Splunk 6.1 - Dashboard Panel Display ?

[noorul44]

Hi All, Do we have any way to print the result in Dashboard Panel like given below?

If Count > 0, Result display in Line Table
If Count = 0, Result display in Statistics Table ??

[noorul44]

Hi Stephane - Yes. I made a query such that it will display values only if value crosses 50%. Below 50, it wont show anything and it will consider output as zero.
My requirement is to display the results in dashboard panel.

If Count > 0, Result display in Line Table (means one or more entries with more than 50%)
If Count = 0, Result display in Statistics Table ??

[noorul44]

Hi Stephane, Kindly have a look once get a minute, Thanks.

[alacercogitatus · Accepted solution]

You will want to use advanced dashboarding to achieve this. You cannot pick which visualization you want to use ,unless you hard code it into some javascript/django logic.

[noorul44]

Yes. I have changed the requirement for that. Above search working fine in dashboard panel. If I change the view manually as "Statistics Table", its fine and showing "Memory Currently Under Threshold" for <50 % and showing count (1 or more count/entry) for >=50.Hope i am making sense now.

My requirement is to display the results in dashboard panel.

If Count > 0, Result display in Line Table (means one or more entries with more than 50%)
If Count = 0, Result display in Statistics Table ??

[noorul44]

Hi Alacercogitatus, Kindly have a look once get a minute, Thanks.

[alacercogitatus]

And as I've stated in the answer, you will need to research and code an HTML/Django dashboard that takes the data from the search and chooses a visualization based on that data.

[noorul44]

Hi Alacercogitatus,

Kindly help me to hard code it. I am using below stuffs in my query now.

| where memory > 50% | appendpipe [ stats count | eval memory = "Memory Currently Under Threshold" | where count==0 | fields - count ]

[alacercogitatus]

The original question was based on Visualizations and using different results to show different graphs. Did you change your requirement for that? What are you trying to accomplish with that search?

[stephane_cyrill]

Can you be more clear about what you want?