Dashboards & Visualizations

How to add rows to table in dashboard?

JacobWrdz
Explorer

Hello,

I must create a visualization- table. I have several similar tables located at dashboard side by side, the only difference is "Base Level". Client demands the visualization to look aesthetically- that means  the values on the column "Priority difference" should be stable, from -4 to 4 (-4, -3, -2, -1, 0, 1, 2, 3 ,4) and when there would be no logs for that, on the right column "Number" the value should be "0"- like at 1st photo, where I added it manually to visualize the case:

splunk_photo.png

The current final dashboard. At all the dashboards the values on Priority_difference should be always from -4 to 4, now when there are no logs the rows are just missing:splunk_photo2.png

The logs looks like this:


Could you kindly please advise?

Labels (1)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Not sure why you are using eventstats then dedup when stats will do that in one go

| stats count(Priority_difference) as variable by Priority_difference
| append
    [| makeresults
    | eval Priority_difference=mvrange(-4,5)
    | mvexpand Priority_difference
    | eval variable=0]
| stats sum(variable) as variable by Priority_difference
| sort Priority_difference
| eval Number=variable
| table Priority_difference Number
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...