topic Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM) in Splunk ITSI

i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

mahendra559 — Sun, 07 Jun 2020 00:30:27 GMT

i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

richgalloway — Sat, 29 Feb 2020 13:30:45 GMT

What I've done in the past is combine multiple fields (usually just two) into a single field using the . operator.

... | eval foo = bar . ":" . baz

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

sumanssah — Sat, 29 Feb 2020 16:25:32 GMT

Can you please share more details on the requirement.

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

gcusello — Sat, 29 Feb 2020 16:42:12 GMT

Hi @mahendra559,
you should try to use a Poste Process Search to have the results you want and to display in different single panels, see the below example:

<dashboard>
  <label>Multi single panel</label>
  <search id="my_search">
    <query>
      | makeresults 
      | eval CPU="2", RAM="32GB", disk="1TB"
    </query>
    <earliest>-24h@h</earliest>
    <latest>now</latest>
    <sampleRatio>1</sampleRatio>
  </search>
  <row>
    <panel>
      <single>
        <title>CPU</title>
        <search base="my_search">
          <query>
            | table CPU 
          </query>
        </search>
        <option name="drilldown">none</option>
      </single>
    </panel>
    <panel>
      <single>
        <title>RAM</title>
        <search base="my_search">
          <query>
            | table RAM 
          </query>
        </search>
        <option name="drilldown">none</option>
      </single>
    </panel>
    <panel>
      <single>
        <title>Disk</title>
        <search base="my_search">
          <query>
            | table disk 
          </query>
        </search>
        <option name="drilldown">none</option>
      </single>
    </panel>
  </row>
</dashboard>

Ciao.
Giuseppe

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

woodcock — Sat, 29 Feb 2020 23:04:47 GMT

This is done with the Trellis feature:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/TrellisView

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

to4kawa — Sun, 01 Mar 2020 01:01:29 GMT

Env perc
CPU 80
Disk_Space  90
RAM 20

you should make table.
after that,
| stats values(*) as * by Env
Visualization > Single Value with Trellis

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

mahendra559 — Sun, 01 Mar 2020 14:25:59 GMT

these are metric logs i need cpu ,ram,disk space metric logs and all these 3 names in one single value panel with colors and percentage

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

mahendra559 — Sun, 01 Mar 2020 14:26:18 GMT

these are metric logs i need cpu ,ram,disk space metric logs and all these 3 names in one single value panel with colors and percentage

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

mahendra559 — Sun, 01 Mar 2020 14:26:51 GMT

these are metric logs i need cpu ,ram,disk space metric logs and all these 3 names in one single value panel with colors and percentage

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

mahendra559 — Sun, 01 Mar 2020 14:27:03 GMT

these are metric logs i need cpu ,ram,disk space metric logs and all these 3 names in one single value panel with colors and percentage

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

richgalloway — Sun, 01 Mar 2020 15:00:20 GMT

I love how requirements change after answers are provided. What you want to do is not possible with one single-value panel.

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

woodcock — Sun, 01 Mar 2020 15:12:11 GMT

That is EXACTLY what trellis does. Do your homework.

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

to4kawa — Sun, 01 Mar 2020 20:45:21 GMT

Have you try this? How is it?
all these 3 names in one single value panel with colors and percentage
you want three but single. I think single means one, isn't it?

Re: i want to display multiple fields in single value display, how to display multiple fields in single value display panal (CPU,Disk Space,RAM)

woodcock — Sun, 01 Mar 2020 21:13:36 GMT

Trellis is the only native way to do this: 1 panel but multiple related visualizations in that 1 panel.