Dashboards & Visualizations

Use a PostProcessManager within Custom Visualization

diniden
Engager

So for visualizations in general it seems the visualization gets tied to a 'search' which should provide a necessary amount of data for the visualization to render. For the visualization I have in mind, I want there to be a base Search that occurs that provides the baseline data the map should work with, but then I want a PostProcessManager to allow the user to perform additional customizations to the visualization via a splunk query.

Is there any way in the custom visualization pattern to retrieve the id or the SearchManager object that feeds the data into the visualization rather than just work with the raw data? Or is there a way to use a postprocessmanager on the provided raw data into the visualization?

I'm trying to keep this as user customizeable as possible so it'd be great if this worked off of the initial search the user enters when adding the visualization to a panel via the UI.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...