All Apps and Add-ons

Tabs Within Tabs

kmattern
Builder

I have a number of views with Sideview tabs that work well. In these instances the view shows the same four sets of information, one for each tab. Those are very straight forward and easy to configure.

Now I have a situation where I have four main tabs. Each main tab has four sub tabs. Something like this:

Select Tab 1
[ Tab 1 ] [ Tab 2 ] [ Tab 3] [ Tab 4]
  [ Tab 1A] [ Tab 1B ] [ Tab 1C ] [ Tab 1D ]

Select Tab 2
[ Tab 1 ] [ Tab 2 ] [ Tab 3] [ Tab 4]
  [ Tab 2A] [ Tab 2B ] [ Tab 2C ] [ Tab 2D ]

Select Tab 3
[ Tab 1 ] [ Tab 2 ] [ Tab 3] [ Tab 4]
  [ Tab 3A] [ Tab 3B ] [ Tab 3C ] [ Tab 3D ]

Select Tab 4
[ Tab 1 ] [ Tab 2 ] [ Tab 3] [ Tab 4]
  [ Tab 4A] [ Tab 4B ] [ Tab 4C ] [ Tab 4D ]

I'm not sure how they should be nested.

sideview
SplunkTrust
SplunkTrust

With the simpler use cases of the Tabs module, it can often be used in the absence of a Switcher module. In this case Tabs simply acts as a Pulldown in disguise - the downstream module config is identical no matter which tab is selected, and the Tabs module simply passes down a $foo$ token indicating which one is selected. That $foo$ token can be plugged in however you like.

Thus you can nest Tabs in these simple cases just like you would nest a Pulldown.

However, in more complex cases there is often a Switcher involved. You use a Switcher when you want the downstream module hierarchy and structure to be different as the tabs are switched around. For instance if one tab has two JSCharts and some HTML and another tab has a Table and some HTML - you're going to need a Switcher for that.

If there's a Switcher involved for the top level of Tabs here, then you would actually have four more additional Tabs instances, each to implement one of the sets of second-level Tabs.
Possibly there is a need for more Switchers downstream from those sub-Tabs.

In general if you can boil it down so that the differences from tab to tab are really just $foo$ tokens, that is a better way to do it. Once you start throwing Switchers at a problem the XML quickly gets complex and easy to break.

I'm not sure where your actual use case falls in all of this - maybe post your full XML in pastebin and I'll update my answer?

sideview
SplunkTrust
SplunkTrust

It is possible, although it can get clunky. you make the values such that the multiple values are separated by a character like ",", and then downstream you have a ValueSetter split it using its "delim" param. There's a whole docs page for the equivalent functionality on Pulldown. You can also put whole snippets of search language into the values. One known issue exists still, that Tabs values do not themselves do $foo$ replacement, so if you want to have upstream tokens replaced into the Tabs values, and then have the final values with replacements sent downstream, it wont work (coming soon)

0 Karma

AnilPujar
Path Finder

@sideview any updates on nested tabs in respective panel?

0 Karma

sideview
SplunkTrust
SplunkTrust

Looking at Sideview Utils release notes, it looks I added this feature exactly a week later, Version 2.6.4 released August 23rd 2013, has

Added a requested feature to Tabs where it will now do $foo$ replacement
into *static* tab values before it outputs them downstream.

which is so long ago that it was about 48 releases and 243 release notes ago.

ALSO anyone who has Sideview XML views and dashboards, should go to this page
https://sideviewapps.com/apps/canary/
and after reading a bit, click the link that says "I maintain (or develop) custom dashboards or apps written with Sideview Utils"

0 Karma

kmattern
Builder

Each sub tab will have the same set of information but the searches themselves will be different. The difference will be more than a $foo$ token. some searches will have more sub searches than others. What would be ideal is to pass a set of arguments to the searches based on which tab is selected. That would result on only one primary set of modules as opposed to four sets. Is it possible to send multiple values down stream based on the tab selected?

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...