Single Value visualization text boxes

[mansel_scheffel]

Hi there,

I am looking to do the following

Create a lookup that will list categories relating to numbers 1 - 4 that will ultimately change the colour of a single value box displaying the category name. IE - Asset management would be the single value viz box on my dashboard(amongst others). I need to split each row from my lookup into its own single value viz displaying the text on the same dashboard page. When this is clicked on it will drilldown(i can do the drilldown).

Part two I need to create header tabs at the top of the dash.. Like the tabs that come at the top of the search and reporting app ( search, pivot, reports etc) with my own values, which will open a page once clicked on.

Any thoughts?

[mporath_splunk · Accepted solution]

Question 1 (Single Value)
At this moment it's not possible to dynamically create Single Value visualizations (or dashboard panels in general). You'll have to manually create a Single Value for each row, adjusting the query for each. You could do that with a query like so:

| inputlookup your_lookup.csv  | streamstats count as row_number | where row_number = 1 | fields - row_number
| inputlookup your_lookup.csv  | streamstats count as row_number | where row_number = 2 | fields - row_number
| inputlookup your_lookup.csv  | streamstats count as row_number | where row_number = 3 | fields - row_number

etc.

Question 2 (Dashboard tabs)
Create your own app with any resources you need (as opposed to using the Search & Reporting app). In your app you can create a $SPLUNK_HOME/etc/apps/your_app_name/default/data/ui/nav/default.xml file, as described in http://dev.splunk.com/view/webframework-developapps/SP-CAAAEP9