Dashboards & Visualizations

Paginator Module does not work in Advanced XML

ten_yard_fight
Path Finder

Splunkers,

I've been searching around the splunkbase hoping to find someone with a solution to this issue. The paginator module doesnt work correctly using Advanced XML, but works fine with Simple XML. The reason im using Adavnced XML was to remove the View Results links at the bottom of every panel. Take a look at the following entire XML breakdown:


  
  
  
  
    *
    False
    1
  
  
  
    splunk.search.job
    True
    1
    warn
  
  
    JMBL Requests Per Day
    Requests Per Day
    
      
        count
        displayRowNumbers
      
      Requests Per Day
      
        True
        
        
          
          10
          results
          10 
            
           10
           events
           10
          
          
            True
            False
            
              10
              results
               
              True
              row
              True
              
              
            
            
          
        
      
    
  
  
    Requests Per Day (last 7 days)
    Requests Per Day (last 7 days)
    
      
      Requests Per Day (last 7 days)
      
        True
        
        
          10
          results
          
            True
            False
            
              row
              results
              True
              
             
            
           
          
        
      
    
  
  
    Parameter Breakdown (last 7 days)
    Parameter Breakdown
    
      
      Parameter Breakdown (last 7 days)
      
        True
        
        
          10
          results
          
            True
            False
            
              row
              results
              True
              
              
            
            
          
        
      
    
  
  
    Parameter by Process (last 7 days)
    Parameter by Process (last 7 days)
    
      
      Parameter by Process (last 7 days)
      
        True
        
        
          10
          results
          
            True
            False
            
              row
              results
              True
              
              
            
            
          
        
      
    
  
  
    Process Breakdown
    Process Breakdown
    
      
      Process Breakdown
      
        True
        
        
          10
          results
          
            True
            False
            
              row
              results
              True
              
            
            
           
          
        
      
    
  

  
0 Karma

sideview
SplunkTrust
SplunkTrust

You've got a mismatch in that first panel. You're listing entityName of 'events' in the Paginator, and entityName of 'results' in the SimpleResultsTable.

So for instance if your search is "sourcetype=access_combined | top clientip"

and you have 200 results, 20 clientips, and 10 "rows" per page,

The paginator configured with entityName events will think you want page links for the 200 pages of events. So it'll draw enough page links.

Then when the user clicks on page "4", that agument hits the SimpleResultsTable and it doesn't know how to go to page 4 - it's configured to show results and there are only 2 pages of results.

UPDATE: Sideview Utils has a Pager module and in a month or two I'll be releasing the Table module. Once the two are both in Utils they'll just work out whether it's "results" or "events" amongst themselves and you wont have this pitfall anymore. It's not the first time I've seen someone run into it.

0 Karma

ten_yard_fight
Path Finder

Awesome! Thanks for the reply, Im working with SideView Utils right now. I appreciate the help.

0 Karma

ten_yard_fight
Path Finder

I just updated the post with the whole XML file. Thanks for taking a look at it.

0 Karma

Drainy
Champion

Could you post the whole XML? Everything there looks alright to me so far.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...