Dashboards & Visualizations

SimpleResultsHeader include intention field in chart title

andrewfl
Engager

I have a form that displays metrics on a single host. The url can include the hostname, or the user can put the hostname into a input field on the page. My "intention" name is HOST and I would like to display this value above charts on the page so screen captures include the host name next to the graph.

Here is my intention defintion (sorry about formatting.. need more Karma!).

<module name="ExtendedFieldSearch" layoutPanel="viewHeader" autoRun="True">

<param name="intention">

<param name="arg">
<param name="HOST">

<param name="default">paehowuw16103</param>

<param name="fillOnEmpty">True</param>

</param></param>

<param name="name">stringreplace</param>

</param>

Is there a way to see what variables are available that can be displayed in the SimpleResultsHeader?

I have a Simple Results Header directly above <module name="HiddenChartFormatter">
$count$ and simple things display fine, I am just not sure how to display the HOST. $click.fields.HOST$ displays null.

<module name="SimpleResultsHeader">

<param name="headerFormat">$count$ results at $time$ for $click.fields.HOST$</param>
<param name="entityName">results</param>
</module>

andrewfl
Engager

I found correct syntax for displaying form field values in the chart header. See page on dynamic drilldowns and the section titled Syntax for specifying destinations and look at click.value and form.token.
http://docs.splunk.com/Documentation/Splunk/latest/Viz/Dynamicdrilldownindashboardsandforms

I NOW have Simple Results Header directly above <module name="HiddenChartFormatter"> that displays result count, nicely formatted time range, and the value of the HOST field on my form.

<module name="SimpleResultsHeader">
<param name="headerFormat">$count$ results at $time$ for $form.HOST$</param>
<param name="entityName">results</param>
</module>

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...