Dashboards & Visualizations

How to force input in dashboard to be positioned between panels, and not stuck on top or stuck inside 1 panel alone?

valerie_tan
Path Finder

My dashboard aims to arrange the information from top to down in such an order:
Top layer: some overall summary that cannot be filtered
2nd Layer: The bunch of filters that will apply to many of my Inline Search Panels (i.e. 1 to many design).
3rd Layer: All the Inline Panels

I have been trying to drag the filter to be put into the 2nd layer, but Splunk forces me to place 1 filter INSIDE 1 panel at a time instead. I want to be able to filter several panels at the same time - example: Brand=ABC, all the panels will filter data for Brand=ABC.

Would appreciate it if someone can teach me how to get this done.

Tags (1)
0 Karma

tiagofbmm
Influencer

The following example puts the filter input between two panels that actually depend on it.

Take a look at the following example (copy it to your instance and try it, it's generic on index=_internal):

<form>
  <label>NewTest</label>
  <fieldset submitButton="false"></fieldset>
  <row>
    <panel>
      <title>Panel 1</title>
      <chart>
        <search>
          <query>index=_internal source="$src$"
|  timechart count</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="charting.chart">line</option>
        <option name="charting.drilldown">none</option>
      </chart>
    </panel>
    <panel>
      <title>Panel 2</title>
      <input type="dropdown" token="src">
        <label>Source Choice</label>
        <fieldForLabel>source</fieldForLabel>
        <fieldForValue>source</fieldForValue>
        <search>
          <query>| tstats count where index=_internal by source</query>
          <earliest>-60m@m</earliest>
          <latest>now</latest>
        </search>
      </input>
    </panel>
    <panel>
      <title>Panel 3</title>
      <single>
        <search>
          <query>index=_internal source="$src$"
| stats count</query>
          <earliest>-60m@m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </single>
    </panel>
  </row>
</form>
0 Karma

valerie_tan
Path Finder

Hi tiagofbmm,
May I know where to place it in the XML?

0 Karma

tiagofbmm
Influencer

You can copy my example to a test instance you may have and see for yourself that Panel 2 is stuck between Panel 1 and Panel 3

Let me know if it worked for you

0 Karma

tiagofbmm
Influencer

Please let me know if the answer was useful for you. If it was, accept it and upvote. If not, give us more input so we can help you with that

0 Karma

valerie_tan
Path Finder

Hi Tiagof, it is not what I was looking for. what I meant was a vertical layout where the filters can be on their own in between panels

0 Karma

valerie_tan
Path Finder

Hi tiagofbmm sorry i was held up with some stuff and put this on hold for a while. Let me get back to you a while later! 🙂

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform

 Are you ready to revolutionize your IT operations? As digital transformation accelerates, the demand for ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...