<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Dashboard in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard/m-p/689669#M56505</link>
    <description>&lt;P&gt;Does anybidy konw when I clicked valueo in table cell How I render input btn?&lt;/P&gt;</description>
    <pubDate>Wed, 05 Jun 2024 09:01:13 GMT</pubDate>
    <dc:creator>silverKi</dc:creator>
    <dc:date>2024-06-05T09:01:13Z</dc:date>
    <item>
      <title>Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard/m-p/689631#M56499</link>
      <description>&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="silverKi_0-1717562227032.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/31150iC96E7F702D7AA733/image-size/medium?v=v2&amp;amp;px=400" role="button" title="silverKi_0-1717562227032.png" alt="silverKi_0-1717562227032.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN class=""&gt;I want to fill the table cells with tags. Like multi selector.. How can I make the table contents look like tags?&lt;BR /&gt;&lt;SPAN&gt;How to do it without using html elements??&amp;nbsp;&lt;/SPAN&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 05 Jun 2024 04:43:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard/m-p/689631#M56499</guid>
      <dc:creator>silverKi</dc:creator>
      <dc:date>2024-06-05T04:43:04Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard/m-p/689641#M56502</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/268696"&gt;@silverKi&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;&lt;P&gt;in my knowledge, it isn't possible!&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Wed, 05 Jun 2024 06:04:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard/m-p/689641#M56502</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2024-06-05T06:04:18Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard/m-p/689665#M56504</link>
      <description>&lt;P&gt;Your subject is very broad - how would anyone know what this was specifically about especially given that it is already in a Dashboards &amp;amp; Visualizations section!&lt;/P&gt;&lt;P&gt;Having said that, you then restrict your required solution to not include HTML - as&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352"&gt;@gcusello&lt;/a&gt;&amp;nbsp;says, with these restrictions, it isn't possible (with current standard visualization options).&lt;/P&gt;&lt;P&gt;However, if you would be prepared to expand your outlook you could do something along these lines:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;  &amp;lt;row&amp;gt;
    &amp;lt;panel depends="$stayhidden$"&amp;gt;
      &amp;lt;html&amp;gt;
        &amp;lt;style&amp;gt;
          div[id="states"] tr[data-view$="ResultsTableRow"] td:nth-child(2)
          {
            display: flex !important;
          }
          div[id="states"] tr[data-view$="ResultsTableRow"] td:nth-child(2) .multivalue-subcell
          {
            border: 2px solid black !important;
            padding-left: 4px;
            padding-right: 4px;
            margin-left: 4px;
            margin-right: 4px;
            border-radius: 8px !important;
          }
        &amp;lt;/style&amp;gt;
      &amp;lt;/html&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table id="states"&amp;gt;
        &amp;lt;title&amp;gt;States&amp;lt;/title&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;| makeresults count=10
| eval event=random() % 3 
| eval state=mvindex(split("ACTIVE,SLEEP,DEAD",","),random() % 3) 
| stats values(state) as state by event&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ITWhisperer_0-1717574403854.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/31151i78C96C02F129886F/image-size/medium?v=v2&amp;amp;px=400" role="button" title="ITWhisperer_0-1717574403854.png" alt="ITWhisperer_0-1717574403854.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;Note that this doesn't work if there is only one value in the multivalue field (however, with a bit of extra work, this can be gotten around by inserting an additional value to the field and then hiding this value.&lt;/P&gt;</description>
      <pubDate>Wed, 05 Jun 2024 08:05:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard/m-p/689665#M56504</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2024-06-05T08:05:10Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard/m-p/689669#M56505</link>
      <description>&lt;P&gt;Does anybidy konw when I clicked valueo in table cell How I render input btn?&lt;/P&gt;</description>
      <pubDate>Wed, 05 Jun 2024 09:01:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard/m-p/689669#M56505</guid>
      <dc:creator>silverKi</dc:creator>
      <dc:date>2024-06-05T09:01:13Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard/m-p/689674#M56506</link>
      <description>&lt;P&gt;Do you mean something like this:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;  &amp;lt;row&amp;gt;
    &amp;lt;panel depends="$stayhidden$"&amp;gt;
      &amp;lt;html&amp;gt;
        &amp;lt;style&amp;gt;
          div[id="states"] tr[data-view$="ResultsTableRow"] td:nth-child(2)
          {
            display: flex !important;
          }
          div[id="states"] tr[data-view$="ResultsTableRow"] td:nth-child(2) .multivalue-subcell
          {
            padding-left: 4px;
            padding-right: 4px;
            margin-left: 4px;
            margin-right: 4px;
            border: 2px solid white !important;
            border-radius: 8px !important;
            color: white !important;
            box-shadow:
              inset 0 0 3px 0 rgba(0,0,0,.4),
              inset 0 0 3px 5px rgba(0,0,0,.05),
              inset 2px 3px 4px 0 rgba(255,255,255,.6),
              2px 2px 4px 0 rgba(0,0,0,.25) !important;
          }
          div[id="states"] tr[data-view$="ResultsTableRow"] td:nth-child(2) .multivalue-subcell:hover
          {
            box-shadow:
              inset 0 0 3px 0 rgba(0,0,0,.4),
              inset 0 0 3px 5px rgba(0,0,0,.05),
              inset 2px 3px 4px 0 rgba(255,255,255,.6),
              0 12px 16px 0 rgba(0,0,0,0.24),
              0 17px 50px 0 rgba(0,0,0,0.19) !important;
            transform: translateY(-1px) !important;
          }
          div[id="states"] tr[data-view$="ResultsTableRow"] td:nth-child(2) .multivalue-subcell:active
          {
            box-shadow:
              inset 0 0 3px 0 rgba(0,0,0,.4),
              inset 0 0 3px 5px rgba(0,0,0,.05),
              inset 2px 3px 4px 0 rgba(255,255,255,.6),
              0 8px 16px 0 rgba(0,0,0,0.24),
              0 13px 50px 0 rgba(0,0,0,0.19) !important;
            transform: translateY(2px) !important;
          }
          div[id="states"] tr[data-view$="ResultsTableRow"] td:nth-child(2) .multivalue-subcell
          {
            background-color: yellow !important;
            color: black !important;
          }
          div[id="states"] tr[data-view$="ResultsTableRow"] td:nth-child(2) .multivalue-subcell[data-mv-index="0"]
          {
            display: none !important;
          }
        &amp;lt;/style&amp;gt;
      &amp;lt;/html&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table id="states"&amp;gt;
        &amp;lt;title&amp;gt;States $state$&amp;lt;/title&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;| makeresults count=10
| eval event=random() % 3 
| eval state=mvindex(split("ACTIVE,SLEEP,DEAD",","),random() % 3) 
| stats values(state) as state by event
| eval state=mvappend("extra",state)&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;row&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;eval token="state"&amp;gt;$click.value2$&amp;lt;/eval&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;&lt;/LI-CODE&gt;</description>
      <pubDate>Wed, 05 Jun 2024 09:46:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard/m-p/689674#M56506</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2024-06-05T09:46:03Z</dc:date>
    </item>
  </channel>
</rss>

