Dashboards & Visualizations

Use a PostProcessManager within Custom Visualization

diniden
Engager

So for visualizations in general it seems the visualization gets tied to a 'search' which should provide a necessary amount of data for the visualization to render. For the visualization I have in mind, I want there to be a base Search that occurs that provides the baseline data the map should work with, but then I want a PostProcessManager to allow the user to perform additional customizations to the visualization via a splunk query.

Is there any way in the custom visualization pattern to retrieve the id or the SearchManager object that feeds the data into the visualization rather than just work with the raw data? Or is there a way to use a postprocessmanager on the provided raw data into the visualization?

I'm trying to keep this as user customizeable as possible so it'd be great if this worked off of the initial search the user enters when adding the visualization to a panel via the UI.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...