Dashboards & Visualizations

Use a PostProcessManager within Custom Visualization

diniden
Engager

So for visualizations in general it seems the visualization gets tied to a 'search' which should provide a necessary amount of data for the visualization to render. For the visualization I have in mind, I want there to be a base Search that occurs that provides the baseline data the map should work with, but then I want a PostProcessManager to allow the user to perform additional customizations to the visualization via a splunk query.

Is there any way in the custom visualization pattern to retrieve the id or the SearchManager object that feeds the data into the visualization rather than just work with the raw data? Or is there a way to use a postprocessmanager on the provided raw data into the visualization?

I'm trying to keep this as user customizeable as possible so it'd be great if this worked off of the initial search the user enters when adding the visualization to a panel via the UI.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet Splunk Observability Studio: AI-Assisted OpenTelemetry Instrumentation Without ...

Instrumentation is usually the last step or even an afterthought when building out a project. The feature ...

Federated Search for Cisco Security and Analytics Logging (SAL) is now GA on Splunk ...

Federated Search for Cisco  Security Analytics and Logging (SAL) is now generally available as part of the ...

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Join us for a demo-driven look at how ...