Dashboards & Visualizations

Dynamic Text on Dashboard description Area.

nilanjankc
New Member

Is it possible to have some dynamic text in Dashboard description area, like current system time?
I am attaching the screen shot.
I am very new to Splunk ,it is my learning journey. Thank you for your help. alt text

Tags (1)
0 Karma

niketn
Legend

@nilanjankc try the following Run anywhere example.
1) You can use hideTitle="true" to hide the Splunk dashboard title.
2) Then use <html> panel to build your own dashboard header.
3) In another row add the inputs.
4) Create an independent search to find the current time and set it to token to be used to display the current time in the html panel.

PS: You can type /edit or /editxml after the dashboard title in the URL to bring up Dashboard UI Edit or Dashboard Edit XML respectively since the Edit button will also not show.

<form hideTitle="true">
  <label>Test</label>
  <description>Refresh Interval 15 Minutes</description>
  <search>
    <query>| makeresults
    | eval CurrentTime=strftime(_time,"%Y/%m/%d %H:%M:%S %p")
    </query>
    <earliest>-1s</earliest>
    <latest>now</latest>
    <progress>
      <set token="tokCurrentTime">$result.CurrentTime$</set>
    </progress>
  </search>
  <fieldset submitButton="false"></fieldset>
  <row>
    <panel>
      <html>
        <div>
          <h1>Test</h1>
          <p class="dashboard-header-description">Refresh Interval 15 Minutes - $tokCurrentTime$</p>
        </div>
      </html>
    </panel>
  </row>
  <row>
    <panel>
      <input type="time" token="field1">
        <label></label>
        <default>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </default>
      </input>
      <input type="dropdown" token="field2">
        <label>Business</label>
      </input>
    </panel>
  </row>
</form>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

john_glasscock
Path Finder

@niketnilay Thank you for the answer above. I am in a similar situation, and can't figure out how to use your answer to display last months name in the description. I.E. I run a report on may 1 for totals for April. I want to display April, 2019 in the description. I can't figure out how to get the previous months value.

Thanks,
John

0 Karma

niketn
Legend

Hi @john.glasscock I am glad you found the answer useful. Do up-vote the answer/comment if it helped :slightly_smiling_face:

As per you issue description you need to display Month name using token through an independent search. Please try out the following and use tokPreviousMonth for your dynamic description.

   <search>
     <query>| makeresults
| eval PreviousMonth=strftime(relative_time(_time,"-1mon@mon"),"%B")
     </query>
     <earliest>-1s</earliest>
     <latest>now</latest>
     <progress>
       <set token="tokPreviousMonth">$result.PreviousMonth$</set>
     </progress>
   </search>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...