Dashboards & Visualizations

Create panels on the fly in a dashboard

hmahendrakumar
Path Finder

Here is my usecase(translated):

eg:-

I have the list of countries in a file countries.txt

It has the following content

USA

Mexico

Canada

and i have a generic search like this

index=$country sourcetype=tweets earliest=-7d@d | timechart span=1d count

I need to lookup this file and since it has 3 entries my dashboard should have three panels(chart or table or single)

with corresponding searches

index=USA sourcetype=tweets earliest=-7d@d | timechart span=1d count

index=Mexico sourcetype=tweets earliest=-7d@d | timechart span=1d count

index=Canada sourcetype=tweets earliest=-7d@d | timechart span=1d count

Is this possible ? Please let me know if I am not clear enough.

Tags (2)

IT_Bullgod
Splunk Employee
Splunk Employee

Instead of multiple panels, why not have a single panel? You can dynamically list each country as a series on a single chart - which is much cleaner. If there's 2 countries in the result, there's two series on the chart. If there's lots of results, use a limit so you see the top 10 or top 100. Enable drilldown so your user can dive into the specific country as needed.

0 Karma

hmahendrakumar
Path Finder

Yes. That would work if I have few countries with one or two metrics to show. But, in my case I have arnd 20 countries and more than 1 metric to show.I think I oversimplified my use case.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...