Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Table of "Single value"s
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi, I want to have table of single values (single values with indicator of movement(percentage)). The first column is name and the second is the single value. Name should be loaded from csv, for example with inputlookup. The second column should be a result of a new search. So can anyone help me construct some backbone of that search. Main problem would probably be table of single values and how to generate new search with every line in that csv.
Thanks.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
No, no, no. You should not be generating multiple searches. Generate one big search with many OR clauses and then use the newish Trellis feature:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/VisualizationTrellis
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
No, no, no. You should not be generating multiple searches. Generate one big search with many OR clauses and then use the newish Trellis feature:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/VisualizationTrellis
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
thanks very much 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
what is the data looks like? what is the common field for the lookup?
my guess is that you would like to use sparkline as this is the "Indicator of movement" for a table visualizations.
what search have you tried so far?
with all the respect, please give us a little but more
its almost seems like you are asking us to do your homework for you
Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain
Splunk Lantern’s Guide to The Most Popular .conf25 Sessions
Unlock What’s Next: The Splunk Cloud Platform at .conf25
