Dashboards & Visualizations

How to force input in dashboard to be positioned between panels, and not stuck on top or stuck inside 1 panel alone?

valerie_tan
Path Finder

My dashboard aims to arrange the information from top to down in such an order:
Top layer: some overall summary that cannot be filtered
2nd Layer: The bunch of filters that will apply to many of my Inline Search Panels (i.e. 1 to many design).
3rd Layer: All the Inline Panels

I have been trying to drag the filter to be put into the 2nd layer, but Splunk forces me to place 1 filter INSIDE 1 panel at a time instead. I want to be able to filter several panels at the same time - example: Brand=ABC, all the panels will filter data for Brand=ABC.

Would appreciate it if someone can teach me how to get this done.

Tags (1)
0 Karma

tiagofbmm
Influencer

The following example puts the filter input between two panels that actually depend on it.

Take a look at the following example (copy it to your instance and try it, it's generic on index=_internal):

<form>
  <label>NewTest</label>
  <fieldset submitButton="false"></fieldset>
  <row>
    <panel>
      <title>Panel 1</title>
      <chart>
        <search>
          <query>index=_internal source="$src$"
|  timechart count</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="charting.chart">line</option>
        <option name="charting.drilldown">none</option>
      </chart>
    </panel>
    <panel>
      <title>Panel 2</title>
      <input type="dropdown" token="src">
        <label>Source Choice</label>
        <fieldForLabel>source</fieldForLabel>
        <fieldForValue>source</fieldForValue>
        <search>
          <query>| tstats count where index=_internal by source</query>
          <earliest>-60m@m</earliest>
          <latest>now</latest>
        </search>
      </input>
    </panel>
    <panel>
      <title>Panel 3</title>
      <single>
        <search>
          <query>index=_internal source="$src$"
| stats count</query>
          <earliest>-60m@m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </single>
    </panel>
  </row>
</form>
0 Karma

valerie_tan
Path Finder

Hi tiagofbmm,
May I know where to place it in the XML?

0 Karma

tiagofbmm
Influencer

You can copy my example to a test instance you may have and see for yourself that Panel 2 is stuck between Panel 1 and Panel 3

Let me know if it worked for you

0 Karma

tiagofbmm
Influencer

Please let me know if the answer was useful for you. If it was, accept it and upvote. If not, give us more input so we can help you with that

0 Karma

valerie_tan
Path Finder

Hi Tiagof, it is not what I was looking for. what I meant was a vertical layout where the filters can be on their own in between panels

0 Karma

valerie_tan
Path Finder

Hi tiagofbmm sorry i was held up with some stuff and put this on hold for a while. Let me get back to you a while later! 🙂

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...