Dashboards & Visualizations

SimpleResultsHeader include intention field in chart title

andrewfl
Engager

I have a form that displays metrics on a single host. The url can include the hostname, or the user can put the hostname into a input field on the page. My "intention" name is HOST and I would like to display this value above charts on the page so screen captures include the host name next to the graph.

Here is my intention defintion (sorry about formatting.. need more Karma!).

<module name="ExtendedFieldSearch" layoutPanel="viewHeader" autoRun="True">

<param name="intention">

<param name="arg">
<param name="HOST">

<param name="default">paehowuw16103</param>

<param name="fillOnEmpty">True</param>

</param></param>

<param name="name">stringreplace</param>

</param>

Is there a way to see what variables are available that can be displayed in the SimpleResultsHeader?

I have a Simple Results Header directly above <module name="HiddenChartFormatter">
$count$ and simple things display fine, I am just not sure how to display the HOST. $click.fields.HOST$ displays null.

<module name="SimpleResultsHeader">

<param name="headerFormat">$count$ results at $time$ for $click.fields.HOST$</param>
<param name="entityName">results</param>
</module>

andrewfl
Engager

I found correct syntax for displaying form field values in the chart header. See page on dynamic drilldowns and the section titled Syntax for specifying destinations and look at click.value and form.token.
http://docs.splunk.com/Documentation/Splunk/latest/Viz/Dynamicdrilldownindashboardsandforms

I NOW have Simple Results Header directly above <module name="HiddenChartFormatter"> that displays result count, nicely formatted time range, and the value of the HOST field on my form.

<module name="SimpleResultsHeader">
<param name="headerFormat">$count$ results at $time$ for $form.HOST$</param>
<param name="entityName">results</param>
</module>

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...