topic Re: Dashboard XML Hiding/Displaying Panels in Splunk Dev

Dashboard XML Hiding/Displaying Panels

jjburke306 — Tue, 22 Sep 2020 13:56:19 GMT

Hi all,

I have been trying to create a Dashboard for searches based on a specific ID number (this is intended to help team members find connected data, who aren't proficient in writing searches). The panels are backed by some extensive search macros. Anyways, this is a two part question regarding XML development:

First, I was wondering if there was a way via XML to check against null return on the search, so that I can hide panels that return nothing, and display only those which return a value from the search?

Second, how would one actually go about using XML to hide panels or display panels, in the case that a search returns no results or a valid result? Thank you.

Re: Dashboard XML Hiding/Displaying Panels

ITWhisperer — Tue, 22 Sep 2020 14:11:56 GMT

Panels can be shown/hidden depending on the presence of a token. This token could be set/unset based on the number of results in the query of the panel

<panel depends="$results1$"> ...

Re: Dashboard XML Hiding/Displaying Panels

jjburke306 — Tue, 22 Sep 2020 21:02:35 GMT

Hi there,

How would you go about actually checking for a certain number of results?

Thanks

Re: Dashboard XML Hiding/Displaying Panels

jjburke306 — Tue, 22 Sep 2020 21:02:51 GMT

@ITWhisperer

Re: Dashboard XML Hiding/Displaying Panels

ITWhisperer — Tue, 22 Sep 2020 21:18:00 GMT

<search> <query>...</query> <earliest>...</earliest> <latest>..</latest> <done> <set token="search_results">$job.resultCount$</set> </done> </search>

Re: Dashboard XML Hiding/Displaying Panels

jjburke306 — Tue, 22 Sep 2020 21:19:43 GMT

Thx a ton. @ITWhisperer