Dashboards & Visualizations

Single Value in a Module

matthewcanty
Communicator

I've been trying to get round the issue of only being able to have 3 columns in dashboards. After looking through views I've ended up a bit lost.

The following search is working but the result is a grey button.





host="90" sourcetype="Perfmon*" instance="Spin." collection="Process" | stats distinct_count(host) As d | eval a=round(d/6*100, 0) | stats sum(a) as sumA | rangemap field=sumA low=99-100 elevated=50-98 severe=0-49 default=0
Prod Services
-30s
now
sumA
%
range
10


How do I get this to work?

Tags (1)
0 Karma
1 Solution

matthewcanty
Communicator




host="90" sourcetype="Perfmon*" instance="Spin." collection="Process"

-1m

<module name="HiddenPostProcess" layoutPanel="panel_row1_col1_grp1">
  <param name="search">
  search host="*TSDAL" | stats distinct_count(host) As d | eval a=round(d/2*100, 0) 
  | stats sum(a) as sumA | fields sumA | rangemap field=sumA low=99-100 elevated=50-98 severe=0-49 default=0
  </param>

  <module name="SingleValue">
    <param name="field">sumA</param>
    <param name="afterLabel">%</param>
    <param name="classField">range</param>
  </module>

</module>



View solution in original post

matthewcanty
Communicator




host="90" sourcetype="Perfmon*" instance="Spin." collection="Process"

-1m

<module name="HiddenPostProcess" layoutPanel="panel_row1_col1_grp1">
  <param name="search">
  search host="*TSDAL" | stats distinct_count(host) As d | eval a=round(d/2*100, 0) 
  | stats sum(a) as sumA | fields sumA | rangemap field=sumA low=99-100 elevated=50-98 severe=0-49 default=0
  </param>

  <module name="SingleValue">
    <param name="field">sumA</param>
    <param name="afterLabel">%</param>
    <param name="classField">range</param>
  </module>

</module>



matthewcanty
Communicator

BTW the code formatting on this site went haywire with the XML. That is why it is standard format.

0 Karma
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk &#43; Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...