
    <description>Group multiple single value elements, aligning horizontally.</description>
    <row>
        <panel>
            <!-- 2 elements are grouped into 1 column -->
            <single>
                <title>Single panel 1</title>
                <search>
                    <query>index=_internal earliest=-h | stats count</query>
                </search>
                ...
            </single>
            <single>
                <title>Single panel 2</title>
                <search>
                    <query>index=_internal earliest=-24h | stats count</query>
                </search>
                ...
            </single>
        </panel>
    </row>
...
0 Karma

splunkwiz
New Member

How does the panel fit in the html tag? Can you provide full example

0 Karma

bwlm
Path Finder

Please see the example I added below from the Splunk Dashboard Examples app. Nesting tags: dashboard > row > panel > single > title > search.

0 Karma

cmerriman
Super Champion

If I understand what you're looking for, all you need to do is all the single values into the same panel in the source code. Try something similar to this:

<panel>
  <single>
     <search>
         <query>....</query>
     </search>
   </single>
   <single>
     <search>
         <query>....</query>
     </search>
   </single>.....
</panel>

If you want to break a new row into the panel, add

   <html tokens="true" encoded="true">
       <![CDATA[
           <br/>
           ]]>
    </html>

bohrasaurabh
Communicator

Exactly what I was looking for!!!

0 Karma

bohrasaurabh
Communicator

@lfedak Intresting... The link I posted existed when I posted this question. I still had it open from yesterday and posting the screen capture.

@cmerriman I will try your suggestion and will let you know. Thanks,

alt text

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hi @bohrasaurabh, your link is for a deleted page. Can you please update it?

0 Karma

bohrasaurabh
Communicator

@lfedak: The page still exists. I think the issue is the period at the end of the link is becoming part of the URL when you click it and hence page does not exist error. I am unable to edit the question any more to remove that period sign.

0 Karma

cmerriman
Super Champion

@lfedak this should be a comment. Comments are for clarifying questions and more details whereas answers are to post Solutions. Thanks 🙂

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Woops, thought I did post it as a comment. Thanks for catching that 🙂

0 Karma
Get Updates on the Splunk Community!

Combine Multiline Logs into a Single Event with SOCK - a Guide for Advanced Users

This article is the continuation of the “Combine multiline logs into a single event with SOCK - a step-by-step ...

Everything Community at .conf24!

You may have seen mention of the .conf Community Zone 'round these parts and found yourself wondering what ...

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...