I created custom visualization and now i need to edit search query then i do some stuff there.
For example: query was " source='test.csv' " and i need to add " | union source='test1.csv' " for
" souce='test.csv' | union source='test1.csv' ".
Visualization include only canvas.
@NeTLeaDeR For the community to assist you better, please elaborate what you are trying to do and what is not working for you as expected.
Is union being used because you are pulling data through two different lookups?
Which custom visualization is this, which JS charting library are you using?
Have you created custom visualization using Splunk's Custom Visualization API?
Is your visualization working when you use only source="test1.csv"?Can you add the SPL you are trying to use?