Splunk Search

can we rename the group label dynamically ??

rakesh_498115
Motivator

Hi , i am using the following group name for my dashboard..i wanted to change this name dynamically...i.e wanted to add an extra data based on the variable $DS$ .

so tried giving like this

but this doesn't work in my dashboard...is there any way to do..i dont want to use simple results header cause i have grouped all the modules with grp1,grp2,grp3...so its not looking properly as heading..pls suggest a way in acheiving this..thanks.

Tags (1)
0 Karma

sideview
SplunkTrust
SplunkTrust

You cannot set the group attribute dynamically.

However you can put a SimpleResultsHeader (or if you're using Sideview Utils, just an HTML module) into the full width top layoutpanel, just by using the same row and col, but omitting the "_grp"

The dashboard panels lay out like so:

|----------------------------------------------------------------------|
|                                                                      |
|                           panel_row1_col1                            |
|                                                                      |
|----------------------------------------------------------------------|
|                      |                       |                       |
| panel_row1_col1_grp1 |  panel_row1_col1_grp2 | panel_row1_col1_grp3  |
|                      |                       |                       |
|----------------------------------------------------------------------|

So while it's common to think that you can either use the grouped "grp1", "grp2" panels or the single big panel, you can actually use them both in combination and it can be quite useful.

So in your particular XML, put your SimpleResultsHeader or HTML module up in panel_row4_col1

0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...