topic Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x? in Splunk Search

How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

somesoni2 — Wed, 19 Nov 2014 21:48:54 GMT

I am using Splunk 6.1.2 and have a panel with a table developed in simple xml.

I would like to allow users to be able to choose the number of rows displayed in the table.

I know that with write permissions, users can do Edit->Edit Panel->Table formatting and change the number of rows to be displayed, but I want to just read access to dashboard and maybe have a drop-down with values 5,10,15,20,50,100 and it should be used a no of rows displayed in the table.

I tried with a drop-down with above values and tried to set the "count" property with the drop-down token like below:

<option name="count">$noofrows$</option>

But this gives errors below error on saving launching

XML Syntax Error: invalid literal for int() with base 10: '$noofrows$'

Has anyone done something similar or have any better way to do it?

Thanks in advanced.

Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

jitsinha — Thu, 27 Nov 2014 10:40:51 GMT

Hii Somesh,

If you are using a Table command to populate the statistics table then I would suggest to do the following ,

Dropdown :

*<input type="dropdown" token="rowNo" searchWhenChanged="true">
  <default>10</default>
  <choice value="10">10</choice>
  <choice value="20">20</choice>
  <choice value="30">30</choice>
</input>

*Search Query to populate the table: * index = my_index | table a, b , c | head $rowNo$

Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

Lucas_K — Fri, 26 Jun 2015 04:33:47 GMT

Did you ever find a working solution to this? The error still occurs as of v6.2.3

I'm trying to do the same thing (and hence finding this unanswered post!).

Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

akazarov — Thu, 07 Apr 2016 14:46:27 GMT

Same here. A solution would be appreciated.

Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

kasu_praveen — Fri, 26 Aug 2016 10:45:49 GMT

Any solution for this? Trying to control number of rows displayed per page dynamically (With dropdown selected value)

Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

DaveAW — Fri, 02 Sep 2016 02:00:00 GMT

Add another vote. tonumber($noofrows$) doesn't work either.

Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

spammenot66 — Fri, 09 Sep 2016 13:33:11 GMT

@jitsinha this is a nice solution for dynamically displaying top # of rows. I think Somesh and the rest of us are trying to determine if there's a way to dynamically change the number of rows per page

Currently this needs to be hard coded to be a specific integer number

<table>
...
...
<option name="count">10</option>
</table>

it would be nice if we could have it be dynamically driven by a token

<table>
...
...
<option name="count">$dispRows_tok$</option>
</table>

im guessing its not possible, but it would be nice to have in future updates.

Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

apchandler — Tue, 21 Mar 2017 14:35:02 GMT

Old post, but I was just trying to do something similar and wanted to share what I came up with.

My Use Case:
Table A and Table B are side-by-side on the same dashboard row. Table A will always show every row (between 15 and 40), but Table B will have hundreds of rows. I wanted the maximum rows of Table B to be dynamically constrained to the currently-displayed row count of Table A.

My Solution:

Table A:
<search>
 <query>blahBlah</query>
 <done>
  <eval token="rowsTableA">tonumber('job.resultCount')</eval>
 </done>
</search>

Table B:
<option name="count">$rowsTableA$</option>

Hope this might help someone if you're in a similar situation! 🙂

Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

arathig — Mon, 24 Apr 2017 12:05:14 GMT

If rowsTableA is evaluated to a value more then 100 - that this wont work. It defaults to show just 20 records in the table

Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

arathig — Mon, 24 Apr 2017 12:05:40 GMT

I downvoted this post because will not help - when the count is evaluated to more than 100

Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

niketn — Tue, 07 Nov 2017 10:42:42 GMT

@somesoni2, I just tested this in Splunk Enterprise 7 and I was able to pass Number of Rows value from Dropdown to Table Simple XML configurationi.e. <option name="count">$tokRows$</option>. Not sure which version it was fixed. Following is run any where dashboard for testing.

<form>
  <label>Table number of rows via token</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="tokRows" searchWhenChanged="true">
      <label>Number Of Rows</label>
      <choice value="5">5</choice>
      <choice value="10">10</choice>
      <choice value="20">20</choice>
      <choice value="30">30</choice>
      <default>5</default>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <search>
          <query>index=_internal sourcetype=splunkd log_level=*
|  stats count by component log_level</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="count">$tokRows$</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
</form>

Re: How to dynamically change number of rows displayed in the table with simple XML using Splunk 6.1.x?

Nextbeat — Fri, 05 Jan 2018 10:02:32 GMT

I was able to get this working in 6.6.3, but not in 6.3.1.

<form>
  <label></label>
  <row>
    <panel>     
     <input type="text" token="row_tok" searchWhenChanged="true">
       <label>Number Of Rows</label>
       <default>10</default>
     </input>
    </panel>
  </row>
  <row>
    <panel>
     <table>
        <search>
          <query></query>
        </search>
        <option name="count">$row_tok$</option>
      </table>
    </panel>
  </row>
</form>