Splunk Search

Grouping panels from different rows into one panel?

Shan
Builder

Need your help friends.

I have data appear as mentioned below. But i have requirement that instead of displaying same name for 4 different panels. I need to group all the value and display it in single panel for all the 4 rows how to achieve it .

Below mentioned all the 4 panels(Windows data) are simple name display in html.

Current result.

alt text

Expected result.

alt text

Thanks in advance ..

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Put all Windows Data n tables into one panel, something like this:

...
<row>
  <panel><html>...</html><panel>
  <panel>
    <table>...</table>
    <table>...</table>
    <table>...</table>
    <table>...</table>
  </panel>
  <panel>
    <table>...</table>
    <table>...</table>
    <table>...</table>
    <table>...</table>
  </panel>
</row>

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Put all Windows Data n tables into one panel, something like this:

...
<row>
  <panel><html>...</html><panel>
  <panel>
    <table>...</table>
    <table>...</table>
    <table>...</table>
    <table>...</table>
  </panel>
  <panel>
    <table>...</table>
    <table>...</table>
    <table>...</table>
    <table>...</table>
  </panel>
</row>

niketn
Legend

@shankarananth agree to @martin_mueller 's approach. Your 2nd row will have first <panel> with only <single> and remaining three <panels> with four <table> elements. In order to align <single> value to the center of panel you may have to use CSS override like position: relative; top: 30% !important;

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

DalJeanis
Legend

paging @niketnilay - is vertical span like this possible in SimpleXML?

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...