Hi, I am building a dashboard using Splunk 6.1.1 and Simple Xml.
I have a table like this:
<table>
<title>IP grouped by country</title>
<searchPostProcess>| stats count by country</searchPostProcess>
<option name="link.visible">false</option>
<drilldown>
<set token="categories">$row.country$</set>
</drilldown>
</table>
I have a drilldown here, and I would like to add a line saying "click on a row for more details". How can I add a text line (like a subtitle) under the title of the table? I tried with the tags <label>
and <description>
with no success.
thanks!
You may want to remove the title from
@somesoni2 is spot on here!
If you are using 6.1+, I would recommend the use of
<row>
<panel>
<html>
<h2>Table Title</h2><br/>
Click on the row
</html>
<table>
<searchString>|stats count | eval Metric="$Metric$" | table Metric</searchString>
<earliestTime>-1d</earliestTime>
<latestTime>now</latestTime>
</table>
</panel>
</row>
thanks for your answer, but maybe the app will be used on some splunk 6.0, I don't know exactly which version they will use!
You may want to remove the title from
grouping="2" made my day, thanks!
You could simply add a small HTML pannel saying "click on a row for more details" and have that panel added to the same group as your table 🙂