<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Single Value in a Module in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Single-Value-in-a-Module/m-p/100987#M5647</link>
    <description>&lt;P&gt;BTW the code formatting on this site went haywire with the XML. That is why it is standard format.&lt;/P&gt;</description>
    <pubDate>Tue, 17 Jul 2012 14:00:26 GMT</pubDate>
    <dc:creator>matthewcanty</dc:creator>
    <dc:date>2012-07-17T14:00:26Z</dc:date>
    <item>
      <title>Single Value in a Module</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Single-Value-in-a-Module/m-p/100986#M5646</link>
      <description>&lt;P&gt;I've been trying to get round the issue of only being able to have 3 columns in dashboards. After looking through views I've ended up a bit lost. &lt;/P&gt;

&lt;P&gt;The following search is working but the result is a grey button.&lt;/P&gt;

&lt;P&gt;&lt;VIEW template="dashboard.html" onunloadcanceljobs="True"&gt;&lt;BR /&gt;
 &lt;LABEL&gt;Test View&lt;/LABEL&gt;&lt;BR /&gt;
 &lt;MODULE name="SingleValue" layoutpanel="panel_row1_col1_grp1"&gt;&lt;BR /&gt;
  &lt;SINGLE&gt;&lt;BR /&gt;
   &lt;SEARCHSTRING&gt;host="&lt;EM&gt;90&lt;/EM&gt;" sourcetype="Perfmon*" instance="Spin.&lt;EM&gt;" collection="Process&lt;/EM&gt;" | stats distinct_count(host) As d | eval a=round(d/6*100, 0) | stats sum(a) as sumA | rangemap field=sumA low=99-100 elevated=50-98 severe=0-49 default=0&lt;/SEARCHSTRING&gt;&lt;BR /&gt;
   &lt;TITLE&gt;Prod Services&lt;/TITLE&gt;&lt;BR /&gt;
   &lt;EARLIESTTIME&gt;-30s&lt;/EARLIESTTIME&gt;&lt;BR /&gt;
   &lt;LATESTTIME&gt;now&lt;/LATESTTIME&gt;&lt;BR /&gt;
   &lt;OBJECT&gt;&lt;PARAM name="field" /&gt;sumA&lt;BR /&gt;
   %&lt;BR /&gt;
   range&lt;BR /&gt;
   10&lt;BR /&gt;
  &lt;/OBJECT&gt;&lt;/SINGLE&gt;&lt;BR /&gt;
 &lt;/MODULE&gt;&lt;BR /&gt;
&lt;/VIEW&gt;&lt;/P&gt;

&lt;P&gt;How do I get this to work?&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 12:06:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Single-Value-in-a-Module/m-p/100986#M5646</guid>
      <dc:creator>matthewcanty</dc:creator>
      <dc:date>2020-09-28T12:06:24Z</dc:date>
    </item>
    <item>
      <title>Re: Single Value in a Module</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Single-Value-in-a-Module/m-p/100987#M5647</link>
      <description>&lt;P&gt;BTW the code formatting on this site went haywire with the XML. That is why it is standard format.&lt;/P&gt;</description>
      <pubDate>Tue, 17 Jul 2012 14:00:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Single-Value-in-a-Module/m-p/100987#M5647</guid>
      <dc:creator>matthewcanty</dc:creator>
      <dc:date>2012-07-17T14:00:26Z</dc:date>
    </item>
    <item>
      <title>Re: Single Value in a Module</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Single-Value-in-a-Module/m-p/100988#M5648</link>
      <description>&lt;P&gt;&lt;VIEW template="dashboard.html"&gt;&lt;BR /&gt;
  &lt;MODULE name="HiddenSearch" layoutpanel="panel_row2_col1" autorun="True"&gt;&lt;BR /&gt;
    &lt;OBJECT&gt;&lt;PARAM name="search" /&gt;&lt;BR /&gt;
        host="&lt;EM&gt;90&lt;/EM&gt;" sourcetype="Perfmon*" instance="Spin.&lt;EM&gt;" collection="Process&lt;/EM&gt;" &lt;BR /&gt;
    &lt;BR /&gt;
    &lt;PARAM name="earliest" /&gt;-1m &lt;/OBJECT&gt;&lt;/MODULE&gt;&lt;/VIEW&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;module name="HiddenPostProcess" layoutPanel="panel_row1_col1_grp1"&amp;gt;
  &amp;lt;param name="search"&amp;gt;
  search host="*TSDAL" | stats distinct_count(host) As d | eval a=round(d/2*100, 0) 
  | stats sum(a) as sumA | fields sumA | rangemap field=sumA low=99-100 elevated=50-98 severe=0-49 default=0
  &amp;lt;/param&amp;gt;

  &amp;lt;module name="SingleValue"&amp;gt;
    &amp;lt;param name="field"&amp;gt;sumA&amp;lt;/param&amp;gt;
    &amp;lt;param name="afterLabel"&amp;gt;%&amp;lt;/param&amp;gt;
    &amp;lt;param name="classField"&amp;gt;range&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;

&amp;lt;/module&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;BR /&gt;&lt;BR /&gt;
&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 12:06:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Single-Value-in-a-Module/m-p/100988#M5648</guid>
      <dc:creator>matthewcanty</dc:creator>
      <dc:date>2020-09-28T12:06:28Z</dc:date>
    </item>
  </channel>
</rss>

