Dashboards & Visualizations

How to create table in splunk dashboard in the below format?

hritwikraman
New Member

Need to create below table:

       APP_NAME:A                         APP_NAME:B    
APP_NAME    Status_CODE:200 Status_CODE:400 Status_CODE:200 Status_CODE:400
A               
B               
C               
D               
Tags (3)
0 Karma

cmerriman
Super Champion

There is no way in Splunk today, that I'm aware of, to create two header rows, like you can in an Excel Pivot table. The closest you can get is to concatenate the two header labels into one field and create one row.

0 Karma

hritwikraman
New Member

alt text

0 Karma

DalJeanis
Legend

It looks like maybe you were trying to produce a report that has columns for each of two app names, for each of two statuses, but it is unclear what was supposed to be in the columns.

In any case, without the details of the events that are supposed to be turned into this format, we are not going to be able to be of much help.

0 Karma

hritwikraman
New Member

Hello ...
I need out put with API_NAME as column label and APP_NAME as row label .
Under column API name there will be subcolumn with Different Status Code.Hope it clarifies you what I mean to ask.

Column [API_NAME(Subcolumn Status_Code like A/B/C .. )]
Row will be APP_NAME like X/Y/Z

0 Karma

FrankVl
Ultra Champion

I think something went wrong with posting your question, as the layout of your table is not entirely as you intended I think 🙂

Maybe insert it as code (using that 101010 button).

0 Karma

p_gurav
Champion

Can you share sample data?

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...