Dashboards & Visualizations

Table of "Single value"s

darioapis
Explorer

Hi, I want to have table of single values (single values with indicator of movement(percentage)). The first column is name and the second is the single value. Name should be loaded from csv, for example with inputlookup. The second column should be a result of a new search. So can anyone help me construct some backbone of that search. Main problem would probably be table of single values and how to generate new search with every line in that csv.
Thanks.

0 Karma
1 Solution

woodcock
Esteemed Legend

No, no, no. You should not be generating multiple searches. Generate one big search with many OR clauses and then use the newish Trellis feature:

https://docs.splunk.com/Documentation/Splunk/latest/Viz/VisualizationTrellis

View solution in original post

woodcock
Esteemed Legend

No, no, no. You should not be generating multiple searches. Generate one big search with many OR clauses and then use the newish Trellis feature:

https://docs.splunk.com/Documentation/Splunk/latest/Viz/VisualizationTrellis

darioapis
Explorer

thanks very much 🙂

0 Karma

adonio
Ultra Champion

what is the data looks like? what is the common field for the lookup?
my guess is that you would like to use sparkline as this is the "Indicator of movement" for a table visualizations.
what search have you tried so far?
with all the respect, please give us a little but more
its almost seems like you are asking us to do your homework for you

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...