<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Can I combine multiple panels into one panel? in All Apps and Add-ons</title>
    <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Can-I-combine-multiple-panels-into-one-panel/m-p/135055#M11287</link>
    <description>&lt;P&gt;Splunk ver.:  6&lt;BR /&gt;
Sideview utls ver.:  3.2.3&lt;/P&gt;

&lt;P&gt;I'm trying to create a reporting page for a monthly report that will summarize the total IDS alerts based on severity.  I currently have the dashboard set up to display the total count of IDS alerts then break it down by severity (ex. High Med Low).  This break down is displayed as a Radial gauge with a list of the top 5 alerts for that severity in a separate panel below the corresponding gauge.  What I would like to do is combine the two panels into one panel.&lt;/P&gt;

&lt;P&gt;Search for the radial gauge panel:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;sourcetype="ids" | stats count
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Search for the top 5 list panel:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;sourcetype="ids" severity=high | top signature,category,severity limit=5
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Is this possible?  I've tried looking at the dashboard in sideview utils but I've not seen a way to do it there either.&lt;/P&gt;</description>
    <pubDate>Thu, 17 Apr 2014 14:53:15 GMT</pubDate>
    <dc:creator>digital_alchemy</dc:creator>
    <dc:date>2014-04-17T14:53:15Z</dc:date>
    <item>
      <title>Can I combine multiple panels into one panel?</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Can-I-combine-multiple-panels-into-one-panel/m-p/135055#M11287</link>
      <description>&lt;P&gt;Splunk ver.:  6&lt;BR /&gt;
Sideview utls ver.:  3.2.3&lt;/P&gt;

&lt;P&gt;I'm trying to create a reporting page for a monthly report that will summarize the total IDS alerts based on severity.  I currently have the dashboard set up to display the total count of IDS alerts then break it down by severity (ex. High Med Low).  This break down is displayed as a Radial gauge with a list of the top 5 alerts for that severity in a separate panel below the corresponding gauge.  What I would like to do is combine the two panels into one panel.&lt;/P&gt;

&lt;P&gt;Search for the radial gauge panel:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;sourcetype="ids" | stats count
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Search for the top 5 list panel:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;sourcetype="ids" severity=high | top signature,category,severity limit=5
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Is this possible?  I've tried looking at the dashboard in sideview utils but I've not seen a way to do it there either.&lt;/P&gt;</description>
      <pubDate>Thu, 17 Apr 2014 14:53:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Can-I-combine-multiple-panels-into-one-panel/m-p/135055#M11287</guid>
      <dc:creator>digital_alchemy</dc:creator>
      <dc:date>2014-04-17T14:53:15Z</dc:date>
    </item>
    <item>
      <title>Re: Can I combine multiple panels into one panel?</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Can-I-combine-multiple-panels-into-one-panel/m-p/135056#M11288</link>
      <description>&lt;P&gt;Two modules will share a panel if you set their &lt;CODE&gt;layoutPanel&lt;/CODE&gt; attribute to the same value.&lt;/P&gt;</description>
      <pubDate>Thu, 17 Apr 2014 18:32:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Can-I-combine-multiple-panels-into-one-panel/m-p/135056#M11288</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2014-04-17T18:32:59Z</dc:date>
    </item>
  </channel>
</rss>

