I have a table like below:
Service Failure_Count Failure_Rate
AAA 200 96
BBB 100 56
CCC 20 33
I'd like, instead of a table, to show all this information as a single-value red box without rows, but displays all this information like so:
AAA (200, 96%)
BBB (100, 56%)
CCC (20, 33%)
I've attached an image for clarification. Thanks!
The single value panel isn't natively built to display data in this way. You can however come up with some creative ways of handling this:
Continue to use table, but concat all of your fields into one column:
yoursearch | eval singleValue = SERVICE." "."(".failure_count.",".failure_rate."%".")" | fields singleValue
and then limit the size and with of the panel
or perhaps a different vis app:
@mauricio2354, refer to one of my answers to use Single Value or Status Indicator with Trellis Layout to display this kind of information with Count, Percent, Icon And Color along with Drilldown (JavaScript Drilldown will be required for Status Indicator).
https://answers.splunk.com/answers/590581/refresh-data-in-table-by-collecting-token-on-click.html
The single value panel isn't natively built to display data in this way. You can however come up with some creative ways of handling this:
Continue to use table, but concat all of your fields into one column:
yoursearch | eval singleValue = SERVICE." "."(".failure_count.",".failure_rate."%".")" | fields singleValue
and then limit the size and with of the panel
or perhaps a different vis app:
Thanks, this helped!