Dashboards & Visualizations

Hide/show "other" series in a Dashboard without re-searching

amomchilov
Explorer

I have a dashboard with three radio buttons to select the "Style" of all graphs on my dashboard:

  1. "Relative breakdown": An area chart that's stacked 100%, and shows the "other" series
  2. "Absolute breakdown": An area chart that's stacked, and shows the "other" series
  3. "Raw comparison": A line chart that's not stacked, and hides the "other" series

They're defined like so:

<label>Style</label>
<choice value="style_relative">Relative breakdown</choice>
<choice value="style_absolute">Absolute breakdown</choice>
<choice value="style_compare">Raw comparison</choice>
<change>
  <condition label="Relative breakdown">
    <set token="chartType">area</set>
    <set token="stackMode">stacked100</set>
    <set token="useother">t</set>
  </condition>
  <condition label="Absolute breakdown">
    <set token="chartType">area</set>
    <set token="stackMode">stacked</set>
    <set token="useother">t</set>
  </condition>
  <condition label="Raw comparison">
    <set token="chartType">line</set>
    <set token="stackMode">default</set>
    <set token="useother">f</set>
  </condition>
</change>

Is it possible to set useother=t on my timechart, and then only/show hide it in the visualization layer? That way toggling doesn't require a full re-run of the search?

0 Karma

DalJeanis
Legend

All you have to do is write a base search that calculates all the categories, then a postprocessing search that eliminates the "other" category and recalculates.

With regard to your visualization, you have two (or three) different panels, one which shows the results of each search, and use depends or rejects to determine which to show.

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...