Display images in dashboard - dynamically from search

[joshuamcqueen]

Hey Splunkers!

Have a tough one for ya... I'm working with a customer who does photography.

They want to see the top images users have been searching for.

My search returns a table of top 10 image thumbnails (the full http://xyz.jpg url)

How in the world do I go about getting them into a form / view / dashbaord?

I'm looking in to sideview utils now -- any hints would be greatly appreciated.

EDIT -- Here is an example of my results: http://imgur.com/YC8cq4B

Basically, I want to show 10 thumbnails in my dashboard using the results of this search

Thanks!!

-Josh

[joshuamcqueen]

Mr. Sideview,

Thank you SO MUCH. I played around with your app -- worked like a charm! No code, all drag and drop, very simple.

Take a look here: http://imgur.com/a/8EBQa

Note: I really like your youtube videos. I would suggest creating more tutorials. 🙂

-Josh

[sideview · Accepted solution]

Absolutely. This is a situation where with just core Splunk you would need to do something complicated with a custom event renderer or custom javascript and either way you'd have to dive into some custom code.

With Sideview Utils on the other hand, there are two ways you can go about this, both are pretty flexible and neither involve any custom code.

1) Use the Multiplexer to "multiplex" an HTML module, and use the HTML module to display a single image. When multiplexed by the N rows in the search results, you'll then end up with N HTML modules, each displaying one of the images in the set. You can put Multiplexer under a Pager and thus let your users page through as many images as you like. With some practice and occasional ingenuity, drilldowns and all that can be attached just by creating <a href="someView?someKey=$someValue$">see details</a> links in the HTML, or you might make the images themselves clickable. There is documentation on how to use the Multiplexer module in Sideview Utils itself. Navigate to "Module Documentation > Advanced Modules > The Multiplexer module", and after that "Module Documentation > Advanced Modules > Using Multiplexer with Pager". However it is a pretty advanced topic so feel free to post a few more details and I'll write up example config here as an update to this answer.

2) Use the Table module from Sideview Utils, and rely on its "custom embedding" feature to embed custom HTML (courtesy of the HTML module again), such that an <img> tag can be rendered into one or more of the tablecells in each row. You might go this way if the images can be fixed-size thumbnails, with full versions existing only in drilldown config perhaps, and if the other detail around each image lends itself to more of a tabular output.
There's good documentation also about the Table module's embedding features - Navigate to "Module Documentation > The Table Mdule > Embedding Examples".

As always though, make absolutely sure you have carefully read the homepage, and the next page (click "on to the examples"), and then the page after that. And you might not believe me, but you will make much faster progress and spend less time lost if you carve out a good chunk of time to just proactively read all the different sections of Sideview Utils docs.

I think that the Multiplexer direction is probably better for you. If you agree then I can update this answer and post sample config.

[joshuamcqueen]

Mr. Sideview,

Thank you SO MUCH. I played around with your app -- worked like a charm! No code, all drag and drop, very simple.

Take a look here: http://imgur.com/a/8EBQa

Note: I really like your youtube videos. I would suggest creating more tutorials. 🙂

-Josh

[joshuamcqueen]

Working on the second approach now. Will update when I have progress!

[Genti]

Nick M. for president!

[joshuamcqueen]

Updated my question to be more clear!

[bmacias84]

Are you just trying to get a table in your dashaboard witht he last 10 image names for the last 10min, 15min, etc and have the table got update?