Dashboards & Visualizations

Edting dashboard

srajanbabu
Explorer

I created a dashboard displaying certain results out of a search.i want to add show & hide options to the dashboard so that if i click show button results should get displayed and when i click hide button results should not get displayed.

Tags (1)

somesoni2
SplunkTrust
SplunkTrust

One workaround to do this is to include a checkbox in the panel which says "Hide Results". When that checkbox is checked, not results are shown (query modified to return nothing). Its not same as hiding panel, but effect is same. Here is the example implementation.

<view autoCancelInterval="90" isPersistable="true" isSticky="true" isVisible="true" objectMode="SimpleForm" onunloadCancelJobs="true" template="dashboard.html">
    <label>Hide Panel Resutls</label>

    <module name="AccountBar" layoutPanel="appHeader"/>
    <module name="AppBar" layoutPanel="navigationHeader"/>
    <module name="SideviewUtils" layoutPanel="appHeader"/>
    <module name="Message" layoutPanel="messaging">
        <param name="filter">*</param>
        <param name="clearOnJobDispatch">False</param>
        <param name="maxSize">1</param>
    </module>
    <module name="Message" layoutPanel="messaging">
        <param name="filter">splunk.search.job</param>
        <param name="clearOnJobDispatch">True</param>
        <param name="maxSize">1</param>
    </module>

    <module name="Search" layoutPanel="panel_row1_col1" >
        <param name="search">
        YOUR MAIN SEARCH QUERY
        </param>
        <module name="Checkbox" layoutPanel="panel_row1_col1" >
            <param name="name">hideResult</param>
            <param name="checked">False</param>
            <param name="float">left</param>
            <param name="label">Hide Result</param>
            <param name="labelPosition">right</param>
            <param name="offValue">
            |fields foo,bar #some random name so that no field is selected#
            </param>
            <module name="PostProcess">
                <param name="search">
                <![CDATA[
                $hideResult$
                ]]>
                </param>

                <module name="JobProgressIndicator" layoutPanel="panel_row1_col1"></module>
                <module name="Pager">
                    <param name="count">50</param>
                    <module name="SimpleResultsTable">
                    ...                 
                    </module>
                </module>       
            </module>
        </module>
    </module>       
</view>
0 Karma

somesoni2
SplunkTrust
SplunkTrust

This code (and myself) uses Sideview Util app, which provide much more simplified advanced xml for the dashboards. This app is available free in Splunk-base. The code should work after you install the same.

0 Karma

srajanbabu
Explorer

when i tried this code i got something like Splunk encountered unknown module "SideViewutils" so view could not be loaded properly.

Can you please look towards it.

0 Karma

somesoni2
SplunkTrust
SplunkTrust

you might want to explore ShowHideHeader module. It provides options to show or hide the panel on click on the panel

0 Karma

srajanbabu
Explorer

i need in advance XML

0 Karma

Ayn
Legend

Simple XML, advanced XML? If it's simple you'll need to convert to advanced first of all.

0 Karma

srajanbabu
Explorer

i want to hide the panel showing the results

0 Karma

somesoni2
SplunkTrust
SplunkTrust

Just to be clear, you want to hide the panel you're showing results OR just want to show empty table/"No Results found" message in the dashboard panel??

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...