<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Single value chart in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Single-value-chart/m-p/534629#M151081</link>
    <description>&lt;P&gt;sample dashboard:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;dashboard&amp;gt;
  &amp;lt;label&amp;gt;single_test&amp;lt;/label&amp;gt;
  &amp;lt;init&amp;gt;
    &amp;lt;unset&amp;gt;$labels$&amp;lt;/unset&amp;gt;
  &amp;lt;/init&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel id="tables2"&amp;gt;
      &amp;lt;title&amp;gt;$titles$&amp;lt;/title&amp;gt;
      &amp;lt;single&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;| tstats count where index=_internal sourcetype=splunkd by PREFIX("name=")
| sort 1 - count
| rename name= as name
| eval {name}=count
| table * name count
&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
          &amp;lt;done&amp;gt;
            &amp;lt;set token="titles"&amp;gt;$result.name$&amp;lt;/set&amp;gt;
          &amp;lt;/done&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
        &amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;set token="labels"&amp;gt;$row.name$&amp;lt;/set&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/single&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel id="tables1"&amp;gt;
      &amp;lt;html&amp;gt;
         &amp;lt;style&amp;gt;

          #tables1 {
            width: 75% !important;
          }
          #tables2 {
            width: 25% !important;
          }
          #tables2 .panel-title {
            font-size: 32px !important; 
            padding: 12px 12px 7px 12px !important;
            display: flex;
            justify-content: center;
            font-weight: bold !important;
          }
        &amp;lt;/style&amp;gt;
        &amp;lt;p&amp;gt;$labels$&amp;lt;/p&amp;gt;
      &amp;lt;/html&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Sun, 03 Jan 2021 11:10:13 GMT</pubDate>
    <dc:creator>to4kawa</dc:creator>
    <dc:date>2021-01-03T11:10:13Z</dc:date>
    <item>
      <title>Single value chart</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Single-value-chart/m-p/534608#M151074</link>
      <description>&lt;P&gt;I have a single value chart,who statistical date is as below&lt;/P&gt;&lt;P&gt;&amp;lt;Field_name&amp;gt;&lt;/P&gt;&lt;P&gt;_____________&lt;/P&gt;&lt;P&gt;&amp;lt;field_value&amp;gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Now when i click on it,the field name has to be passed as the token value to another panel.&lt;/P&gt;&lt;P&gt;How to make that possible.&lt;/P&gt;&lt;P&gt;Please advice&lt;/P&gt;</description>
      <pubDate>Sat, 02 Jan 2021 10:49:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Single-value-chart/m-p/534608#M151074</guid>
      <dc:creator>Deepz2612</dc:creator>
      <dc:date>2021-01-02T10:49:22Z</dc:date>
    </item>
    <item>
      <title>Re: Single value chart</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Single-value-chart/m-p/534629#M151081</link>
      <description>&lt;P&gt;sample dashboard:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;dashboard&amp;gt;
  &amp;lt;label&amp;gt;single_test&amp;lt;/label&amp;gt;
  &amp;lt;init&amp;gt;
    &amp;lt;unset&amp;gt;$labels$&amp;lt;/unset&amp;gt;
  &amp;lt;/init&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel id="tables2"&amp;gt;
      &amp;lt;title&amp;gt;$titles$&amp;lt;/title&amp;gt;
      &amp;lt;single&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;| tstats count where index=_internal sourcetype=splunkd by PREFIX("name=")
| sort 1 - count
| rename name= as name
| eval {name}=count
| table * name count
&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
          &amp;lt;done&amp;gt;
            &amp;lt;set token="titles"&amp;gt;$result.name$&amp;lt;/set&amp;gt;
          &amp;lt;/done&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
        &amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;set token="labels"&amp;gt;$row.name$&amp;lt;/set&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/single&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel id="tables1"&amp;gt;
      &amp;lt;html&amp;gt;
         &amp;lt;style&amp;gt;

          #tables1 {
            width: 75% !important;
          }
          #tables2 {
            width: 25% !important;
          }
          #tables2 .panel-title {
            font-size: 32px !important; 
            padding: 12px 12px 7px 12px !important;
            display: flex;
            justify-content: center;
            font-weight: bold !important;
          }
        &amp;lt;/style&amp;gt;
        &amp;lt;p&amp;gt;$labels$&amp;lt;/p&amp;gt;
      &amp;lt;/html&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sun, 03 Jan 2021 11:10:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Single-value-chart/m-p/534629#M151081</guid>
      <dc:creator>to4kawa</dc:creator>
      <dc:date>2021-01-03T11:10:13Z</dc:date>
    </item>
  </channel>
</rss>

