topic Re: Display images instead of field values in Splunk Search

Display images instead of field values

username021 — Wed, 19 Mar 2014 11:10:47 GMT

I have to replace some the table fields with strings like 'ok','warning','critical' with some images.
I have added stanzas in application.css under appserver-> static folder

SimpleResultstable. td.ok {.... }
SimpleResultstable. td.warning {.... }
SimpleResultstable. td.critacal {.... }

I have placed the images in the same directory (OS-unix), but still the dashboard doesn't show the images instead only the strings are displayed.

How can i troubleshoot this ?

Re: Display images instead of field values

alacercogitatus — Wed, 19 Mar 2014 11:27:22 GMT

What is the rest of your CSS? It does make a difference. For live help, use IRC #splunk on Efnet.

Re: Display images instead of field values

linu1988 — Wed, 19 Mar 2014 11:52:21 GMT

Set this up in you application.css file for the respective splunk app.

.SimpleResultsTable td.warning {
    background-image: url(images/warning.gif);
    background-repeat:no-repeat;
    background-position:5px 3px;
}

.SimpleResultsTable td.ok {
        background-image: url(images/ok.gif);
        background-repeat:no-repeat;
        background-position:5px 3px;
    }

.SimpleResultsTable td.critical {
        background-image: url(images/critical.gif);
        background-repeat:no-repeat;
        background-position:5px 3px;
    }

this goes in the application.js file. Colmn Name and Values should match exactly to the value set in the dashboard. Restart the splunk instance after the change. Take care of the closing braces properly.

if (Splunk.util.getCurrentView() == "**View_Name**") {
    if (Splunk.Module.SimpleResultsTable) {;
        Splunk.Module.SimpleResultsTable = $.klass(Splunk.Module.SimpleResultsTable, {
            forEachCellInColumn: function(columnName, callback) {
                var container = this.container;
                container.find("th:contains('" + columnName + "')").each(function() {
                    // does not support colspans.
                    var columnIndex = $(this).parent().children().index($(this));

                    container.find("td:nth-child(" + (columnIndex+1)  + ")").each(function() {
                        callback($(this));
                    });
                });
            },
        onResultsRendered: function() {
            this.forEachCellInColumn("**Column_Name**", function(tdElement) {
                if (tdElement.text()=="ok") {
                    tdElement.text("").addClass("ok");
                } else if(tdElement.text()=="warning") {
                    tdElement.text("").addClass("warning");
                  else {
                    tdElement.text("").addClass("critical");
                }
                }
            });
        }
    });
}

Thanks

Re: Display images instead of field values

linu1988 — Wed, 19 Mar 2014 20:57:41 GMT

Great, mark it as answer if so 🙂

Re: Display images instead of field values

username021 — Mon, 24 Mar 2014 07:04:27 GMT

HI , I guess its possible to display images for 2 or more columns . I tried by copying the whole function again and passed "Column2_name" , but I couldnt get the images for column 2.

Re: Display images instead of field values

linu1988 — Mon, 24 Mar 2014 07:24:02 GMT

Please mention the exact column name and the class values it will work. Don't make any duplicate which will not work.

Re: Display images instead of field values

username021 — Mon, 24 Mar 2014 07:27:29 GMT

yeah right. I have mentioned the exact column name.

View name is same.
class values are same.

but , it works perfectly for only 1 column , and not the other.

Re: Display images instead of field values

username021 — Tue, 25 Mar 2014 07:08:53 GMT

This will work for multiple columns :

if (Splunk.util.getCurrentView() == "**View_Name**") {
    if (Splunk.Module.SimpleResultsTable) {;
        Splunk.Module.SimpleResultsTable = $.klass(Splunk.Module.SimpleResultsTable, {
            forEachCellInColumn: function(columnName, callback) {
                var container = this.container;
                container.find("th:contains('" + columnName + "')").each(function() {
                    // does not support colspans.
                    var columnIndex = $(this).parent().children().index($(this));
                container.find("td:nth-child(" + (columnIndex+1)  + ")").each(function() {
                    callback($(this));
                });
            });
        },
    onResultsRendered: function() {
        this.forEachCellInColumn("**Column_Name_1**", function(tdElement) {
            if (tdElement.text()=="ok") {
                tdElement.text("").addClass("ok");
            } else if(tdElement.text()=="warning") {
                tdElement.text("").addClass("warning");
              else {
                tdElement.text("").addClass("critical");
            }
            }
        });

this.forEachCellInColumn("**Column_Name_2**", function(tdElement) {
                if (tdElement.text()=="ok") {
                    tdElement.text("").addClass("ok");
                } else if(tdElement.text()=="warning") {
                    tdElement.text("").addClass("warning");
                  else {
                    tdElement.text("").addClass("critical");
                }
                }
            });
    }
});

}

Re: Display images instead of field values

username021 — Tue, 25 Mar 2014 07:09:48 GMT

Thanks linu. below Jscript will work for multiple columns.