Dashboards & Visualizations

Use a PostProcessManager within Custom Visualization

diniden
Engager

So for visualizations in general it seems the visualization gets tied to a 'search' which should provide a necessary amount of data for the visualization to render. For the visualization I have in mind, I want there to be a base Search that occurs that provides the baseline data the map should work with, but then I want a PostProcessManager to allow the user to perform additional customizations to the visualization via a splunk query.

Is there any way in the custom visualization pattern to retrieve the id or the SearchManager object that feeds the data into the visualization rather than just work with the raw data? Or is there a way to use a postprocessmanager on the provided raw data into the visualization?

I'm trying to keep this as user customizeable as possible so it'd be great if this worked off of the initial search the user enters when adding the visualization to a panel via the UI.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...