Hi, I want to have table of single values (single values with indicator of movement(percentage)). The first column is name and the second is the single value. Name should be loaded from csv, for example with inputlookup. The second column should be a result of a new search. So can anyone help me construct some backbone of that search. Main problem would probably be table of single values and how to generate new search with every line in that csv.
Thanks.
No, no, no. You should not be generating multiple searches. Generate one big search with many OR
clauses and then use the newish Trellis
feature:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/VisualizationTrellis
No, no, no. You should not be generating multiple searches. Generate one big search with many OR
clauses and then use the newish Trellis
feature:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/VisualizationTrellis
thanks very much 🙂
what is the data looks like? what is the common field for the lookup?
my guess is that you would like to use sparkline
as this is the "Indicator of movement" for a table visualizations.
what search have you tried so far?
with all the respect, please give us a little but more
its almost seems like you are asking us to do your homework for you