<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How can I change the layout of the fieldset section? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414765#M27257</link>
    <description>&lt;P&gt;I am sure that @niketnilay can help.&lt;/P&gt;</description>
    <pubDate>Sat, 13 Apr 2019 18:40:02 GMT</pubDate>
    <dc:creator>woodcock</dc:creator>
    <dc:date>2019-04-13T18:40:02Z</dc:date>
    <item>
      <title>How can I change the layout of the fieldset section?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414760#M27252</link>
      <description>&lt;P&gt;I have events with a lot of possible fields to search. I made a dashboard for business (non-technical) users to be able to see those events in a meaningful way. Depending on their business unit, they will most likely only want to see a subset of the data, so I've included checkboxes for the potential fields they'd like to include in the table. But there are a lot of checkboxes, so it makes the "inputs" portion of the dashboard very long:&lt;/P&gt;

&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/6898iAF47174B9FA988FC/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;What I'd like to be able to do is reformat it to distribute the fields in columns (and even group the other three inputs in a single column to the left), such as:&lt;/P&gt;

&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/6899i33288D8937EC8893/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;Is there a way to do that? I have checked the xml documentation at &lt;/P&gt;

&lt;BLOCKQUOTE&gt;
&lt;P&gt;docs.splunk.com/Documentation/SplunkCloud/latest/Viz/PanelreferenceforSimplifiedXML&lt;/P&gt;
&lt;/BLOCKQUOTE&gt;

&lt;P&gt;but not found any solution. From what I see, the fieldset node doesn't permit rows or panels, and the fieldset node cannot be a child of a row or panel.&lt;/P&gt;

&lt;P&gt;Any help is greatly appreciated.&lt;/P&gt;</description>
      <pubDate>Fri, 12 Apr 2019 16:48:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414760#M27252</guid>
      <dc:creator>seomaniv</dc:creator>
      <dc:date>2019-04-12T16:48:46Z</dc:date>
    </item>
    <item>
      <title>Re: How can I change the layout of the fieldset section?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414761#M27253</link>
      <description>&lt;P&gt;May  be you can change those checkboxes to multiselect dropdown.&lt;/P&gt;</description>
      <pubDate>Fri, 12 Apr 2019 18:07:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414761#M27253</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2019-04-12T18:07:13Z</dc:date>
    </item>
    <item>
      <title>Re: How can I change the layout of the fieldset section?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414762#M27254</link>
      <description>&lt;P&gt;Thank you, somesoni2. That &lt;STRONG&gt;&lt;EM&gt;is&lt;/EM&gt;&lt;/STRONG&gt; a significantly better option than what I was using. However, I would &lt;EM&gt;still&lt;/EM&gt; like to be able to customize the layout of the fieldset node, if possible.&lt;/P&gt;</description>
      <pubDate>Fri, 12 Apr 2019 18:32:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414762#M27254</guid>
      <dc:creator>seomaniv</dc:creator>
      <dc:date>2019-04-12T18:32:24Z</dc:date>
    </item>
    <item>
      <title>Re: How can I change the layout of the fieldset section?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414763#M27255</link>
      <description>&lt;P&gt;Not sure if that would easy to achieve using simple xml dashboard. You may want to explore HTML dashboard.&lt;BR /&gt;
&lt;A href="http://dev.splunk.com/view/webframework-developapps/SP-CAAAEM2"&gt;http://dev.splunk.com/view/webframework-developapps/SP-CAAAEM2&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;I personally not very good at dashboard customization, so hope other splunkers who have better idea would chip in here.&lt;/P&gt;</description>
      <pubDate>Fri, 12 Apr 2019 18:58:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414763#M27255</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2019-04-12T18:58:48Z</dc:date>
    </item>
    <item>
      <title>Re: How can I change the layout of the fieldset section?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414764#M27256</link>
      <description>&lt;P&gt;You can add specify id for each form element and select it using CSS for customisation.. either you can add external css file using stylesheet attribute in form element..&lt;BR /&gt;
Or you can include inline css using HTML module&lt;/P&gt;</description>
      <pubDate>Sat, 13 Apr 2019 17:44:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414764#M27256</guid>
      <dc:creator>paramagurukarth</dc:creator>
      <dc:date>2019-04-13T17:44:01Z</dc:date>
    </item>
    <item>
      <title>Re: How can I change the layout of the fieldset section?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414765#M27257</link>
      <description>&lt;P&gt;I am sure that @niketnilay can help.&lt;/P&gt;</description>
      <pubDate>Sat, 13 Apr 2019 18:40:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414765#M27257</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2019-04-13T18:40:02Z</dc:date>
    </item>
    <item>
      <title>Re: How can I change the layout of the fieldset section?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414766#M27258</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/169267"&gt;@seomaniv&lt;/a&gt; if you are on Splunk version till 7.0 you can refer to my Wiki Talk &lt;A href="https://wiki.splunk.com/User_talk:Niketnilay#Topic_8:_Splunk_Inputs_align_options.2Fchoices_horizontally_using_CSS" target="_blank"&gt;Topic 8: Splunk Inputs align options/choices horizontally using CSS&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;However Splunk Dashboard DOM structure changed between version 7.1 and 7.2. So you can try the following approach if you are &lt;CODE&gt;Splunk 7.2&lt;/CODE&gt;. I have added the input to a panel and given input id &lt;CODE&gt;input_checkbox_horizontal1&lt;/CODE&gt;. If you would notice the CSS selector is generic provided you name such checkboxes to input_checkbox_horizontal1, input_checkbox_horizontal2 etc.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;      div[id^="input_checkbox_horizontal"]{
        width: 800px !important;
      }
      div[id^="input_checkbox_horizontal"] div[data-component$="CheckboxGroup"]{
        display:flex !important;
        flex-wrap: wrap !important;
      }
      div[id^="input_checkbox_horizontal"] div[data-component$="CheckboxGroup"] div[data-test="switch"]{
        padding-right: 10px !important;
      }
      div[id^="input_checkbox_horizontal"] div[data-component$="CheckboxGroup"] div[data-test="switch"] label[data-test="label"] {
          width: 150px !important;
      }
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;IMG src="https://community.splunk.com/storage/temp/271062-checkbox-horizontal-72.png" alt="alt text" /&gt;&lt;/P&gt;

&lt;P&gt;Following is the code for the run anywhere search example based on Splunk's internal indexes (you should have access to run query agains Splunk's _internal index in order to load this dashboard)&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;Checkbox horizontal&amp;lt;/label&amp;gt;
  &amp;lt;fieldset submitButton="false"&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;input id="input_checkbox_horizontal1" type="checkbox" token="tokSourcetype" searchWhenChanged="true"&amp;gt;
        &amp;lt;label&amp;gt;Select Sourcetype&amp;lt;/label&amp;gt;
        &amp;lt;fieldForLabel&amp;gt;sourcetype&amp;lt;/fieldForLabel&amp;gt;
        &amp;lt;fieldForValue&amp;gt;sourcetype&amp;lt;/fieldForValue&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;| tstats count where index IN ("_*") by sourcetype&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;
      &amp;lt;/input&amp;gt;
      &amp;lt;html&amp;gt;
        &amp;lt;style&amp;gt;
          div[id^="input_checkbox_horizontal"]{
            width: 800px !important;
          }
          div[id^="input_checkbox_horizontal"] div[data-component$="CheckboxGroup"]{
            display:flex !important;
            flex-wrap: wrap !important;
          }
          div[id^="input_checkbox_horizontal"] div[data-component$="CheckboxGroup"] div[data-test="switch"]{
            padding-right: 10px !important;
          }
          div[id^="input_checkbox_horizontal"] div[data-component$="CheckboxGroup"] div[data-test="switch"] label[data-test="label"] {
              width: 150px !important;
          }
        &amp;lt;/style&amp;gt;
      &amp;lt;/html&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Wed, 30 Sep 2020 00:05:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414766#M27258</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2020-09-30T00:05:31Z</dc:date>
    </item>
    <item>
      <title>Re: How can I change the layout of the fieldset section?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414767#M27259</link>
      <description>&lt;P&gt;@woodcock done &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;Unfortunately this CSS is version specific I have provided answer for 7.2. But at the same time my Wiki Talk Topic link covers same topic which should work till version 7.0. (Time to update Wiki Talk provided it allows me to save)&lt;/P&gt;</description>
      <pubDate>Sat, 13 Apr 2019 20:56:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414767#M27259</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2019-04-13T20:56:33Z</dc:date>
    </item>
    <item>
      <title>Re: How can I change the layout of the fieldset section?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414768#M27260</link>
      <description>&lt;P&gt;Thank you, @niketnilay . This appears to be what I needed.&lt;/P&gt;</description>
      <pubDate>Mon, 15 Apr 2019 21:35:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-can-I-change-the-layout-of-the-fieldset-section/m-p/414768#M27260</guid>
      <dc:creator>seomaniv</dc:creator>
      <dc:date>2019-04-15T21:35:24Z</dc:date>
    </item>
  </channel>
</rss>

