Dashboards & Visualizations

SimpleResultsHeader include intention field in chart title

andrewfl
Engager

I have a form that displays metrics on a single host. The url can include the hostname, or the user can put the hostname into a input field on the page. My "intention" name is HOST and I would like to display this value above charts on the page so screen captures include the host name next to the graph.

Here is my intention defintion (sorry about formatting.. need more Karma!).

<module name="ExtendedFieldSearch" layoutPanel="viewHeader" autoRun="True">

<param name="intention">

<param name="arg">
<param name="HOST">

<param name="default">paehowuw16103</param>

<param name="fillOnEmpty">True</param>

</param></param>

<param name="name">stringreplace</param>

</param>

Is there a way to see what variables are available that can be displayed in the SimpleResultsHeader?

I have a Simple Results Header directly above <module name="HiddenChartFormatter">
$count$ and simple things display fine, I am just not sure how to display the HOST. $click.fields.HOST$ displays null.

<module name="SimpleResultsHeader">

<param name="headerFormat">$count$ results at $time$ for $click.fields.HOST$</param>
<param name="entityName">results</param>
</module>

andrewfl
Engager

I found correct syntax for displaying form field values in the chart header. See page on dynamic drilldowns and the section titled Syntax for specifying destinations and look at click.value and form.token.
http://docs.splunk.com/Documentation/Splunk/latest/Viz/Dynamicdrilldownindashboardsandforms

I NOW have Simple Results Header directly above <module name="HiddenChartFormatter"> that displays result count, nicely formatted time range, and the value of the HOST field on my form.

<module name="SimpleResultsHeader">
<param name="headerFormat">$count$ results at $time$ for $form.HOST$</param>
<param name="entityName">results</param>
</module>

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...