topic Visualization for single value in Splunk Enterprise

Visualization for single value

Azwaliyana — Fri, 26 Nov 2021 06:35:12 GMT

I want to make the panel and the font smaller in size. So that I can put more panel in one line with the font visible.

Does anyone know how to do this?

Re: Visualization for single value

ITWhisperer — Fri, 26 Nov 2021 06:56:07 GMT

Edit trellis and set to small or have you already done this?

Re: Visualization for single value

Azwaliyana — Fri, 26 Nov 2021 08:54:29 GMT

Thank you so much! It works. I have 1 more question which is how can I remove the percentage which is the name of the field of the trellis.

Re: Visualization for single value

ITWhisperer — Fri, 26 Nov 2021 09:20:51 GMT

You would need to rename them in the search - are you able to share your search?

Re: Visualization for single value

Azwaliyana — Mon, 29 Nov 2021 02:16:36 GMT

source="KPG_MIO_HC_Logs_2021-11-14-10.txt" host="vm-splunk01" index="maxis_csasec_index" sourcetype="NFVInfrastructureMonitoring" "om-2 | CHANGED | rc=0 >>" OR "om-2 | FAILED | rc=0 >>"

| search total used free shared buffers cached

| multikv | eval percentage=round(used/total*100)

| where percentage NOT NULL | table percentage

This is the search query