Splunk 6.x Dashboard Examples: How to replicate inline icons or rangemaps in javascript?

[dfalke]

I have installed the "Splunk 6.x Dashboard Examples" App and I am trying to implement the use of "Inline icons" or "rangemap", both of which have an example in the app.

I have created a separate app for our development and have copied the following files from the example app to our app.

From:

...\Splunk\etc\apps\simple_xml_examples\appserver\static

table_decorations.css
table_icons_inline.js
table_iconds_rangemap.js

To:

...\Splunk\etc\apps\<ourapp>\appserver\static

table_decorations.css
table_icons_inline.js
table_iconds_rangemap.js

Then I attempted to recreate the dashboard in our application, using the source code xml in the example:

<dashboard script="table_icons_inline.js" stylesheet="table_decorations.css">
    <label>Table Icon Set (Inline)</label>
    <row>
        <table id="table1">
            <title>Render Icons based on rangemap result</title>
            <searchString>index=_internal | stats count by sourcetype,source,host</searchString>
            <earliestTime>-1h</earliestTime>
            <option name="drilldown">none</option>
        </table>
    </row>
</dashboard>

The issue is that the inline icons do not work. It seems the CSS and JS are not having an affect, but I am not sure why it's not working. How do I go about troubleshooting? Am I missing the icon files? Any help is appreciated.

Thanks,
David

[camillak]

In my experience, using _bump and Ctrl+F5 to refresh the page, or a browser with caching disabled gives the smoothest experience when editing Splunk appserver files.

[sjafferali]

Hi all,

I have the same issue. I replicated the same from dashboard examples and i also restarted the splunk. I could not see the icons.
Any inputs is much appreciated.

Thanks.

[jmallorquin · Accepted solution]

Hi,

Make sure tha you define the id in the table.

<row>
        <table id="table1">
            <title>Render Icons based on rangemap result</title>
            <searchString>index=_internal | stats count by sourcetype,source,host</searchString>
            <earliestTime>-1h</earliestTime>
            <option name="drilldown">none</option>
        </table>
    </row>

Reboot splunk to applie the changes.

Hope help you

[dfalke]

Rebooting is what resolved the issue. Thank you!!