<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Not accurate data after transpose implemented in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598483#M49085</link>
    <description>&lt;P&gt;What do you have in your drilldown for each instance i.e. before and after you add the transpose?&lt;/P&gt;</description>
    <pubDate>Thu, 19 May 2022 13:14:56 GMT</pubDate>
    <dc:creator>ITWhisperer</dc:creator>
    <dc:date>2022-05-19T13:14:56Z</dc:date>
    <item>
      <title>Not accurate data after transpose implemented- How to fix?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598481#M49084</link>
      <description>&lt;P&gt;Hi.&lt;/P&gt;
&lt;P&gt;I have two panel dashboard. One is general status of cluster and another one details for selected cluster.&amp;nbsp;&lt;BR /&gt;---------&lt;BR /&gt;Panel 1&lt;BR /&gt;--------&lt;/P&gt;
&lt;LI-CODE lang="markup"&gt;`myapp_get_index` sourcetype="myapp:pce:metadata" myapp_type="myapp:pce:health"
|stats values(status) as status by fqdn
|rename fqdn as FQDN
| eval "Cluster Status" = upper(substr(status,0,1)) + lower(substr(status,2))
|fields - status&lt;/LI-CODE&gt;
&lt;P&gt;&lt;BR /&gt;-----------------------&lt;BR /&gt;Panel 2&lt;BR /&gt;--------------&lt;/P&gt;
&lt;LI-CODE lang="markup"&gt;`myapp_get_index` sourcetype="myapp:pce:metadata" myapp_type="myapp:pce:health" fqdn=$fqdn$
| head 1
|spath path="nodes{}" output=nodes
| mvexpand nodes
|table nodes
|spath input=nodes
|eval "Uptime Day"=round(uptime_seconds/60/60,0)
|table hostname, ip_address, type, cpu.percent, disk{}.location, disk{}.value.percent,memory.percent,services.running{},services.status, "Uptime Day"&lt;/LI-CODE&gt;
&lt;P&gt;&lt;BR /&gt;-----&lt;BR /&gt;This code works.&lt;BR /&gt;I added transpose command to panel 1&lt;BR /&gt;--------------&lt;/P&gt;
&lt;LI-CODE lang="markup"&gt; `myapp_get_index` sourcetype="myapp:pce:metadata" myapp_type="myapp:pce:health"
|stats values(status) as status by fqdn
|rename fqdn as FQDN
|eval "Cluster Status" = upper(substr(status,0,1)) + lower(substr(status,2))
|fields - status
|transpose 5
|fields - column
| rename column as FQDN,"row 1" as "FQDN 1", "row 2" as "FQDN 2", "row 3" as "FQDN 3", "row 4" as "FQDN 4", "row 5" as "FQDN 5"&lt;/LI-CODE&gt;
&lt;P&gt;&lt;BR /&gt;------------------&lt;BR /&gt;It shows data as I wanted in panel1, but in panel 2 it shows details only for first FQDN regardless what I click on.&lt;BR /&gt;-----------------------&lt;BR /&gt;I could not pinpoint what is missing.&lt;BR /&gt;&lt;BR /&gt;Thank you in advance.&lt;/P&gt;</description>
      <pubDate>Thu, 19 May 2022 16:13:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598481#M49084</guid>
      <dc:creator>bigll</dc:creator>
      <dc:date>2022-05-19T16:13:15Z</dc:date>
    </item>
    <item>
      <title>Re: Not accurate data after transpose implemented</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598483#M49085</link>
      <description>&lt;P&gt;What do you have in your drilldown for each instance i.e. before and after you add the transpose?&lt;/P&gt;</description>
      <pubDate>Thu, 19 May 2022 13:14:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598483#M49085</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-05-19T13:14:56Z</dc:date>
    </item>
    <item>
      <title>Re: Not accurate data after transpose implemented</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598491#M49086</link>
      <description>&lt;P&gt;Hi.&lt;BR /&gt;&lt;BR /&gt;Before transpose I have in panel 2 details for each cluster after I click on FQDN in top panel (panel1)&lt;BR /&gt;After transpose I have the same data, but only for FQDN #1 regardless on what FQ DN I click on in panel 1&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;TIA&lt;/P&gt;</description>
      <pubDate>Thu, 19 May 2022 13:34:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598491#M49086</guid>
      <dc:creator>bigll</dc:creator>
      <dc:date>2022-05-19T13:34:02Z</dc:date>
    </item>
    <item>
      <title>Re: Not accurate data after transpose implemented</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598495#M49088</link>
      <description>&lt;P&gt;And what do you have configured for the drilldown actions in each of those instances?&lt;/P&gt;</description>
      <pubDate>Thu, 19 May 2022 13:41:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598495#M49088</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-05-19T13:41:49Z</dc:date>
    </item>
    <item>
      <title>Re: Not accurate data after transpose implemented</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598499#M49090</link>
      <description>&lt;P&gt;&amp;lt;option name="drilldown"&amp;gt;cell&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;drilldown&amp;gt;&lt;BR /&gt;&amp;lt;set token="fqdn"&amp;gt;$click.value$&amp;lt;/set&amp;gt;&lt;BR /&gt;&amp;lt;/drilldown&amp;gt;&lt;/P&gt;</description>
      <pubDate>Thu, 19 May 2022 13:52:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598499#M49090</guid>
      <dc:creator>bigll</dc:creator>
      <dc:date>2022-05-19T13:52:41Z</dc:date>
    </item>
    <item>
      <title>Re: Not accurate data after transpose implemented</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598504#M49091</link>
      <description>&lt;P&gt;So you aren't changing the drilldown when you add the transpose?&lt;/P&gt;&lt;P&gt;You possibly need to use $click.name2$ after transpose instead of $click.value$?&lt;/P&gt;</description>
      <pubDate>Thu, 19 May 2022 13:59:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598504#M49091</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-05-19T13:59:09Z</dc:date>
    </item>
    <item>
      <title>Re: Not accurate data after transpose implemented</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598517#M49092</link>
      <description>&lt;P&gt;Thank you for an advise.&lt;BR /&gt;I changed drilldown to&amp;nbsp;&lt;BR /&gt;&lt;FONT color="#0000FF"&gt;&amp;lt;drilldown&amp;gt;&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT color="#0000FF"&gt;&amp;lt;set token="fqdn"&amp;gt;$click.name2$&amp;lt;/set&amp;gt;&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT color="#0000FF"&gt;&amp;lt;/drilldown&amp;gt;&lt;/FONT&gt;&lt;BR /&gt;It moves closer, but did not solve the issue.&lt;BR /&gt;That grabs column title, but not a FQDN value&lt;BR /&gt;I.e.&amp;nbsp;&amp;nbsp;values in the query "fqdn=FQDN 3" and not a "server3.path.org"&lt;BR /&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="screen1.jpg" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/19719iAF0CCE95DE02EE80/image-size/large?v=v2&amp;amp;px=999" role="button" title="screen1.jpg" alt="screen1.jpg" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 19 May 2022 15:03:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598517#M49092</guid>
      <dc:creator>bigll</dc:creator>
      <dc:date>2022-05-19T15:03:57Z</dc:date>
    </item>
    <item>
      <title>Re: Not accurate data after transpose implemented</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598526#M49095</link>
      <description>&lt;P&gt;OK then you want $click.value2$&lt;/P&gt;&lt;TABLE border="1" width="100%"&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD width="33.333333333333336%"&gt;&lt;STRONG&gt;$click.name$&lt;/STRONG&gt;&lt;/TD&gt;&lt;TD width="33.333333333333336%"&gt;&amp;nbsp;&lt;/TD&gt;&lt;TD width="33.333333333333336%"&gt;&lt;STRONG&gt;$click.name2$&lt;/STRONG&gt;&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD width="33.333333333333336%"&gt;&amp;nbsp;&lt;/TD&gt;&lt;TD width="33.333333333333336%"&gt;&amp;nbsp;&lt;/TD&gt;&lt;TD width="33.333333333333336%"&gt;&amp;nbsp;&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD width="33.333333333333336%"&gt;$click.value$&lt;/TD&gt;&lt;TD width="33.333333333333336%"&gt;&amp;nbsp;&lt;/TD&gt;&lt;TD width="33.333333333333336%"&gt;$click.value2$&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;</description>
      <pubDate>Thu, 19 May 2022 15:09:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598526#M49095</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-05-19T15:09:02Z</dc:date>
    </item>
    <item>
      <title>Re: Not accurate data after transpose implemented</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598529#M49097</link>
      <description>&lt;P&gt;THANK YOU.&amp;nbsp;&lt;span class="lia-unicode-emoji" title=":beaming_face_with_smiling_eyes:"&gt;😁&lt;/span&gt;&lt;/P&gt;&lt;P&gt;That did the trick.&lt;BR /&gt;.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 19 May 2022 15:16:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Not-accurate-data-after-transpose-implemented-How-to-fix/m-p/598529#M49097</guid>
      <dc:creator>bigll</dc:creator>
      <dc:date>2022-05-19T15:16:21Z</dc:date>
    </item>
  </channel>
</rss>

