Dashboards & Visualizations

In this image i want dynamic fields how can i create dynamic fileds.

lavanyaanne
Path Finder

alt text

Suppose in place of UTF8 and linebreaker place i want to use some other attributes. i want to create dynamic fields. but the thing is my requirement is exactly same as this image. suppose if i click on utf8 it has to redirect me to event.

please suggest me .

Tags (2)

woodcock
Esteemed Legend

Way to go @alacercogitatus! If your theory is correct, then the OP can get example code by downloading the Splunk v6 Dashboard Examples app here:

https://splunkbase.splunk.com/app/1603/

Inside, there is a very clear run-anywhere example of a Django-based Sankey diagram that does exactly this but with a much simpler visual abstraction (not quite a fancy as your picture). The only real downside is that I have heard from a Splunk employee (actually written in this very forum) that Splunk will be moving away from and probably eventually deprecating Django.

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

I think I see what you are referring to. You don't want "This" image, you want the concept of a flow diagram, with each of the yellow boxes a different field from a search, but displayed like a SingleValue element. And it must be dynamic, so if the field doesn't exist, it should not show up in the box, and the number of "columns" is based on the Data.

Short Answer - Yes. This is possible, but not natively.

Long Answer - Yes. This is possible, but... you need to grasp a deeper understanding of the Web Framework that is built into Splunk. https://dev.splunk.com. There are plenty of examples and ways to do exactly this. You may even want to consider using a SanKey diagram, as that will fit in kinda the same way, and already exists. If you need it to be in the column format like this, I'd consider using a template along with custom JS and CSS to build exactly what you want. If you are relatively new to Splunk, I'd suggest reading up a considerable amount to before attempting to build this.

woodcock
Esteemed Legend

Are you sure that you linked the correct image? Does this have to do with dynamic fields or dynamic drilldown?

0 Karma

lavanyaanne
Path Finder

Yes this is the example for my requirement. Can I create something like this with dynamic drilling downs.

0 Karma

woodcock
Esteemed Legend

This image has little to do with fields and absolutely nothing to do with drilldown and does not in any way describe dashboard/XML/drilldown behavior. The image is a flowchart documenting event (data) processing from Forwarder to Indexer. I see no way that it applies to your question unless perhaps the original page from which this image was lifted (which you have not shared) had a section that was "clickable". In any case, I definitely do not understand your question and so it is likely many others will not either. IMHO, you would be better off describing your question without the aid/confusion of this image.

lavanyaanne
Path Finder

@woodcook thanks for your forwardness.

let me explain this. if you see the above diagram, (first remove that it is flow chart). i want it be a dashboard and the things like utf8,linebreaker and header those i want like real-time values. please suggest me.

0 Karma

lguinn2
Legend

Let me add my comment to @woodcock's

Huh?

Get Updates on the Splunk Community!

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...