Solved: Single panel with multiple values

bohrasaurabh · ‎08-15-2017

I am interested in creating a dashboard which has a row with one panel with multiple single values similar to the first row in the documentation -> http://docs.splunk.com/Documentation/Splunk/6.6.2/Viz/Aboutthismanual

Can someone please let me know how to do it....

cmerriman · ‎08-15-2017

If I understand what you're looking for, all you need to do is all the single values into the same panel in the source code. Try something similar to this:

<panel>
  <single>
     <search>
         <query>....</query>
     </search>
   </single>
   <single>
     <search>
         <query>....</query>
     </search>
   </single>.....
</panel>

If you want to break a new row into the panel, add

   <html tokens="true" encoded="true">
       <![CDATA[
           <br/>
           ]]>
    </html>

View solution in original post

bwlm · ‎10-03-2019

To convert my original dashboard with a "row of panels" into a "single panel" with a row of visualizations, all I had to do was Edit > Source and move the "title" tags of these panels to be inside the "single" tags, then remove the "panel" (close and open) tags in between each visualization.

I found this reference in the "Splunk Dashboard Examples" app: https://splunkbase.splunk.com/app/1603/

Open the "Splunk Dashboard Examples" app and scroll down to "Layout Elements" > "Panel Grouping with Single Values". This is available in Splunk 6.4+.

<dashboard>
    <label>Panel Grouping with Single Values</label>
    <description>Group multiple single value elements, aligning horizontally.</description>
    <row>
        <panel>
            <!-- 2 elements are grouped into 1 column -->
            <single>
                <title>Single panel 1</title>
                <search>
                    <query>index=_internal earliest=-h | stats count</query>
                </search>
                ...
            </single>
            <single>
                <title>Single panel 2</title>
                <search>
                    <query>index=_internal earliest=-24h | stats count</query>
                </search>
                ...
            </single>
        </panel>
    </row>
...

splunkwiz · ‎01-25-2019

How does the panel fit in the html tag? Can you provide full example

bwlm · ‎10-03-2019

Please see the example I added below from the Splunk Dashboard Examples app. Nesting tags: dashboard > row > panel > single > title > search.

cmerriman · ‎08-15-2017

If I understand what you're looking for, all you need to do is all the single values into the same panel in the source code. Try something similar to this:

<panel>
  <single>
     <search>
         <query>....</query>
     </search>
   </single>
   <single>
     <search>
         <query>....</query>
     </search>
   </single>.....
</panel>

If you want to break a new row into the panel, add

   <html tokens="true" encoded="true">
       <![CDATA[
           <br/>
           ]]>
    </html>

bohrasaurabh · ‎08-16-2017

Exactly what I was looking for!!!

bohrasaurabh · ‎08-16-2017

@lfedak Intresting... The link I posted existed when I posted this question. I still had it open from yesterday and posting the screen capture.

@cmerriman I will try your suggestion and will let you know. Thanks,

lfedak_splunk · ‎08-15-2017

Hi @bohrasaurabh, your link is for a deleted page. Can you please update it?

bohrasaurabh · ‎08-16-2017

@lfedak: The page still exists. I think the issue is the period at the end of the link is becoming part of the URL when you click it and hence page does not exist error. I am unable to edit the question any more to remove that period sign.

cmerriman · ‎08-15-2017

@lfedak this should be a comment. Comments are for clarifying questions and more details whereas answers are to post Solutions. Thanks 🙂

lfedak_splunk · ‎08-15-2017

Woops, thought I did post it as a comment. Thanks for catching that 🙂

Single panel with multiple values

Can’t make it to .conf25? Join us online!

Calling All Security Pros: Ready to Race Through Boston?

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Customer success is front and center at .conf25

Are you a member of the Splunk Community?

Single panel with multiple values

Can’t make it to .conf25? Join us online!

Calling All Security Pros: Ready to Race Through Boston?

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Customer success is front and center at .conf25