All Apps and Add-ons

Can I combine multiple panels into one panel?

digital_alchemy
Path Finder

Splunk ver.: 6
Sideview utls ver.: 3.2.3

I'm trying to create a reporting page for a monthly report that will summarize the total IDS alerts based on severity. I currently have the dashboard set up to display the total count of IDS alerts then break it down by severity (ex. High Med Low). This break down is displayed as a Radial gauge with a list of the top 5 alerts for that severity in a separate panel below the corresponding gauge. What I would like to do is combine the two panels into one panel.

Search for the radial gauge panel:

sourcetype="ids" | stats count

Search for the top 5 list panel:

sourcetype="ids" severity=high | top signature,category,severity limit=5

Is this possible? I've tried looking at the dashboard in sideview utils but I've not seen a way to do it there either.

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Two modules will share a panel if you set their layoutPanel attribute to the same value.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Two modules will share a panel if you set their layoutPanel attribute to the same value.

View solution in original post

.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!