- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dashboard Studio: Event Panel in the Table Visualization Format
Hello! I am using Dashboard Studio. I created an Events visualization that is currently in the List view. I want to make it into the Table view. This is the source code for the Dashboard Studio dashboard:
{
containerOptions: {},
"context": {},
"dataSources": {
"primary": ds # the query is index=* | table field1, field2, field3
},
"options": {},
"showLastUpdated": false,
"showProgressBar": true,
"type": "splunk.events"
}
I created something similar to what I'm looking for in Dashboard Classic and this is the code:
<panel>
<event>
<search>
<query>index=*</query>
<earliest>$global_time.earliest$</earliest>
<latest>$global_time.latest$</latest>
</search>
<fields>field, field2, field3</fields>
<option name="type">table</option>
</event>
</panel>
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Hi @lcguilfoil
Change your "splunk.events" to "splunk.table"
So its like this example:
"viz_URfuD3f4": {
"containerOptions": {},
"context": {},
"dataSources": {
"primary": "ds_0zCzRLMd"
},
"options": {},
"showLastUpdated": false,
"showProgressBar": false,
"type": "splunk.table"
}
Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards
Will
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @livehybrid,
I appreciate your comment! That's not exactly what I'm looking for. I don't want to use the Table panel, but instead I want to change the Event panel's display to table. I apologize if what I'm saying is unclear. The best example I can give is the same thing I'm aiming for in the Classic Dashboard:
<panel> <event> <search> <query>index=*</query> <earliest>$global_time.earliest$</earliest> <latest>$global_time.latest$</latest> </search> <fields>field, field2, field3</fields> <option name="type">table</option> </event> </panel>
