Dashboards & Visualizations

What does this mean "Search was not dispatched. To adjust search dispatch settings, edit the dashboard XML"?

supraja
Path Finder

Hi Team,

 

i  tried created a dashboard with tab view. 

used linklist to create a tabs. i would like to load the panels only when linked tab is clicked. 

could some one please suggest me on how to achieve that .

 

<form theme="dark">
<label>search_depends</label>
<description>test</description>
<init>
<unset token="dont_run"></unset>
<set token="run"></set>
</init>
<fieldset submitButton="false">
<input type="link" token="tok_tabs">
<label>tabs</label>
<choice value="panel1">panel1</choice>
<choice value="panel2">panel2</choice>
<default>DataAnalysis</default>
<change>
<condition value="panel1">
<set token="panel1">true</set>
<unset token="panel2"></unset>
</condition>
<condition value="panel2">
<set token="panel2">true</set>
<unset token="panel1"></unset>
</condition>
</change>
</input>
</fieldset>
<row depends="$panel1$">
<panel>
<single>
<title>load only panel1</title>
<search depends="$run$" id="dont_run">
<query>|makeresults|eval data="Can you see me?!"</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
<option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
<option name="refresh.display">progressbar</option>
<option name="underLabel"># tickets closed last month</option>
</single>
</panel>
</row>
<row depends="$panel2$">
<panel>
<single>
<title>load only panel2</title>
<search depends="$dont_run$" id="run">
<query>|makeresults|eval data="Can you see me?!"</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
<option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
<option name="refresh.display">progressbar</option>
<option name="underLabel"># tickets closed last month</option>
</single>
</panel>
</row>
</form>

 

Labels (1)
Tags (1)
0 Karma

supraja
Path Finder
0 Karma

YouWereOutraged
Loves-to-Learn

Would this solve the problem? 

<form theme="dark" version="1.2">
  <label>search_depends</label>
  <description>test</description>
  #<init>
   # <unset token="dont_run"></unset>
  #  <set token="run"></set>
  #</init>
  <fieldset submitButton="false">
    <input type="link" token="tok_tabs">
      <label>tabs</label>
      <choice value="panel1">panel1</choice>
      <choice value="panel2">panel2</choice>
      <choice value="panel3">panel3</choice>
      <default>DataAnalysis</default>
      <change>
        <condition value="panel1">
          <set token="panel1">true</set>
          <unset token="panel2"></unset>
          <unset token="panel3"></unset>
        </condition>
        <condition value="panel2">
          <set token="panel2">true</set>
          <unset token="panel1"></unset>
          <unset token="panel3"></unset>
        </condition>
        <condition value="panel3">
          <set token="panel3">true</set>
          <unset token="panel1"></unset>
          <unset token="panel2"></unset>
        </condition>
      </change>
    </input>
  </fieldset>
  <row depends="$panel1$">
    <panel>
      <single>
        <title>load only panel1</title>
        <search depends="$panel1$" id="signins">
          <query>|makeresults|eval data="Can you see me?!"</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
        <option name="refresh.display">progressbar</option>
        <option name="underLabel"># tickets closed last month</option>
      </single>
    </panel>
  </row>
  <row depends="$panel2$">
    <panel>
      <single>
        <title>load only panel2</title>
        <search depends="$panel2$" id="operations">
          <query>|makeresults|eval data="Can you see me?!"</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
        <option name="refresh.display">progressbar</option>
        <option name="underLabel"># tickets closed last month</option>
      </single>
    </panel>
  </row>
  <row depends="$panel3$">
    <panel>
      <single>
        <title>load only panel3</title>
        <search depends="$panel3$" id="usecases">
          <query>|makeresults|eval data="Can you see me?!"</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
        <option name="refresh.display">progressbar</option>
        <option name="underLabel"># tickets closed last month</option>
      </single>
    </panel>
  </row>
</form>
0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...