topic Re: Repeating charts based on dropdown value in Splunk Search

Repeating charts based on dropdown value

fuzzyrichie101 — Fri, 07 Feb 2014 16:17:39 GMT

I've got a case where I have a dropdown input that contains a list of hostnames. From this dropdown I am generating a chart based on the hostname selected. In some cases I'd like to have a grouping of hostnames (e.g. "Group A" for a certain section of computers) whose value would force multiple charts - one for each of the hostnames under that group - to be shown on the same page. This makes it easier for me to view a grouping of computers instead of checking each individually.

The problem I'm having is that generation of multiple chart objects. Is that even possible? Can it be a PostProcess module that kicks off more charts? Or is it more complicated than that?

Any help to start me off in the right direction would be wonderful 🙂

Thanks in advance!

Re: Repeating charts based on dropdown value

martin_mueller — Fri, 07 Feb 2014 17:57:52 GMT

You can use a SideviewUtils Multiplexer module to clone a subtree of XML for each row in a search result. I'm not quite sure how easy it'll be to feed that from a dropdown input.

Re: Repeating charts based on dropdown value

fuzzyrichie101 — Sat, 08 Feb 2014 18:02:01 GMT

Checked out that module and it says, word for word:

"Picture being able to write a dashboard where for EACH row in your search results you can have a graph."

I'll take a look at it but it seems you have answered my question already! 🙂