Dashboards & Visualizations

Use a PostProcessManager within Custom Visualization

diniden
Engager

So for visualizations in general it seems the visualization gets tied to a 'search' which should provide a necessary amount of data for the visualization to render. For the visualization I have in mind, I want there to be a base Search that occurs that provides the baseline data the map should work with, but then I want a PostProcessManager to allow the user to perform additional customizations to the visualization via a splunk query.

Is there any way in the custom visualization pattern to retrieve the id or the SearchManager object that feeds the data into the visualization rather than just work with the raw data? Or is there a way to use a postprocessmanager on the provided raw data into the visualization?

I'm trying to keep this as user customizeable as possible so it'd be great if this worked off of the initial search the user enters when adding the visualization to a panel via the UI.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Catalog Is Now Generally Available on Splunk Cloud Platform

A Unified View of Your Data  Security logs, application events, business data, and historical telemetry often ...

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Watch on demand us for a demo-driven ...