Dashboards & Visualizations

How to set up more than three type of visualization e.g. single value or radial gauge in a row ?

C4r7m4n
Path Finder

Hello,

Does somebody know how to set up more than three type of visualization e.g. single value or radial gauge in a row ?

I have to set up 4 single value dashboard in a row. Unfortunately when i drag and drop the fourth element it does not want to jump up where i want to pleace it 😞

Thanks in advance

0 Karma

C4r7m4n
Path Finder

Hello, @dart

Thanks for your response.

You can convert your dashboard to the
advanced XML

I don't quite understand advanced XML. Did you mean switch the ON button and press Edit XML and then paste your example?
I tried to convert your example, but I've got only blank dashboard.
I found one solution: I jast use:

<row grouping="">

statement and it's working, but not as I wanted to. Is your solution similar ?

0 Karma

dart
Splunk Employee
Splunk Employee

I think that is the same solution.

0 Karma

dart
Splunk Employee
Splunk Employee

You also can't do this via the simple XML.

You can convert your dashboard to the advanced XML, and then change the layoutPanel attributes to place them in groups.

In the example below, 4 charts are in the 1st panel, using layoutPanel like so: layoutPanel="panel_row1_col1_grp1"

<view autoCancelInterval="90" isVisible="true" objectMode="SimpleDashboard" onunloadCancelJobs="true" refresh="-1" template="dashboard.html">
  <label>test</label>
  <module name="AccountBar" layoutPanel="appHeader"/>
  <module name="AppBar" layoutPanel="navigationHeader"/>
  <module name="Message" layoutPanel="messaging">
    <param name="filter">*</param>
    <param name="clearOnJobDispatch">False</param>
    <param name="maxSize">1</param>
  </module>
  <module name="DashboardTitleBar" layoutPanel="viewHeader"/>
  <module name="Message" layoutPanel="navigationHeader">
    <param name="filter">splunk.search.job</param>
    <param name="clearOnJobDispatch">True</param>
    <param name="maxSize">1</param>
    <param name="level">warn</param>
  </module>
  <module name="HiddenSavedSearch" layoutPanel="panel_row1_col1_grp1" group="test" autoRun="True">
    <param name="savedSearch">Admin - Recent Timestamping Issues</param>
    <param name="groupLabel">test</param>
    <module name="ViewstateAdapter">
      <param name="suppressionList"/>
      <param name="savedSearch">Admin - Recent Timestamping Issues</param>
      <module name="HiddenFieldPicker">
        <param name="strictMode">True</param>
        <module name="JobProgressIndicator"/>
        <module name="Paginator">
          <param name="count">10</param>
          <param name="entityName">results</param>
          <module name="EnablePreview">
            <param name="enable">True</param>
            <param name="display">False</param>
            <module name="SimpleResultsTable">
              <param name="drilldown">row</param>
              <param name="entityName">results</param>
              <param name="allowTransformedFieldSelect">True</param>
              <module name="Gimp"/>
              <module name="ConvertToDrilldownSearch">
                <module name="ViewRedirector">
                  <param name="viewTarget">flashtimeline</param>
                </module>
              </module>
            </module>
            <module name="ViewRedirectorLink">
              <param name="viewTarget">flashtimeline</param>
            </module>
          </module>
        </module>
      </module>
    </module>
  </module>
  <module name="HiddenSavedSearch" layoutPanel="panel_row1_col1_grp2" group="test" autoRun="True">
    <param name="savedSearch">Admin - Recent Timestamping Issues</param>
    <param name="groupLabel">test</param>
    <module name="ViewstateAdapter">
      <param name="suppressionList"/>
      <param name="savedSearch">Admin - Recent Timestamping Issues</param>
      <module name="HiddenFieldPicker">
        <param name="strictMode">True</param>
        <module name="JobProgressIndicator"/>
        <module name="Paginator">
          <param name="count">10</param>
          <param name="entityName">results</param>
          <module name="EnablePreview">
            <param name="enable">True</param>
            <param name="display">False</param>
            <module name="SimpleResultsTable">
              <param name="drilldown">row</param>
              <param name="entityName">results</param>
              <param name="allowTransformedFieldSelect">True</param>
              <module name="Gimp"/>
              <module name="ConvertToDrilldownSearch">
                <module name="ViewRedirector">
                  <param name="viewTarget">flashtimeline</param>
                </module>
              </module>
            </module>
            <module name="ViewRedirectorLink">
              <param name="viewTarget">flashtimeline</param>
            </module>
          </module>
        </module>
      </module>
    </module>
  </module>
  <module name="HiddenSavedSearch" layoutPanel="panel_row1_col1_grp3" group="test" autoRun="True">
    <param name="savedSearch">Admin - Recent Timestamping Issues</param>
    <param name="groupLabel">test</param>
    <module name="ViewstateAdapter">
      <param name="suppressionList"/>
      <param name="savedSearch">Admin - Recent Timestamping Issues</param>
      <module name="HiddenFieldPicker">
        <param name="strictMode">True</param>
        <module name="JobProgressIndicator"/>
        <module name="Paginator">
          <param name="count">10</param>
          <param name="entityName">results</param>
          <module name="EnablePreview">
            <param name="enable">True</param>
            <param name="display">False</param>
            <module name="SimpleResultsTable">
              <param name="drilldown">row</param>
              <param name="entityName">results</param>
              <param name="allowTransformedFieldSelect">True</param>
              <module name="Gimp"/>
              <module name="ConvertToDrilldownSearch">
                <module name="ViewRedirector">
                  <param name="viewTarget">flashtimeline</param>
                </module>
              </module>
            </module>
            <module name="ViewRedirectorLink">
              <param name="viewTarget">flashtimeline</param>
            </module>
          </module>
        </module>
      </module>
    </module>
  </module>
  <module name="HiddenSavedSearch" layoutPanel="panel_row1_col1_grp4" group="test" autoRun="True">
    <param name="savedSearch">Admin - Recent Timestamping Issues</param>
    <param name="groupLabel">test</param>
    <module name="ViewstateAdapter">
      <param name="suppressionList"/>
      <param name="savedSearch">Admin - Recent Timestamping Issues</param>
      <module name="HiddenFieldPicker">
        <param name="strictMode">True</param>
        <module name="JobProgressIndicator"/>
        <module name="Paginator">
          <param name="count">10</param>
          <param name="entityName">results</param>
          <module name="EnablePreview">
            <param name="enable">True</param>
            <param name="display">False</param>
            <module name="SimpleResultsTable">
              <param name="drilldown">row</param>
              <param name="entityName">results</param>
              <param name="allowTransformedFieldSelect">True</param>
              <module name="Gimp"/>
              <module name="ConvertToDrilldownSearch">
                <module name="ViewRedirector">
                  <param name="viewTarget">flashtimeline</param>
                </module>
              </module>
            </module>
            <module name="ViewRedirectorLink">
              <param name="viewTarget">flashtimeline</param>
            </module>
          </module>
        </module>
      </module>
    </module>
  </module>
</view>
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...