Hi all,
In Application Management - Click Through Demo (PPT) - Sept 2012 by splunk in the CEO view we have a panel RT Transaction Volume.
The results of this are displayed in a rectangle that is in yellow colour and the value is displayed inside that rectangle box.
But if i use the .spl file of Application management i cannot see this coloured box in which results are displayed. I want to display results in such form in my dashboard as in Appl mngt pdf (CEO ). Is that an image? Can anybody help me on this.
That piece is accomplished using a "single value" in combination with a "range map". I do not think the button itself is an option anymore.
For example, let's assume that you evaluate the volume of KB throughput in Splunk.
index=_internal group="per_sourcetype_thruput" earliest=-15m | stats sum(kbps) AS KBThroughput
To figure out the range of that value based on your KPIs, you may follow with this:
... | rangemap field=KBThroughput low=0-20 elevated=21-40 high=41-60 default=severe
You put that in a dashboard pannel
<?xml version='1.0' encoding='utf-8'?>
<dashboard>
<label>sample single value + range - simple xml</label>
<row>
<single>
<searchString>index=_internal group="per_sourcetype_thruput" earliest=-15m | stats sum(kbps) AS KBThroughput | rangemap field=KBThroughput low=0-20 elevated=21-40 high=41-60 default=severe</searchString>
<title>sample single value + range</title>
<option name="classField">range</option>
</single>
</row>
</dashboard>
Based on the calculated value, you will find the colour of the result will change to match the range you specified. You will probably see something like this:
Refer to the documentation for more details.
This is what the App Management Demo shows today:
That piece is accomplished using a "single value" in combination with a "range map". I do not think the button itself is an option anymore.
For example, let's assume that you evaluate the volume of KB throughput in Splunk.
index=_internal group="per_sourcetype_thruput" earliest=-15m | stats sum(kbps) AS KBThroughput
To figure out the range of that value based on your KPIs, you may follow with this:
... | rangemap field=KBThroughput low=0-20 elevated=21-40 high=41-60 default=severe
You put that in a dashboard pannel
<?xml version='1.0' encoding='utf-8'?>
<dashboard>
<label>sample single value + range - simple xml</label>
<row>
<single>
<searchString>index=_internal group="per_sourcetype_thruput" earliest=-15m | stats sum(kbps) AS KBThroughput | rangemap field=KBThroughput low=0-20 elevated=21-40 high=41-60 default=severe</searchString>
<title>sample single value + range</title>
<option name="classField">range</option>
</single>
</row>
</dashboard>
Based on the calculated value, you will find the colour of the result will change to match the range you specified. You will probably see something like this:
Refer to the documentation for more details.
This is what the App Management Demo shows today:
thank you gilberto now i came to know about it and got convinced with your answer.
In the past, the single value visualization used to present the content with a background button (the small, coloured rectable box). Today the visualization is such that the actual value is what changes in colour based on the range.
I do not know that you can get that button any more. Please see this note. http://docs.splunk.com/Documentation/Splunk/5.0.2/Viz/PanelreferenceforSimplifiedXML#Single_value_pa...
hi gilberto thanks for the answer this partly solves my problem but what i need exactly is the background of 57.756875 should be in colour, where 57.756875 is inside the small coloured rectangle box.